[Privoxy-users] Questions About GDPR Data Access Process for privoxy.org

[Fabian Keil]

Vlad Orlov <vladorlov at novatormail.ru> wrote on 2021-12-11 at 23:03:51:

> To Whom It May Concern:
> 
> My name is Vlad Orlov, and I am a resident of Moscow, Russia. I have a few
> questions about your process for responding to General Data Protection
> Regulation (GDPR) data access requests:
> 
>   1. Would you process a GDPR data access request from me even
>      though I am not a resident of the European Union?

Hi Vlad,

we don't usually care where a person with Privoxy-related questions
resides and can't trivially confirm the claimed residency anyway.

>   2. Do you process GDPR data access requests via email, a website,
>      or telephone? If via a website, what is the URL I should go to?

Email is fine for now.

>   3. What personal information do I have to submit for you to verify
>      and process a GDPR data access request?

It depends. If the question is vague enough we don't have to verify anything.

>   4. What information do you provide in response to a GDPR data access request?

As far as I know we never received a formal "GDPR data access request".

> To be clear, I am not submitting a data access request at this time. My
> questions are about your process for when I do submit a request.
> 
> Thank you in advance for your answers to these questions. If there is a better
> contact for processing GDPR requests regarding privoxy.org, I kindly ask that
> you forward my request to them.

No problem.

I'm one of the admins of the server that serves privoxy.org and
you can contact me directly in which case you can also encrypt
your requests using my OpenPGP key which should be available on
the commonly used key servers.

Using this mailing list is probably acceptable too if it doesn't
result in too much traffic, but please keep in mind that messages
to this lists are publicly archived and this includes the message
I'm responding to:
<https://lists.privoxy.org/pipermail/privoxy-users/2021-December/000614.html>

This message will be archived as well but I don't know the URL yet.

> I look forward to your reply without undue delay and at most within one month
> of this email, as required by Article 12 of GDPR.

Please note that the GDPR "requirements" are pretty soft as the
relevant authorities in Germany have very limited resources and
don't seem particularly interested in enforcing anything anyway.

Here's a good example of the quality one can expect
when contacting the relevant authorities in Germany:
<https://wiki.freiheitsfoo.de/pmwiki.php?n=Main.DKMS>
(In case you don't speak German, the summary is that
a serious complaint raised in 2017 still hasn't been
even acknowledged in 2021).

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.privoxy.org/pipermail/privoxy-users/attachments/20211212/d3a2afcd/attachment.bin>