Hot answers tagged

40

GDPR does not cease to apply because of the location of data storage. It applies based on the location of the data processor, data controller, and data subject. If you are in the EU, you are a data subject covered by GDPR. It does not matter where the data are stored. Note that you are asked to confirm that you're aware that US laws may be less ...


26

GDPR consent must be freely given The GDPR conditions for consent define it as (article 4.11) "‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to ...


4

GDPR puts several requirements on a company to be compliant. Among these is the requirement to seek informed consent from the data subject, ie. you, to store and use data. As such the waiver you are asked to agree does not seem to be an attempt to bypass GDPR, but rather explicitly following the letter of the law. Please note the following; You are not ...


4

The GDPR is about "processing" not "storing", so your actions definitely fall under the GDPR. Also you have stored the email address and the email you sent in your "Sent" folder. You need to reply with all the information you have associated with that email address. This will at least be the email you already sent. If you scraped the email address from ...


3

You are violating anti-SPAM law in many jurisdictions how I'll send marketing email! You can’t - it’s illegal in the US, Europe, Australia etc. to send unsolicited marketing emails.


2

Certainly. That said, though there are plenty of separate compliance issues raised by the question, most are easily soluble. But everything is contextual. To illustrate analytical technique used, let us reuse the example given in another answer[EDIT: apologies, on reflection I meant the clarifying comment I think was placed by the OP], the email about head-...


1

Why do you think you are required to delete it? For example Article 7 of the GDPR has an exemption (among many others): for the establishment, exercise or defence of legal claims.


1

Respectfully: some other answers impliedly assume the question engages GDPR issues. It doesn't!!! The correct answer is: "not a snowball's chance in hell". Why? Because the question actually confronts the rule of law which as meta-law, surprise surprise, aborts any other legal issue. Any agreement between data subjects and controllers is private law. The ...


1

Consent is a lawfuls basis for processing both sensitive data and for transferring data overseas. Providing consent does not give the data controller the ability to ignore your rights under GDPR, nor is this organisation implying this, so I expect you would have some assurance. The issue with the solution provided here is that to be lawful under GDPR ...


1

Respectfully, I would dissent from both legs of amon's answer, for multiple reasons. SHORT ANSWER As to contact details, in this instance Steam should provide two or more methods of contact, at least one of which must be electronic. The electronic point applies to almost all controllers; the multiple methods point applies only to a few, which likely ...


Only top voted, non community-wiki answers of a minimum length are eligible