3 ms·

You can always shoot a couple of GDPR data requests... And you can use cash for sensitive purchases.

by blub 7y ago

HenryBemis 7y ago
As GDPR Data Requests go, the following "GDPR Nightmare Letter" has impressed me since it came out 2 years ago: https://www.linkedin.com/pulse/nightmare-letter-subject-access-request-under-gdpr-karbaliotis https://www.linkedin.com/pulse/nightmare-letter-subject-acce... Of course this is an overkill, but it gives a good starting point - feel free to reduce it to serve your needs.
- yoz-y 7y ago
  From some discussions about this letter I gather that it can be easily dismissed by court because it reeks of "bad faith" and not a legitimate concern.
  - vageli 7y ago
    > From some discussions about this letter I gather that it can be easily dismissed by court because it reeks of "bad faith" and not a legitimate concern. Do you have more details about which particular sections "reek of bad faith"?
    - yoz-y 7y ago
      It's not any particular section, rather the tone and the breadth. One easy answer to such a letter is "please read our privacy policy and come back when you have more specific questions". Your company's privacy policy should cover almost all of the "concerns" covered in this letter. Bad faith comes from the fact that a sender of such a letter has, quite obviously, done zero due diligence. The spirit of GDPR is not to fuck with everybody around, it is to force companies to be more responsible overall. This is why those OATH and similar dialogs are so jarring, the correct implementation should be opt out by default without being bothered every time one visits a website.
maxheadroom 7y ago
>And you can use cash for sensitive purchases. This isn't always a viable option. For example, in Sweden, we have stores that are kontantfri (cash-free) and it's projected that almost all of Sweden will be cash-free by 2023[0] to 2025[1]. (Sorry the links are in Swedish but you should be able to use <your chosen provider here> to translate them to your language.) Given that the nordics tend to trend together, I imagine that Denmark is relatively along the same path to being cash-free, as well. I think a better (but more complicated) alternative would be to use two different SIMs for separating those apps from an every-day number; however, that comes with the problem of carrying a second phone. Dual-SIM would just present a surface to tie the two numbers together but so would the two phones being in the same area (in proximity of each other) almost all of the time. In other words, I don't really know how to solve this problem because it depends on everyone else not jumping on the bandwagon; however, to your suggestion, cash will not be a viable option for any purchases - much less, sensitive ones - in the very near future. [0] - https://computersweden.idg.se/2.2683/1.690197/kontanter-slut-datum https://computersweden.idg.se/2.2683/1.690197/kontanter-slut... [1] - https://www.compricer.se/nyheter/artikel/24-mars-2023--da-ar-det-stopp-for-kontanter/ https://www.compricer.se/nyheter/artikel/24-mars-2023--da-ar...
- cobbzilla 7y ago
  Could you buy pre-paid credit cards with cash? then use a different one each month/week/day depending on your level of concern?
  - dangerface 7y ago
    Pre paid cards need to be registered before you can use them, so they have all the same details as just using your cc. Faking these details is fraud.
    - cobbzilla 7y ago
      While it may technically be fraud, the registration information for non-reloadable cards is only a name and address, which is not verified. If the processor uses an AVS check (in the US, this is usually just the ZIP code), then whatever you enter must match what you registered with, but that could be... whatever. When one considers how fat the deck is stacked against individual consumers in today's market, I would be inclined to tolerate some Thoreau-style civil disobedience on this. The desire for privacy -- to effectively "use cash" at "cashless" establishments -- may require the need to engage in this activity. The other question would be, who is being damaged by this fraud? Presumably the seller of the card (and banks/processors in between), who would like to link all your card purchases to some master profile. Well, I wouldn't begrudge anyone with disobedience on that one too. They're still collecting fees on every purchase.

You can always shoot a couple of GDPR data requests... And you can use cash for sensitive purchases.

by blub 7y ago

You can always shoot a couple of GDPR data requests... And you can use cash for sensitive purchases.

As GDPR Data Requests go, the following "GDPR Nightmare Letter" has impressed me since it came out 2 years ago: https://www.linkedin.com/pulse/nightmare-letter-subject-access-request-under-gdpr-karbaliotis https://www.linkedin.com/pulse/nightmare-letter-subject-acce... Of course this is an overkill, but it gives a good starting point - feel free to reduce it to serve your needs.

yoz-y 7y ago
From some discussions about this letter I gather that it can be easily dismissed by court because it reeks of "bad faith" and not a legitimate concern.
- vageli 7y ago
  > From some discussions about this letter I gather that it can be easily dismissed by court because it reeks of "bad faith" and not a legitimate concern. Do you have more details about which particular sections "reek of bad faith"?
  - yoz-y 7y ago
    It's not any particular section, rather the tone and the breadth. One easy answer to such a letter is "please read our privacy policy and come back when you have more specific questions". Your company's privacy policy should cover almost all of the "concerns" covered in this letter. Bad faith comes from the fact that a sender of such a letter has, quite obviously, done zero due diligence. The spirit of GDPR is not to fuck with everybody around, it is to force companies to be more responsible overall. This is why those OATH and similar dialogs are so jarring, the correct implementation should be opt out by default without being bothered every time one visits a website.

maxheadroom 7y ago

>And you can use cash for sensitive purchases. This isn't always a viable option. For example, in Sweden, we have stores that are kontantfri (cash-free) and it's projected that almost all of Sweden will be cash-free by 2023[0] to 2025[1]. (Sorry the links are in Swedish but you should be able to use <your chosen provider here> to translate them to your language.) Given that the nordics tend to trend together, I imagine that Denmark is relatively along the same path to being cash-free, as well. I think a better (but more complicated) alternative would be to use two different SIMs for separating those apps from an every-day number; however, that comes with the problem of carrying a second phone. Dual-SIM would just present a surface to tie the two numbers together but so would the two phones being in the same area (in proximity of each other) almost all of the time. In other words, I don't really know how to solve this problem because it depends on everyone else not jumping on the bandwagon; however, to your suggestion, cash will not be a viable option for any purchases - much less, sensitive ones - in the very near future. [0] - https://computersweden.idg.se/2.2683/1.690197/kontanter-slut-datum https://computersweden.idg.se/2.2683/1.690197/kontanter-slut... [1] - https://www.compricer.se/nyheter/artikel/24-mars-2023--da-ar-det-stopp-for-kontanter/ https://www.compricer.se/nyheter/artikel/24-mars-2023--da-ar...

cobbzilla 7y ago
Could you buy pre-paid credit cards with cash? then use a different one each month/week/day depending on your level of concern?
- dangerface 7y ago
  Pre paid cards need to be registered before you can use them, so they have all the same details as just using your cc. Faking these details is fraud.
  - cobbzilla 7y ago
    While it may technically be fraud, the registration information for non-reloadable cards is only a name and address, which is not verified. If the processor uses an AVS check (in the US, this is usually just the ZIP code), then whatever you enter must match what you registered with, but that could be... whatever. When one considers how fat the deck is stacked against individual consumers in today's market, I would be inclined to tolerate some Thoreau-style civil disobedience on this. The desire for privacy -- to effectively "use cash" at "cashless" establishments -- may require the need to engage in this activity. The other question would be, who is being damaged by this fraud? Presumably the seller of the card (and banks/processors in between), who would like to link all your card purchases to some master profile. Well, I wouldn't begrudge anyone with disobedience on that one too. They're still collecting fees on every purchase.