A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?

  • vsis@feddit.cl
    link
    fedilink
    English
    arrow-up
    61
    arrow-down
    37
    ·
    1 year ago

    They were very friendly imo. No need to speak legalese or to be rude.

    Just tell them that you can’t or don’t want to install the app.

    If they don’t help you, then you proceed to remind them that you are not required to install anything for them to comply with GDPR.

    • themeatbridge@lemmy.world
      link
      fedilink
      arrow-up
      76
      ·
      1 year ago

      Being friendly doesn’t negate the fact that they are out of compliance with the law. Even sending a second email to insist they delete your data is an undue burden.

      • el_abuelo@lemmy.ml
        link
        fedilink
        arrow-up
        15
        arrow-down
        6
        ·
        1 year ago

        You’re right, but sometimes a bit of undue courtesy repays in dividends. Not every minor infraction is nefarious and not every minor infraction deserves reporting. A simple courteous reminder of their obligations may save both parties some undue hassle.

        I can imagine this company doing this to ensure only authenticated users can have their data removed. There are other ways…but this was probably what they considered reasonable and painless for all, admittedly they (wrongly) didn’t consider the audience of this community in that decision.

        • Rodeo@lemmy.ca
          link
          fedilink
          arrow-up
          17
          ·
          1 year ago

          A simple courteous reminder of their obligations may save both parties some undue hassle.

          Actually, the customer is already getting undue hassle, while the company is just breaking the law. Why can’t we just expect better?

          • falsem@kbin.social
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            Remember that you’re talking to some poorly paid person that has to deal with unhappy people all day and probably doesn’t even agree with these policies. This is no different than being in a restaurant - don’t be rude to service people. Be polite, but firm. You can express that you’re unhappy and that this isn’t acceptable in a way that doesn’t come off as berating some first level service drone.

          • vsis@feddit.cl
            link
            fedilink
            English
            arrow-up
            3
            arrow-down
            15
            ·
            1 year ago

            Nobody broke the law lol.

            I believe they have like a month to comply.

            The just asked for a ticket in the app, to make their lifes easier. If OP doesn’t want to, they still have to comply though.

            Now I remember why I hate working directly with customers.

            • Trainguyrom@reddthat.com
              link
              fedilink
              English
              arrow-up
              3
              ·
              1 year ago

              I believe they have like a month to comply.

              According to my training when I was handling my workplace’s GDPR request email companies have 30 days to respond. Meaning they could simply have a bot respond to all incoming emails on day 29 and say “we’re reviewing your request” and be in compliance for a while longer

    • Draedron@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      54
      ·
      1 year ago

      It’s the bare minimum of friendliness expected in customer care. Most likely a macro which is normal with these kind of requests.