Post APrXhL3MiYDeScdLIe by ThatPrivacyGuy@mastodon.think-privacy.com
 (DIR) More posts by ThatPrivacyGuy@mastodon.think-privacy.com
 (DIR) Post #APrXhGLyBx87ssId6W by ThatPrivacyGuy@mastodon.think-privacy.com
       2022-11-22T09:52:29Z
       
       0 likes, 1 repeats
       
       I just had to send a legal complaint to Samsung who have decided to completely ignore EU law and help themselves to data from my device if I wish to use one of their hard drives... the following toots are the complaint in full.
       
 (DIR) Post #APrXhI2Xv8mV7DE96e by ThatPrivacyGuy@mastodon.think-privacy.com
       2022-11-22T09:55:51Z
       
       0 likes, 0 repeats
       
       "I just purchased 2x Samsung T7 Touch portable hard drives and when installing the software to enable the fingerprint scanner I noticed in your Privacy notice that you state you collect my IP Address, OS, OS Language and other data from my device for product improvement purposes.In the notice you claim the legal basis of Legitimate Interest and Performance of Contract under GDPR."#Privacy #SurveillanceCapitalism #GDPR #Law #Compliance #Ethics
       
 (DIR) Post #APrXhJhLkv0yG3KFLU by ThatPrivacyGuy@mastodon.think-privacy.com
       2022-11-22T09:57:28Z
       
       0 likes, 0 repeats
       
       "The problem is the relevant law here is the ePrivacy Directive (2002/58/EC) because you are accessing information in my terminal equipment which is not strictly necessary for the provision of the requested service (Article 5(3) of 2002/58/EC)"#Privacy #Law #Compliance #Ethics #Surveillance #Surveillancecapitalism #GDPR
       
 (DIR) Post #APrXhL3MiYDeScdLIe by ThatPrivacyGuy@mastodon.think-privacy.com
       2022-11-22T09:58:28Z
       
       0 likes, 0 repeats
       
       "Under the ePrivacy Directive the only legal basis for this is consent and then if you wish to process the data further under GDPR you would be required to obtain this consent in order to satisfy the the lawfulness principle under Article 5(1) of the GDPR.  As 2002/58/EC is lex specialis to the GDPR you cannot avoid this consent requirement as 2002/58/EC sits above the GDPR from a legal perspective."#privacy #gdpr #compliance #SurveillanceCapitalism #Ethics #Law #Suveillance
       
 (DIR) Post #APrXhMjaT3aRfrOZkW by ThatPrivacyGuy@mastodon.think-privacy.com
       2022-11-22T09:59:30Z
       
       0 likes, 0 repeats
       
       "I do not consent to your software collecting this data as it is not necessary for the provision of the requested service and is purely for your benefit for product improvement.  I do not consent to any information being extracted from my terminal equipment and remind you that consent for processing which is not strictly necessary cannot be a condition of access to the service" #privacy #gdpr #law #compliance #ethics #surveillance #surveillancecapitalism
       
 (DIR) Post #APrXhONKMmyAlOzpKa by ThatPrivacyGuy@mastodon.think-privacy.com
       2022-11-22T09:59:59Z
       
       0 likes, 0 repeats
       
       "As such you are legally required to remove any data your software has already collected and to make changes to the software to prevent such collection in the future."I require confirmation from you that this will occur and if I do not receive said confirmation within 30 days I will file a legal complaint against Samsung under both Articles 77 and 79 of the GDPR for breaches of Article 5, 6, 7, 17 and 25. I strongly recommend that you act on this matter with urgency."#privacy #gdpr #law