4 ms·
> The criterium for whether a non-EU company needs to comply to GDPR is: does the company intent to seriously service EU citizen? This is determined based on mu
by fwdpropaganda 8y ago
> The criterium for whether a non-EU company needs to comply to GDPR is: does the company intent to seriously service EU citizen? This is determined based on multiple factors, such as the website's language (do they have e.g. German translations?), providing pricing in euros, testimonials from EU customers, or having a contract with a parcel company with the specific intention of delivering to EU customers. The mere fact that the website can be used by an EU citizen is not enough to have it fall under the GDPR.
Hey, thanks a lot for this. It seems these days the noise is larger than the signal. Hard to find anyone putting careful thought into this. Thank you.
- cdjk 8y agoThe blog post references a secondary source in Dutch. I’d be careful before relying on that for legal advice.
- FooBarWidget 8y agoSaid secondary source however is written by a lawyer. A lawyer specialized in IT even.
- cdjk 8y agoI would be careful relying on legal advice from a lawyer who is not your lawyer.
- FooBarWidget 8y agoThat is not under dispute. Of course you should be careful with legal advice that isn't tailored for your specific situation. My comment does not contradict that notion. The content of the book also does not contradict that notion. The book explains the general situation and gives generic advice. But even generic advice is useful to a degree. It does not replace seeking specific advice from a lawyer, but it does complement it. Specific and generic advice are not mutually exclusive.