Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://eupolicy.social/users/mario/statuses/113623328072432134">Mario Restuccia (mario@eupolicy.social)'s status on Tuesday, 10-Dec-2024 03:10:38 JST</a><a href="https://eupolicy.social/@mario" title="mario@eupolicy.social"><img src="https://gnusocial.jp/avatar/300819-48-20241127172742.webp" width="48" height="48" alt="Mario Restuccia" style="position: absolute; left: 0; top: 0;">Mario Restuccia</a></section><article><p>My <a href="https://eupolicy.social/tags/GDPR" rel="tag">#GDPR</a> adventure of today: I sent a data erasure request to the DPO of an airline, and I got this reply.</p><p>They claim they cannot process data requests that are not sent via the online form. I think this violates Article 12(2) of the GDPR. Let's see who is right!</p><p>Also, the form is broken because of course their website thinks I'm a bot.</p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4153899#notice-8118625">In conversation</a><time datetime="2024-12-10T03:10:38+09:00" title="Tuesday, 10-Dec-2024 03:10:38 JST">about 4 months ago</time> <span>from <span><a href="https://eupolicy.social/@mario/113623328072432134" rel="external" title="Sent from eupolicy.social via ActivityPub">eupolicy.social</a></span></span><a href="https://eupolicy.social/@mario/113623328072432134">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/3663915">Screenshot of an email with the following text:Dear Sir/Madam,Thank you for your email. We process privacy related questions as soon as possible.Request to access or delete personal data
If you would like to submit a request to access or delete your personal data, we ask you to make use of our webform. This webform can be found here (link)Requests to access or delete personal data will not be processed if they are submitted via this email address.</a></label><br><a href="https://eupolicy.social/system/media_attachments/files/113/623/319/625/190/269/original/85532bb045ac4bc9.png" rel="external">https://eupolicy.social/system/media_attachments/files/113/623/319/625/190/269/original/85532bb045ac4bc9.png</a></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Mario Restuccia (mario@eupolicy.social)'s status on Tuesday, 10-Dec-2024 03:10:38 JST Mario Restuccia
My #GDPR adventure of today: I sent a data erasure request to the DPO of an airline, and I got this reply.
They claim they cannot process data requests that are not sent via the online form. I think this violates Article 12(2) of the GDPR. Let's see who is right!
Also, the form is broken because of course their website thinks I'm a bot.
In conversationabout 4 months ago from eupolicy.socialpermalink
Attachments
1. Screenshot of an email with the following text: Dear Sir/Madam, Thank you for your email. We process privacy related questions as soon as possible. Request to access or delete personal data If you would like to submit a request to access or delete your personal data, we ask you to make use of our webform. This webform can be found here (link) Requests to access or delete personal data will not be processed if they are submitted via this email address.
  https://eupolicy.social/system/media_attachments/files/113/623/319/625/190/269/original/85532bb045ac4bc9.png

Public

Embed Notice

HTML Code

Corresponding Notice