3 ms·
> Absolutely be collecting email addresses and general contact info (with their consent of course) of your fans or page participants It's not hard, or expensiv
by wizzwizz4 5y ago
> Absolutely be collecting email addresses and general contact info (with their consent of course) of your fans or page participants
It's not hard, or expensive. Simply get consent. (Of course, you won't get much personal information on people that way, but that's how it be sometimes.)
Here's an example of how you could do it:
> Hello! I'm setting up a mailing list. If you're interested in receiving occasional updates about what's happening in this part of the community, please put your email address in this form: https://thecommunity.example.eu.org./subscribe https://thecommunity.example.eu.org./subscribe
> I'll send you a verification email so nobody else can sign you up. There's also a link there to remove yourself from the list, and you can email unsubscribe@thecommunity.example.eu.org. any time to remove yourself from the list. (I'll send you a confirmation email to let you know you've been removed from the list.)
> If you want to unsubscribe, please just unsubscribe. If you mark the emails as spam, it might send other people's copies to their spam, too, and it might be months before anybody notices. And if you have any feedback, do let me know.
- erehweb 5y agoLarge-scale data processing is considered high risk and requires appointing a data processing officer, according to https://www.osano.com/articles/gdpr-compliance-regulations https://www.osano.com/articles/gdpr-compliance-regulations. How large is large scale? Depends on the country - according to this link, the Czech Republic says 10,000 is enough https://iapp.org/news/a/on-large-scale-data-processing-and-gdpr-compliance/ https://iapp.org/news/a/on-large-scale-data-processing-and-g...
- ThePowerOfFuet 5y agoThis hypothetical situation doesn't require the appointment of a DPO.
- philistine 5y agoThat sounds like a job for the drummer.
- wiml 5y agoOur last data protection officer spontaneously combusted...
- waterhouse 5y agoHitting the send button really really fast. The skills carry over.
- Zababa 5y agoOf course a company trying to sell you services to help compliance is going to say that this business is "high risk".
- erehweb 5y agoHigh-risk is a term used in the GDPR itself - see e.g. https://ec.europa.eu/newsroom/article29/items/611236 https://ec.europa.eu/newsroom/article29/items/611236 from the European Commission
- Graffur 5y agoYour source has this: " Example: An online magazine using a mailing list to send a generic daily digest to its subscribers. Possible Relevant criteria: Data processed on a large scale. DPIA likely to be required?: No "
- isbvhodnvemrwvn 5y agoGeneric daily digest where you are aware of this data being collected due to it being used constantly, and giving you some value out of this, vs long-term storage of data that's not used and where the value is questionable.