svennek

22 ms·

181.
by svennek 8y ago
Disclamer: haven't touched wordpress in a few years. I believe wordpress has the siteurl embedded everywhere, no idea why they thought that made sense... Following the change site url might fix it for you. https://codex.word
182.
by svennek 8y ago
Okay, we are in agreement in principle then. I just want to add, there is a huge difference between working as a programmer for somebody else and for yourself. In the latter situation, you have implicitly agreed to shoulder all risks and bu
183.
by svennek 8y ago
That is not as clear cut, but if you have stated your thoughts and decisions you should be in the clear. The worst that would happen would be a letter from your DPA asking you to rectify sitation (and giving you more specific guidelines)...
184.
by svennek 8y ago
First of all, I wasn't attacking you, but your statement, that to me sounded like "who cares about the law, I am a programmer". If that wasn't what you meant, then I am sorry to have misunderstood you. Fact is, at we ha
185.
by svennek 8y ago
Also any kind of invoice data is by law (in Denmark) required to be kept for 5 full years after closing of the books. That also means you are not allowed to delete that data in that period due to the GDPR (as the accounting law overrules th
186.
by svennek 8y ago
Yes. You then clearly have a "business need" (banning troublesome members), that clearly allows handling and storage of data. Hence "right to be deleted" does not apply any more (or more correctly, it is overruled by a m
187.
by svennek 8y ago
To keep the history.. I generally don't like to fix post except for typos or unclear passages..
188.
by svennek 8y ago
And "Each supervisory authority shall be competent for the performance of the tasks assigned to and the exercise of the powers conferred on it in accordance with this Regulation on the territory of its own Member State." Article 5
189.
by svennek 8y ago
".... This means that if your organisation conducts cross-border data processing, the GDPR will require you to work primarily with the supervisory authority based in the same Member State as your main establishment (usually your EU hea
190.
by svennek 8y ago
There is also the language barrier and geographical considerations (travel). I am sure you (as a european in country A) could ask your local DPA to assist or forward a complaint to my DPA (country B). The same goes for the financial regulat
191.
by svennek 8y ago
www.geocities.com ;)
192.
by svennek 8y ago
That would really surprise me. Each country has an independent DPA, and I would expect "foreign" cases has to be redirected to the local DPA. Only EU level stuff usually have interstate mandates...
193.
by svennek 8y ago
If you live in such a place, no amount of regulation is going to save you... Neither more or less...
194.
by svennek 8y ago
What? (disclaimer: i don't sell services outside a few countries) There is a solution called One Stop VAT where all comminication and reporting goes to your home-country (given you are an EU company). All your taxes are then calculated
195.
by svennek 8y ago
Except perhaps that BigCorp employees might exit their corporate network from an non-EU address, but they are still EU citizen and hence protected... If you want to block them, you would most likely have to ask them their nationality or req
196.
by svennek 8y ago
Sure, that is what I meant by dialing in. But that is a process without fines (unless the companies are entirely unreasonable)... At least here in Denmark, the DPA is really reasonable and willing to work with the companies to get complianc
197.
by svennek 8y ago
The regulation has been known for years. BigCorps, I work with, have been working on this for years... If you start now, then you have a problem. Also, I expect there will be quite some years before the book is thrown on companies, that do
198.
by svennek 8y ago
Why would you keep the ip-adress in the first place? If it is for fraud-prevention, then that is sufficient reason to keep it unanonymised...
199.
by svennek 8y ago
No, but why not skip the ads then? Either you earn pennies (and it shouldn't matter) or you should follow the commercial rules...
200.
by svennek 8y ago
And all of those are allowed (usually) due to normal "business-as-usual use" (fraud/spam prevention). And as said, a personal blog is except by definition... (edit: they are allowed, not excempt due to normal-use)
201.
by svennek 8y ago
Here is my answer to that post... https://news.ycombinator.com/item?id=16956379
202.
by svennek 8y ago
Obviously the preparation considered "resonable" differs for a three person and a thousand-person company...
203.
by svennek 8y ago
All laws are broad. The current practice is either written in more specific (easilier modifiable documents) from the agencies or defined by "current best practice". In (western) european law there is a "bonus pater" cons
204.
by svennek 8y ago
Suing you directly will not fly in the EU (maybe in the UK, but that is only going to be an issue for 1 year or so). I suspect the DPA will start with a letter, where you will need to explain your current practices. Then, nothing more happe
205.
by svennek 8y ago
That is crystal clear personal activity to me. Also which protection worthy data does the comments contain? Most likely none.
206.
by svennek 8y ago
Why? Article 2c (excemptions): "by a natural person in the course of a purely personal or household activity"
207.
by svennek 8y ago
I paraphrase: what most posters here seem to miss is that most chemist cannot be bothered to read up on environmental rules. It should be my right to dump toxic waste wherever I want, because I am a chemist. Sorry, but society doesn't
208.
by svennek 8y ago
I read the farwell-post as "My start-up failed, and I am shutting it down because I am sick of it", but instead of owning up, I blame the GDPR... As a Brit, he would most likely already have to comply with most of the stuff alread
209.
by svennek 8y ago
If you are an European company, most of this stuff has been the law for decades! Running a project/company means taking on risk. Financially and otherwise. Why is data-care risk so much worse? And sueing is only going to happen in the
210.
by svennek 8y ago
Why? The GDPR is made to protect people from scrupleless companies and practices. Not all companies are good citizen (Cambridge Analytics comes to mind), and as a european I say "Good riddance". For normal companies doing normal t

More ›