GDPR - EU Directive 2016/679 and the Elsmar Cove Discussion Forum

[Marc]

The Data Protection Directive (officially Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data) is a European Union directive adopted in 1995 which regulates the processing of personal data within the European Union. It is an important component of EU privacy and human rights law.

1. Elsmar does not "process" any data.
2. People have to option to be totally anonymous when they register.
3. The only required "information" when a person registers is an email address and "field of expertise".
4. Registration email addresses are not shared, sold or otherwise revealed unless a person manually puts it in their profile.
5. Every person has direct control over information in their User Profile, and can change that information, and can delete any information in it at any time.
6. Information a person puts in their profile is public, but every person can leave all the fields blank.
7. What a person posts is their own responsibility and it is understood that this is a public forum, so...
8. Any person who wants their registration deleted can use the Contact Us link to make the request.

 

[Jean_B]

Perhaps its good to note that this has (probably) been superseded by Regulation (EU) 2016/679 General Data Protection Regulation.

http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679

I think the one remaining point for clarification would probably be (temporary) back-ups of the forum membership data, and when they would be cleared.
Elsmar, being high-quality as ever.

 

[Marc]

Daily backups which are rolled over are made by the servicer hosting Elsmar.com, however as far as I can tell data protection isn't an issue here because the only "data" which Elsmar has is email addresses. Nor does Elsmar share, sell or otherwise communicate any use email addresses in any way. Nor does Elsmar send promotional or other related types of emails. Nor is any "data" on any registered visitor "processed" since there is no personal data unless a person makes entries in their profile.

I made the post as a general "statement", however from what I have read data protection here is sufficient since only email addresses are involved. Were the sever to be breached, and someone got a list of email addresses, it wouldn't have much value.

 

[Marc]

this has (probably) been superseded by Regulation (EU) 2016/679 General Data Protection Regulation.

It has been. The thread title has been updated to reflect the current regulation.