1–10 of 54 posts
Your account showing your name, address, credit card, etc can still be accessed whilst the token stored in the cookie is still valid
you can't instantly delete user data because of safety/liability reasons
""" “The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay” if one of a number of conditions applies. “Undue delay” is considered to be about a month.
"""
you can't instantly delete user data because of safety/liability reasons
Article 17 of the GDPR would disagree. """ “The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay” if one of a number of conditions applies. “Undue delay” is considered to be about a month. """
The only issue here is HelloFresh not properly telling its customers how long it takes for them to actually delete the data.
you can't instantly delete user data because of safety/liability reasons
Article 17 of the GDPR would disagree. """ “The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay” if one of a number of conditions applies. “Undue delay” is considered to be about a month. """
This is generally standard practice for e-commerce companies, is it not?
Data is (at least a big part of) their business and they don’t further that end by removing data.
Of course it’s shitty, but it’s industry standard practice. It’s similar to the Facebook shadow profile you have when you don’t even have a Facebook account: you can ask them to delete your direct data, but they’ll never remove the implications they learned from that data.
you can't instantly delete user data because of safety/liability reasons
Article 17 of the GDPR would disagree. """ “The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay” if one of a number of conditions applies. “Undue delay” is considered to be about a month. """