A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?

  • 7heo@lemmy.ml
    link
    fedilink
    arrow-up
    180
    ·
    edit-2
    9 months ago

    It is not legal. Please report it to your local Data Protection Authority (DPA).

    Something along the lines of “I contacted X for a GDPR request via email, using the address associated with my user account. Their answer is requiring me to install their app, and agree to several new legally binding ToSes in the process.”

    Edit: due to the recent renaming of a certain (less and less) popular app, I need to add a disclaimer: I meant “X” as a variable to substitute, not as a verbatim name… Although I would not be surprised if it were the “X social platform, formerly known as twitter” (AKA “XSPFKT”) we are talking about.

    • Nelots@lemm.ee
      link
      fedilink
      English
      arrow-up
      54
      arrow-down
      1
      ·
      9 months ago

      Man, Elon really does ruin everything. Can’t even use X as a variable anymore without a disclaimer.

      • Hamartiogonic@sopuli.xyz
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        9 months ago

        How about using a programmer style variables like badCompanyName. You don’t have to be a mathematician. Sure, I can totally appreciate concise names, but some times you have to use longer names to avoid collisions.

      • Echo Dot@feddit.uk
        link
        fedilink
        arrow-up
        0
        ·
        9 months ago

        It’s new name is “X, formally known as Twitter”. Which is what every news website on the planet calls it.

        Regardless the fact that X is a stupid name for a company, it’s also dumb to rename a popular company generally anyway.