81–90 of 237 posts
The CLOUD Act itself is the issue. Don't use MS Office 365 or any other US based service even if their servers are in Europe as they can not guarantee that your data is not accessible by the US. Amazon and Cloudflare are all great service but your data is under US jurisdiction.
What are solid european alternatives?
The CLOUD Act itself is the issue. Don't use MS Office 365 or any other US based service even if their servers are in Europe as they can not guarantee that your data is not accessible by the US. Amazon and Cloudflare are all great service but your data is under US jurisdiction.
What are solid european alternatives?
Disclaimer: I work at Nextcloud so I'm a bit biased
Earlier quoted context omitted.
I think the syllogism comes from the fact that currently GA does transfer EU data to the US by default (and probably currently there is no way to prevent that?). But I'm not a GA expert at any rate so I can be totally wrong.
As I understood it, data location is not even the problem, but the US CLOUD Act, that allows their authorities to request data from US companies no matter where it is stored. So even if Google Analytics would store data from EU citizens in Europe, they would still violate GDPR, because US authorities can access the data without the users consent.
As far as I understand it, it's not Google Analytics per se that is illegal, but the data transfer to the US. If Google Analytics would use servers on European ground it should be fine. Or would that still violate GDPR as Google as an American company can still be coerced to give access to data stored on their servers outside the US? But I can't imagine that to be the case, as it would effectively mean that any busin…
Yes, because of CLOUD Act. If GA would create a deployable agent that proceses user data on your server before sending it in aggregate/anonymously to central GA, that would make it usable
Earlier quoted context omitted.
You can control locality for some parts of Cloudflare's offering [1], so I guess if you want to comply with the privacy shield stuff, you would have to ensure that the data is stored on a server within a EU country. [1] https://blog.cloudflare.com/introducing-the-cloudflare-data-...
Doesn’t work that way. This issue is that CloudFlare is a US company and can be compelled to disclose information to US Govt regardless of where they hold the data.
The CLOUD Act itself is the issue. Don't use MS Office 365 or any other US based service even if their servers are in Europe as they can not guarantee that your data is not accessible by the US. Amazon and Cloudflare are all great service but your data is under US jurisdiction.
As far as I understand it, it's not Google Analytics per se that is illegal, but the data transfer to the US. If Google Analytics would use servers on European ground it should be fine. Or would that still violate GDPR as Google as an American company can still be coerced to give access to data stored on their servers outside the US? But I can't imagine that to be the case, as it would effectively mean that any busin…
> Where the controller or a processor established in the European Union is not able to take adequate additional measures to guarantee such protection, the controller or processor or, failing that, the competent supervisory authority, are required to suspend or end the transfer of personal data to the third country concerned.
It would seem as though any EU company that can be compelled to transfer data to the US would be found not to be able to take adequate measures to guarantee the protection of the data. I'm not familiar enough with the law in the US to understand whether the US authorities can compel an EU subsidiary of a US company to transfer data out of the EU, but if so...
Earlier quoted context omitted.
What are solid european alternatives?
Nextcloud would be a solid European alternative for office365. It's a file sync, groupware, office and xhat solution all in one. It's open source, self hostable and has enterprise support. Disclaimer: I work at Nextcloud so I'm a bit biased
It's time for EU services to shine.
We have IRC and it shines bright! But seriously: Google just needs to move the problematic part of their EU business into EU and start complying.