3 ms·

crunchbase is one such place. they harvested everything from my LinkedIn, I asked them to remove my profile they say it's not possible unless I also send them a

crunchbase is one such place. they harvested everything from my LinkedIn, I asked them to remove my profile they say it's not possible unless I also send them additional data (scan of my passport). they say it's impossible to remove my info because it is "crowd sourced" which may be the case today but from the data they have on me it is from when they had no users yet and when they scraped sh!t from linkedin: * Hello, To comply with various privacy laws, we require the completion of this form to remove the person profile you have mentioned. If you would like to delete your personal profile page, please complete this form here. Best, Erika ---- Dear Erika, thank you for the information. I have never signed up to this site and therefore do _not_ consent to any information about me being stored on your systems and I do not care who creates these profiles. It is your responsibility under GDPR not to store information about me without my explicit consent and I therefore kindly ask for information about me to be deleted, further I expect any future profiles about me to be blocked from getting created and such info not to be stored also in the future. In case information is not deleted within 30 days I will hand over this matter to my lawyer and also file a report with my data protection commissioner in the EU. best regards, ---- dear <...>, Thank you for contacting Crunchbase! Please note, if you have an active trial or subscription we recommend that you cancel first before moving forward. Instructions on how to cancel your trial here. And instructions on how to cancel your subscription here. If you would like to download or permanently delete your user account information, please complete this form here. If you would like to delete your personal profile page, please complete this form here. If you would like to deactivate your user account, please reply to this email to deactivate your account. You can contact support@crunchbase.com if you wish to reactivate your account at a later date. Keep in mind, your user account is the private information that you can use to control your billing, login information, and alerts. A profile page is what displays externally on Crunchbase - these are completely separate. Because Crunchbase is a crowdsourced platform, any registered user can add or edit any profile page - profiles are not explicitly linked to any user. Please feel free to reach out if you have any additional questions - we'll be happy to help! Best, Erika

axaxs 6y ago
Yep, same shit. Just checked my email, the last one in question was 'Apollo'. The form in question makes you attest you are a resident of California, which began the back and forth. APOLLO Dear Alex, On behalf of Apollo, we are pleased to assist you in exercising your access rights under GDPR and/or CCPA. You may exercise your access rights as follows. If you wish to remove the personal information that we have that is tied to your email address, then please respond to this communication by submitting the attached Identify Verification Form. We will then respond to your access request upon further email verification. Why we require this: We require the above because GDPR and CCPA asks that we verify your identity to a reasonable degree of certainty before providing information: this is important, to avoid providing personal information to someone “spoofing” an identity. We believe this process provides that reasonable certainty while avoiding having consumers send us personal government IDs, which contain sensitive information and which we prefer not to receive. (And, unlike companies that deal directly with you, it’s not possible for us to verify you based on our prior relationship – like, by having you list your last movies watched, clothes purchased, or trips booked.) If you prefer to avoid the above process, you can learn detailed information about the categories of personal information that Apollo collects, and how we source it, sell it, and use it for business purposes, by reviewing our Privacy Policy (available at: https://www.apollo.io/privacy https://www.apollo.io/privacy). That Privacy Policy also will tell you how to easily opt out of our marketing databases. Thank you for your interest in our business and data practices.
- chinathrow 6y ago
  This is such a shitshow. They never took "reasonable degree of certainty" before storing private data either - it makes no sense to then ask that for deletion requests.
  - ornornor 6y ago
    It does if you want to feign compliance while making it hard to delete data.
gorgoiler 6y ago
Deadlines help a lot. Has it elapsed, and what was the followup?
- DyslexicAtheist 6y ago
  yes it elapsed and the "profile" is still up. my only choice now is to complain to my "data protection commissioner" but considering GDPR has no teeth I'm not confident it will impress anyone.
  - TeMPOraL 6y ago
    It has teeth, but it's not very hungry right now. Still, if you complain and CC crunchbase in, then it's them who have to do this calculation, and in context of risk. It may just be enough to get them to remove the data about you.
  - justinclift 6y ago
    Was the "I will hand over this matter to my lawyer" piece a bluff? :(
    - reaperducer 6y ago
      Good question. 99.999999% of the time when some internet rando says he'll contact his lawyer, the reality is that he has no lawyer and no lawyer would ever take his case. Threatening to tattle to an imaginary lawyer just gets you written off as an angry whack job.
CPLX 6y ago
I mean is their point of view completely wrong? If they are displaying a profile based on public information that’s journalism. Lists of people who invested in companies, culled from public disclosures, or names of corporate board members and such, aren’t the same thing as private PII.
yeahforsureman 6y ago
"It is your responsibility under GDPR not to store information about me without my explicit consent..." Not commenting on the particulars of this case (you might be right in this particular instance), as a general statement this is not true. Consent is only one of several possible legal grounds for processing personal data. Generally, data controllers want to avoid it if possible in lieu of more convenient grounds. Nitpicking more, explicit consent is mentioned only as a processing ground for so called special category data, i.e. certain sensitive data, e.g. health data, requiring an additional legal ground.

