Viewing profile — mziel

I don't see how shadow profiles can be justified under GDPR and ePrivacy. If have identifiable information (just "some" ID will do, but also IP and various other fingerprints) then…

You also need to make sure you implement true deletion instead of a DB flag (and still use that stuff on the backend).

That's not true in the UK, there's no ID card here. IMO it's quite a nuisance, for example you need to always bring 2 documents to verify your identity and address for a variety of…

This is the case with most organisations. You have a finite amount of resources and attention, therefore you need to prioritise. Most GDPR chatter started picking up only in the la…

IP addresses are identified as personal data in GDPR. They're not exposed in the frontend, but HN might use them e.g. for logging. Also things like deletion, takeout and consent/op…

Regarding "they got the users’ permission initially" this is true for the users that signed up for it, not anybody in their social graph. GDPR treats data about a user as data belo…

You're supposed to enumerate all uses of the data (and they need to be sufficiently detailed and specific). The user has a choice to opt-in/out of each of them separately. There is…

You can read more about the cookie law here: https://www.cookielaw.org/the-cookie-law/ Basically EU wanted sites to obtain consent to use users' cookies (and for the users to give/…

Looking forward to May (when GDPR officially comes into force). Provided that it doesn't end up like the cookie law (and there are explicit provisions in GDPR and ePrivacy to avoid…

GDPR has been there for 2 years [1] and will start to be enforced come May. Facebook has a presence in the EU, since they're selling data about European users to European companies…

| they're there for convenience only. They can close them next month Citation needed? Facebook gets revenue from their ad network, which is used by European business customers and …

I will repeat my comment as you seem to be repeating the same argument. It's not "consent" as understood by GPDR and ePrivacy. You had no recourse not to give it, therefore it was …

Again, this is not deemed sufficient by GDPR. According to the law you can't condition the service you're providing on collecting unrelated (to that service) data.

It's not "consent" as understood by GPDR and ePrivacy. You had no recourse not to give it, therefore it was not willing and informed.

It's not "consent" as understood by GPDR and ePrivacy. You had no recourse not to give it, therefore it was not willing and informed.

I find the same thing even with critically acclaimed "Thinking Fast and Slow" or "Power of habit". On the other hand sometimes blogposts may not be exhaustive enough. IMO roughly 6…

The article has it wrong, as I mentioned in another comment. Polish word for tea is "herbata" which comes from "herbal tea".

There's a lot of very bad pop-sci books on this topic. Do you mind sharing the ones you read and recommend?

Specifically in Poland: https://pl.wikipedia.org/wiki/Pu-erh Translating the article: Pu-erh (chin. 普洱茶, pǔ’ěr chá) – a kind of tea that is classified as red tea in Poland (black t…