3 ms·

Thanks for the review. The privacy policy lists all collected information, how (if any) they're shared with other parties, also right for the users to delete th

by rauf_f 5y ago

Thanks for the review. The privacy policy lists all collected information, how (if any) they're shared with other parties, also right for the users to delete the information any time. What else should be listed here? I didn't get the "legal basis for collecting each information" -- is it required? This is just basic information that software needs to operate.

hnbad 5y ago
Well, first of all, you need a link clearly indicating it's the "Impressum" (usually translated as "imprint", "legal" or similar in English versions) as per §5 TMG: https://de.wikipedia.org/wiki/Impressumspflicht#Telemediengesetz https://de.wikipedia.org/wiki/Impressumspflicht#Telemedienge... You can get sued for omitting such a page (by any bored lawyer really) because it's considered anti-competitive and a misdemeanor: https://de.wikipedia.org/wiki/Impressumspflicht#Ordnungswidrigkeiten_und_Zust%C3%A4ndigkeiten https://de.wikipedia.org/wiki/Impressumspflicht#Ordnungswidr... Here's a lengthy explainer of what should go in a privacy policy to be fully compliant (in German), note that "clear and precise" language is generally understood to mean being explicit about the legal basis (i.e. parts of the GDPR) under which the data is collected and processed: https://www.datenschutz.org/datenschutzerklaerung/ https://www.datenschutz.org/datenschutzerklaerung/ In any case, your privacy policy link on the German language version of your website gives me the policy in English, which violates the GDPR's requirements for "clear language" regardless of the actual content by not being in German: https://voicedocs.com/de/legal/privacy-policy https://voicedocs.com/de/legal/privacy-policy But to be honest, you shouldn't be asking a random person on HN, you should talk to a lawyer.