Skip to main content

All Questions

Tagged with
0 votes
1 answer
71 views

Which EU country's regulation is applied when doing direct marketing from country A to a legal or natural person in country B?

So I'm wondering which country's legislation is used when, for example, a company from Sweden would do electronic direct marketing to another company in, say, Germany. Assuming that Sweden and Germany ...
undefined's user avatar
1 vote
2 answers
100 views

Is the local presence of a foreign non-GDPR state a data controller subject to the provisions of the Data Protection Act 2018?

Consider that state X is not subject to the gdpr, however, it has a diplomatic presence in the UK. If the state were a tech company that operated in or even simply offered services to people in, the ...
JosephCorrectEnglishPronouns's user avatar
10 votes
4 answers
5k views

Do I need to present a GDPR banner to IP addresses outside of GDPR regions?

The context of my question comes from this comment: The problem with solving GDPR compliance with country codes is, it is not in general sufficient to determine if a user is covered by the GDPR. The ...
Daniel Kaplan's user avatar
0 votes
1 answer
45 views

Does GDPR apply to a non-EU company communicating with me?

Someone used my e-mail address to create an account at one on-line service in a country that is not in EU. I told the company about that and they responded with that they have undone that. But now, I ...
jiwopene's user avatar
  • 151
-1 votes
1 answer
52 views

Arbitration and GDPR

Arbitration allow a both parties to settle the dispute outside the court where the arbitrator would decide the law to b e applied to the dispute?. However, arbitration will not exempt their ...
snowball's user avatar
5 votes
1 answer
2k views

Californian resident travelling in EU - which privacy law applies?

If a Californian resident is travelling within the EU, it seems both European GDPR and Californian CCPA privacy laws will apply. Sometimes businesses have single privacy emails, so if a deleting ...
savegoodlyfnotendorsanswerhere's user avatar
10 votes
1 answer
454 views

As of 2020, have any GDPR-related court judgements been successfully enforced on companies without presence in the EU?

The GDPR has been in effect for 2 years now and theoretically applies to any company on the planet which deals with personal data belonging to EU residents. But practically speaking, enforcing this ...
JonathanReez's user avatar
  • 4,756
0 votes
1 answer
46 views

International Transfers to a Data Subject

A membership organisation based in the EEA receives membership applications from people based outside of the EEA, in countries which do not have an adequacy decision. During the course of the ...
whispersan's user avatar
1 vote
1 answer
194 views

Does my own company also need to be EU-US Privacy Shield certified if we use AWS to store data of European customers?

We're based in United States. We understand that any sub-processor that we use should be EU-US Privacy Shield certified and GDPR compliant. So, we can use AWS and Google Cloud. Both of them are EU-US ...
skynew's user avatar
  • 113
5 votes
1 answer
273 views

In which jurisdictions outside the EU can the GDPR be enforced?

The GDPR is a law the EU passed requiring businesses, even foreign businesses, to protect the privacy of EU citizens. Now of course, the EU's jurisdiction is not global, but the EU does have treaties ...
Christopher King's user avatar
5 votes
2 answers
305 views

Excluding all people from the EU from my blog - is this allowed?

There's a new law from the European Union I simply cannot comply with (GDPR). Its way to complex, not even big companies can comply with it. I also don't know what google does with the data from my ...
user avatar
5 votes
1 answer
151 views

Can online business in one country deny access via terms of service to entities in another country?

Can an American company state in their terms of service that if an entity is from a designated country they are not allowed to use the service? In other words would that be a legal and enforceable ...
Ole's user avatar
  • 327
1 vote
2 answers
85 views

Description of 3rd party cookies in the privacy policy for GDPR compliance?

In order to comply with GDPR's right to be informed section, some sites try to describe what specific cookies that 3rd parties supply do. Is it OK to just list what cookies these parties set, and ...
Ole's user avatar
  • 327
4 votes
2 answers
265 views

Can the terms of service contain a clause that instructs a user to forfeit their rights under the GDPR?

Suppose an American company wishes to do business with European parties. Could their terms of service say that as a user of their services the user forfeits any rights afforded to them by the GDPR ...
Ole's user avatar
  • 327
1 vote
2 answers
445 views

Handling a GDPR subject access request when using google analytics?

When using Google Analytics and receiving a GDPR subject access request does the party receiving the request also have to send all data collected by Google Analytics?
Ole's user avatar
  • 327

15 30 50 per page