4 ms·

I appreciate the sentiment, but unfortunately your website is quite misleading. For example, subjects do not have an absolute right to erasure, even under GDPR,

I appreciate the sentiment, but unfortunately your website is quite misleading. For example, subjects do not have an absolute right to erasure, even under GDPR, but your detailed comments about this are hidden in your FAQ while your main introductory paragraph clearly says something very different. Your letter template also has a few problems. The date is not in European format. The content itself appears to be conflating different subject rights in a confusing way. It also refers to some contact methods but doesn't include all of the necessary details to use them. Please be careful getting involved with legal matters if you're not sure what you're doing. You could cause real trouble for all involved if people think they have rights they don't and start trying to make a big deal of it.

rapnie 8y ago
Yes, and additionally for a request to any site to be made, one has to fill in their home address (apparently to verify I you are living in the EU). Whether the request succeeds or fails, the company it is made to now has email + address to link to my identity.
- yoaviram 8y ago
  Thanks for the feedback, we've launched not too long ago. We'll be removing the requirement to provide a home address in the near future.
  - rapnie 8y ago
    Very nice to hear. And thank you for being so open to feedback :)
yoaviram 8y ago
Thanks for the feedback! You have a point about the opening paragraph, do you have a better suggestion? The GDPR has a lot of "edge cases", which is why we placed the FAQ on the homepage and reference it throughout. The email template was reviewed by legal experts, I'd love hear your specific concerns. This is a free and open source project, maybe you can open an issue or a pull request on our github repo? Link is in the about page.
- Silhouette 8y ago
  I'd suggest just being a little less heavy-handed in the wording. As written, I think your introduction will make many people think they have an absolute right to have their data removed, even if it's legitimately being collected and processed on a basis other than consent. It seems clear that you understand this is not really the case, as you do cover that in your FAQ, but perhaps the introduction could be altered to be less confrontational in style? For the email, I'd suggest fine-tuning a few things. Numerical dates in European countries are typically given in D/M/Y order rather than the US-style M/D/Y, but the ambiguity could be avoided entirely by writing the month out in full, for example. Also, I wouldn't invite contact by methods where you haven't provided the necessary details, but IIRC your email template mentioned calling but without giving a phone number. If nothing else, these sorts of mistakes make such an email look less credible, which surely isn't going to encourage a positive response.
  - yoaviram 8y ago
    Thank you for taking the time to provide the feedback. We'll definitely take it on board.

rapnie 8y ago

Yes, and additionally for a request to any site to be made, one has to fill in their home address (apparently to verify I you are living in the EU). Whether the request succeeds or fails, the company it is made to now has email + address to link to my identity.

yoaviram 8y ago
Thanks for the feedback, we've launched not too long ago. We'll be removing the requirement to provide a home address in the near future.
- rapnie 8y ago
  Very nice to hear. And thank you for being so open to feedback :)

yoaviram 8y ago

Thanks for the feedback! You have a point about the opening paragraph, do you have a better suggestion? The GDPR has a lot of "edge cases", which is why we placed the FAQ on the homepage and reference it throughout. The email template was reviewed by legal experts, I'd love hear your specific concerns. This is a free and open source project, maybe you can open an issue or a pull request on our github repo? Link is in the about page.

Silhouette 8y ago
I'd suggest just being a little less heavy-handed in the wording. As written, I think your introduction will make many people think they have an absolute right to have their data removed, even if it's legitimately being collected and processed on a basis other than consent. It seems clear that you understand this is not really the case, as you do cover that in your FAQ, but perhaps the introduction could be altered to be less confrontational in style? For the email, I'd suggest fine-tuning a few things. Numerical dates in European countries are typically given in D/M/Y order rather than the US-style M/D/Y, but the ambiguity could be avoided entirely by writing the month out in full, for example. Also, I wouldn't invite contact by methods where you haven't provided the necessary details, but IIRC your email template mentioned calling but without giving a phone number. If nothing else, these sorts of mistakes make such an email look less credible, which surely isn't going to encourage a positive response.
- yoaviram 8y ago
  Thank you for taking the time to provide the feedback. We'll definitely take it on board.