Shopify Is Illegal in Germany

Post by mattmcknight » Fri, Nov 11, 2022, 8:51 PM UTC

dmitriid wrote: post #74

throwaway13337 wrote: post #58

Earlier quoted context omitted.

You're just incorrect here. Part of the GDPR does good things against bad actors like ad/tracking companies. But most of these companies are so big that it just works as a moat to keep out small competitors in that space. The more widely-affecting thing that the GDPR is doing is to make it impossible to legitimately run a business like the one that the article is talking about. An online shop that uses shopify which…

> You're just incorrect here. I was expecting you to show where I'm incorrect. And yet, it's the same emotionally-charged "omg moat, large companies, impossible to run a business". Which doesn't disprove what I say, but further supports my case: the bullshit narrative around GDPR persists even if it has literally no basis in reality. > A small online shop using a CDN is who is actually hurt with GDPR. Most CDNs have…

Post by capableweb » Fri, Nov 11, 2022, 9:13 PM UTC

TekMol wrote: post #245

capableweb wrote: post #136

Earlier quoted context omitted.

> Ok, but what if you just want to run a website. Not build a billion doller global CDN. Ah, from the perspective of website owners, not the CDN owner... Well, use a European CDN, they tend to follow European regulation, just like US companies follow US regulation. The two companies that comes first to mind is BunnyCDN and KeyCDN, but I'm sure there are many others. Both of them have global networks. > According to t…

How would BunnyCDN and KeyCDN be able to have endpoints in the US that are beyond the reach of the US government? The recent rulings say that no packets are allowed to travel to the US because that would enable the US government to access them if it wants to. I don't see how this can be avoided. As soon as a tcp packet enters the US, it is on infrastructure the US government can access if it wants to.

Post by ghoward » Fri, Nov 11, 2022, 9:27 PM UTC

Msurrow wrote: post #279

ghoward wrote: post #253

Earlier quoted context omitted.

Yeah, I was afraid of this. Perhaps my best solution is to block any user creation from the EU, any login from the EU, and any signed-in user request from the EU. Maybe I can allow non-signed-in users from the EU to browse?

If you dont handle/store PII then there is no problem. Or, you can just do it anyways. Its not like GDPR and Schrems II have stopped Microsoft, Amazon, Google, etc etc.

Post by vidarh » Fri, Nov 11, 2022, 9:38 PM UTC

tensor wrote: post #116

shafyy wrote: post #7

All EU companies sending any PII to US-owned companies, regardless if the actual data stays in the EU or not, are in danger to be sued similarly to the author of this post. This is, among other laws, because of the US CLOUD act: > The CLOUD Act primarily amends the Stored Communications Act (SCA) of 1986 to allow federal law enforcement to compel U.S.-based technology companies via warrant or subpoena to provide requ…

Also, since the EU considers an IP address to be PII, anyone in the EU is not even allowed to connect to any website owned by a US company, as the IP address is a necessary piece of data to make the most basic TCP/IP connection work. Basically, the EU has put up a legal firewall between the US and the EU. Somehow this hasn't been realized fully or openly talked about, the the implication of their law is very clear.

Post by icedchai » Fri, Nov 11, 2022, 9:52 PM UTC

cuu508 wrote: post #239

icedchai wrote: post #209

Earlier quoted context omitted.

Sounds like FUD to me. The Internet would cease to operate if you could not "receive" IP addresses. It is logging that is the "concern."

No, the processing of personal information is a concern too.