13 votes

Can I store the names of arbitrary business associates in my CRM system?

The GDPR does not outlaw such processing of personal data. It merely regulates how and for what purposes you can process personal data. In general, you can conduct any processing activity as long as ...
user avatar
  • 17.1k
5 votes

Can I store the names of arbitrary business associates in my CRM system?

The answer by Amon is quite correct. But I want to mention a few other GDPR requirements. When a Data Controller (DC) first acquires Personal Data (PD) about a Data Subject (DS), the DC must send the ...
user avatar
  • 89.7k
5 votes
Accepted

What content is banned in Germany in WhatsApp profile pictures?

There is no exhaustive list of material banned specifically in WhatsApp profile pictures, but there is an exhaustive list of crimes that § 140 StGB applies to: Whoever rewards or approves of ...
user avatar
  • 17.1k
1 vote

GDPR - asking for consent indefinitely if respondent says no, until respondent say yes by exhaustion. Confirming choices allegedly forcing behaviour?

This doesn't sound very GDPR-compliant, but the GDPR provides insufficiently concrete guidance. Consent as defined by the GDPR must be freely given. If dark patterns are applied to coerce the user ...
user avatar
  • 17.1k
1 vote

Limits of automated decision making WRT workplace surveys

Workplace surveys aren't ATM, which is good because ATM wouldn't be permissible in a workplace context. The GDPR's concept of automated decision making (ADM) refers to decisions that are based solely ...
user avatar
  • 17.1k

Only top scored, non community-wiki answers of a minimum length are eligible