2 ms·
The GDPR doesn’t say you can’t know anything about anyone; “all” it says is that you tell people what data you collect and why, and delete it when you don’t nee
by jodrellblank 6y ago
The GDPR doesn’t say you can’t know anything about anyone; “all” it says is that you tell people what data you collect and why, and delete it when you don’t need it.
As long as you’ve told your user in Sudan that country of origin is something you collect for marketing decisions, it’s fine.
- skohan 6y agoThat's not entirely correct. So for example, let's say I ask users about users' name and address, and I ask their permission to store this under GDPR. In a separate table, I store "anonymous" sensitive data, like which how many users in each country have a particular health issue, but it's "anonymous" so I never asked the user's permission to collect it. I am violating GDPR, because I can use my demographic data to identify some specific users who have some specific health conditions, and I never asked permission to do that.