axaxs 6y ago

Yep, same shit. Just checked my email, the last one in question was 'Apollo'. The form in question makes you attest you are a resident of California, which began the back and forth. APOLLO Dear Alex, On behalf of Apollo, we are pleased to assist you in exercising your access rights under GDPR and/or CCPA. You may exercise your access rights as follows. If you wish to remove the personal information that we have that is tied to your email address, then please respond to this communication by submitting the attached Identify Verification Form. We will then respond to your access request upon further email verification. Why we require this: We require the above because GDPR and CCPA asks that we verify your identity to a reasonable degree of certainty before providing information: this is important, to avoid providing personal information to someone “spoofing” an identity. We believe this process provides that reasonable certainty while avoiding having consumers send us personal government IDs, which contain sensitive information and which we prefer not to receive. (And, unlike companies that deal directly with you, it’s not possible for us to verify you based on our prior relationship – like, by having you list your last movies watched, clothes purchased, or trips booked.) If you prefer to avoid the above process, you can learn detailed information about the categories of personal information that Apollo collects, and how we source it, sell it, and use it for business purposes, by reviewing our Privacy Policy (available at: https://www.apollo.io/privacy https://www.apollo.io/privacy). That Privacy Policy also will tell you how to easily opt out of our marketing databases. Thank you for your interest in our business and data practices.

chinathrow 6y ago
This is such a shitshow. They never took "reasonable degree of certainty" before storing private data either - it makes no sense to then ask that for deletion requests.
- ornornor 6y ago
  It does if you want to feign compliance while making it hard to delete data.

gorgoiler 6y ago

Deadlines help a lot. Has it elapsed, and what was the followup?

DyslexicAtheist 6y ago
yes it elapsed and the "profile" is still up. my only choice now is to complain to my "data protection commissioner" but considering GDPR has no teeth I'm not confident it will impress anyone.
- TeMPOraL 6y ago
  It has teeth, but it's not very hungry right now. Still, if you complain and CC crunchbase in, then it's them who have to do this calculation, and in context of risk. It may just be enough to get them to remove the data about you.
- justinclift 6y ago
  Was the "I will hand over this matter to my lawyer" piece a bluff? :(
  - reaperducer 6y ago
    Good question. 99.999999% of the time when some internet rando says he'll contact his lawyer, the reality is that he has no lawyer and no lawyer would ever take his case. Threatening to tattle to an imaginary lawyer just gets you written off as an angry whack job.

CPLX 6y ago

I mean is their point of view completely wrong? If they are displaying a profile based on public information that’s journalism. Lists of people who invested in companies, culled from public disclosures, or names of corporate board members and such, aren’t the same thing as private PII.

yeahforsureman 6y ago

"It is your responsibility under GDPR not to store information about me without my explicit consent..." Not commenting on the particulars of this case (you might be right in this particular instance), as a general statement this is not true. Consent is only one of several possible legal grounds for processing personal data. Generally, data controllers want to avoid it if possible in lieu of more convenient grounds. Nitpicking more, explicit consent is mentioned only as a processing ground for so called special category data, i.e. certain sensitive data, e.g. health data, requiring an additional legal ground.