3 ms·
They could be using GDPR as an excuse to do this. Or, to be more charitable, their legal people have been reading FUD about the GDPR rather than the actual regu
by Anthony-G 3y ago
They could be using GDPR as an excuse to do this. Or, to be more charitable, their legal people have been reading FUD about the GDPR rather than the actual regulations. GDPR has plenty of provision for legitimate interests, particularly in favour of the data subject: https://www.gdpreu.org/the-regulation/key-concepts/legitimate-interest/ https://www.gdpreu.org/the-regulation/key-concepts/legitimat...
- cccbbbaaa 3y agoLegitimate interest is the most fragile basis in GDPR and should not be relied upon, apart for server logs as suggested by recital 49. Contract (art. 6(1)b) may be better here, but keep in mind that art. 5(1)e still applies.