4 ms·

If you really want a website to erase your data use a service like http://opt-out.eu http://opt-out.eu (disclaimer: I'm one of the creators)

amelius 8y ago
Looks interesting. But what we really need is to erase our data from companies of which we are not aware that they have our data. There has been a lot of data brokerage going on in recent years. https://en.wikipedia.org/wiki/Information_broker https://en.wikipedia.org/wiki/Information_broker
- yoaviram 8y ago
  We're working on providing a list of these data brookes (companies that provide no value to you but still collect and sell your data) so that you can easily it out of them.
  - amelius 8y ago
    Would it be possible to automate the opt-out process, so that the user has to fill out a form only once?
    - yoaviram 8y ago
      We're considering enabling sending requests in bulk, but need to balance that with the desire not make it to easy to abuse the service.
    - aldoushuxley001 8y ago
      That's a million-dollar idea right there if it could be feasibly implemented.
Silhouette 8y ago
I appreciate the sentiment, but unfortunately your website is quite misleading. For example, subjects do not have an absolute right to erasure, even under GDPR, but your detailed comments about this are hidden in your FAQ while your main introductory paragraph clearly says something very different. Your letter template also has a few problems. The date is not in European format. The content itself appears to be conflating different subject rights in a confusing way. It also refers to some contact methods but doesn't include all of the necessary details to use them. Please be careful getting involved with legal matters if you're not sure what you're doing. You could cause real trouble for all involved if people think they have rights they don't and start trying to make a big deal of it.
- rapnie 8y ago
  Yes, and additionally for a request to any site to be made, one has to fill in their home address (apparently to verify I you are living in the EU). Whether the request succeeds or fails, the company it is made to now has email + address to link to my identity.
  - yoaviram 8y ago
    Thanks for the feedback, we've launched not too long ago. We'll be removing the requirement to provide a home address in the near future.
    - rapnie 8y ago
      Very nice to hear. And thank you for being so open to feedback :)
- yoaviram 8y ago
  Thanks for the feedback! You have a point about the opening paragraph, do you have a better suggestion? The GDPR has a lot of "edge cases", which is why we placed the FAQ on the homepage and reference it throughout. The email template was reviewed by legal experts, I'd love hear your specific concerns. This is a free and open source project, maybe you can open an issue or a pull request on our github repo? Link is in the about page.
  - Silhouette 8y ago
    I'd suggest just being a little less heavy-handed in the wording. As written, I think your introduction will make many people think they have an absolute right to have their data removed, even if it's legitimately being collected and processed on a basis other than consent. It seems clear that you understand this is not really the case, as you do cover that in your FAQ, but perhaps the introduction could be altered to be less confrontational in style? For the email, I'd suggest fine-tuning a few things. Numerical dates in European countries are typically given in D/M/Y order rather than the US-style M/D/Y, but the ambiguity could be avoided entirely by writing the month out in full, for example. Also, I wouldn't invite contact by methods where you haven't provided the necessary details, but IIRC your email template mentioned calling but without giving a phone number. If nothing else, these sorts of mistakes make such an email look less credible, which surely isn't going to encourage a positive response.
lostmsu 8y ago
Does it do anything for non-EU residents?

amelius 8y ago

Looks interesting. But what we really need is to erase our data from companies of which we are not aware that they have our data. There has been a lot of data brokerage going on in recent years. https://en.wikipedia.org/wiki/Information_broker https://en.wikipedia.org/wiki/Information_broker

yoaviram 8y ago
We're working on providing a list of these data brookes (companies that provide no value to you but still collect and sell your data) so that you can easily it out of them.
- amelius 8y ago
  Would it be possible to automate the opt-out process, so that the user has to fill out a form only once?
  - yoaviram 8y ago
    We're considering enabling sending requests in bulk, but need to balance that with the desire not make it to easy to abuse the service.
  - aldoushuxley001 8y ago
    That's a million-dollar idea right there if it could be feasibly implemented.

Silhouette 8y ago

I appreciate the sentiment, but unfortunately your website is quite misleading. For example, subjects do not have an absolute right to erasure, even under GDPR, but your detailed comments about this are hidden in your FAQ while your main introductory paragraph clearly says something very different. Your letter template also has a few problems. The date is not in European format. The content itself appears to be conflating different subject rights in a confusing way. It also refers to some contact methods but doesn't include all of the necessary details to use them. Please be careful getting involved with legal matters if you're not sure what you're doing. You could cause real trouble for all involved if people think they have rights they don't and start trying to make a big deal of it.

rapnie 8y ago
Yes, and additionally for a request to any site to be made, one has to fill in their home address (apparently to verify I you are living in the EU). Whether the request succeeds or fails, the company it is made to now has email + address to link to my identity.
- yoaviram 8y ago
  Thanks for the feedback, we've launched not too long ago. We'll be removing the requirement to provide a home address in the near future.
  - rapnie 8y ago
    Very nice to hear. And thank you for being so open to feedback :)
yoaviram 8y ago
Thanks for the feedback! You have a point about the opening paragraph, do you have a better suggestion? The GDPR has a lot of "edge cases", which is why we placed the FAQ on the homepage and reference it throughout. The email template was reviewed by legal experts, I'd love hear your specific concerns. This is a free and open source project, maybe you can open an issue or a pull request on our github repo? Link is in the about page.
- Silhouette 8y ago
  I'd suggest just being a little less heavy-handed in the wording. As written, I think your introduction will make many people think they have an absolute right to have their data removed, even if it's legitimately being collected and processed on a basis other than consent. It seems clear that you understand this is not really the case, as you do cover that in your FAQ, but perhaps the introduction could be altered to be less confrontational in style? For the email, I'd suggest fine-tuning a few things. Numerical dates in European countries are typically given in D/M/Y order rather than the US-style M/D/Y, but the ambiguity could be avoided entirely by writing the month out in full, for example. Also, I wouldn't invite contact by methods where you haven't provided the necessary details, but IIRC your email template mentioned calling but without giving a phone number. If nothing else, these sorts of mistakes make such an email look less credible, which surely isn't going to encourage a positive response.

lostmsu 8y ago

Does it do anything for non-EU residents?