Was forced to use a third party to fill a rental application. The application failed and now they're demanding significantly more sensitive information than what I ever provided before they'll comply. (kbin.social)

submitted 9 months ago by AdvicePleaseThankyou@kbin.social to c/privacy@lemmy.ml

15 comments fedilink hide all child comments

Their reply to my request to delete my data:

Thank you for your email requesting your right to be forgotten.

In order for us to carry out this request, we require proof of ID to ensure we only action requests made by the genuine owner of this email account. Acceptable forms of identification are,

Recent utility bill from the last 3 months (e.g. Gas, Electric)
Valid drivers License
TV License within the last 12 months
Council Tax Letter within the last 12 months
Title Deeds

you are viewing a single comment's thread
view the rest of the comments

[-] drre@feddit.de 48 points 9 months ago

i guess it's related to the following; exercising your rights under gdpr requires the other party to be able to identify you. that's why they need this information. if you want to (potentially) fuck with them: first ask for a listing of all the information they have about you, before asking for deleting your data. this listing must contain the request itself. if your request is missing, they are likely breaking compliance rules.

[-] AdvicePleaseThankyou@kbin.social 17 points 9 months ago

first ask for a listing of all the information they have about you, before asking for deleting your data. this listing must contain the request itself. if your request is missing, they are likely breaking compliance rules.

I'm not quite understanding, do you mind breaking that down for me?

[-] drre@feddit.de 19 points 9 months ago

one of your rights under gdpr is that you are entitled (free of charge) to a listing of all the data the other party has about you.

when you ask them about this listing this request itself becomes data the party has about you. it should therefore he included in the listing. (it is self referential, but that's how it is).

if the information that you requested such a listing is missing from the data they provide in response to you request, they are in breach of gdpr rules. from them on you might want to file a complaint.

( I've no idea whether this would result in any meaningful compensation, if at all. but at least it should keep them busy.)

[-] AdvicePleaseThankyou@kbin.social 7 points 9 months ago

Thanks for clearing that up, definitely not looking for compensation or anything, just for my request for deletion to be respected, but adding something like that to a complaint would definitely help. Thanks!

this post was submitted on 17 Nov 2023

61 points (96.9% liked)

Privacy

31168 readers

338 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago

MODERATORS