Live data from Hacker News

Google Calendar GDPR Violation

news.ycombinator.com

1–6 of 6 posts

Google Calendar GDPR Violation

#1
Dear Community,

I have a problem with Google handling my GDPR request. Before forwarding this issue to my lawyer and notifying my local data privacy authority, I want to try my luck here.

The issue is that it is impossible to delete Google Calendar entries permanently. Even if not visible in the Calendar (and dust bin) anymore, those entries are still visible in Google Takeout with the status "CANCELLED".

How to reproduce: 1. Create a calendar entry 2. Delete that calendar entry 3. Empty the dust bin 4. Download your Google Calendar entry via Google Takeout 5. The calendar entry is still visible, so it must be stored on Google servers still.

I tried contact the support multiple times and also asked them to escalate this case, which was done. But in the end I always receive a generic answer that I should delete my cookies and cache and try again. If that does not work, I should fill out the Google Takeout feedback form.

Has someone else had the same issue? How should I proceed to get my data deleted?

Re: Google Calendar GDPR Violation

#5
post #2

I think that the right to delete is for when you delete your entire account. They can store your info as they wish as long as you've allowed them with having your account active. Might be wrong though.

Shouldn't one as a customer/consumer have the right to choose which personal data is stored with the service provider? Ofcourse if some form of data is stated as mandatory by the service provider, then it's customer's choice to continue using the service or not, provided that it is clearly stated what is being stored or not.

Nevertheless, I wouldn't be surprised if service providers like Google still store some form of metadata about users even when they request for deletion of their accounts.

Re: Google Calendar GDPR Violation

#6
post #2

I think that the right to delete is for when you delete your entire account. They can store your info as they wish as long as you've allowed them with having your account active. Might be wrong though.

Shouldn't one as a customer/consumer have the right to choose which personal data is stored with the service provider? Ofcourse if some form of data is stated as mandatory by the service provider, then it's customer's choice to continue using the service or not, provided that it is clearly stated what is being stored or not. Nevertheless, I wouldn't be surprised if service providers like Google still store some form…

I'd wish, but GDPR does not cover that base, because it is really complex.