Let’s assume that the dude requested for a deletion of his account (specifically - not all his data) of the basis of gdpr and the execution of his data subject rights; that doesn’t exclude the possibility for reddit to keep his contact details for specific purposes based on the legitimate interest of reddit. Or at least they could play with the argument.
Gdpr also requires data only to be kept no longer than is necessary for the purpose for which it was collected. Deleting your account, even it isn’t a request to delete your data removes any purpose for keeping it.
That’s more for people booking flights and what not. With an account, they need a way to contact you if you’ve done something illegal, among a host of other things. It’s not the same scenario.
Until you specifically request it, it’s not gonna happen, and even then, they still need something to keep to trace back to you for legal reasons.
GDPR also requieres that you use the data for the appropiate cause that the user opted in to. So if they have the data for legal stuff this would still be a violation.
Article 6 states that there are only 6 reasons why you can process data the one applying here is a
If the data subject has given consent to the processing of his or her personal data;
Informed consent has to be given freely and for each purpose individually each consent option one has to consent to has to be opt in and has to be singular not bundeled.reddit doesnt do that therfore their only right is to use the mail as part of the service. With the deletion of this account they are not further allowed to use this mail for anything else except legal.
GDPR requires deleting data if you ask them to delete data. How did they get your email address if they supposedly deleted your information?
Let’s assume that the dude requested for a deletion of his account (specifically - not all his data) of the basis of gdpr and the execution of his data subject rights; that doesn’t exclude the possibility for reddit to keep his contact details for specific purposes based on the legitimate interest of reddit. Or at least they could play with the argument.
They can keep it but they are not allowed to use it as of article 5&6.
Do they even have a presence in Europe?
Is deleting an account the same as asking them to delete it though?
Gdpr also requires data only to be kept no longer than is necessary for the purpose for which it was collected. Deleting your account, even it isn’t a request to delete your data removes any purpose for keeping it.
That’s more for people booking flights and what not. With an account, they need a way to contact you if you’ve done something illegal, among a host of other things. It’s not the same scenario.
Until you specifically request it, it’s not gonna happen, and even then, they still need something to keep to trace back to you for legal reasons.
That’s wrong
GDPR also requieres that you use the data for the appropiate cause that the user opted in to. So if they have the data for legal stuff this would still be a violation.
How so? The person never requested it to be deleted for that, you consented to all of this when you made your account and linked it to an email.
Article 6 states that there are only 6 reasons why you can process data the one applying here is a
Informed consent has to be given freely and for each purpose individually each consent option one has to consent to has to be opt in and has to be singular not bundeled.reddit doesnt do that therfore their only right is to use the mail as part of the service. With the deletion of this account they are not further allowed to use this mail for anything else except legal.