Go Back   English Forum Switzerland > Support > Support > Forum support  
Closed Thread
 
Thread Tools Display Modes
  #21  
Old 30.04.2018, 14:32
Guest
 
Posts: n/a
Re: GDPR and EnglishForum

Quote:
View Post
Last i knew the EF servers were in the USA, which kicks the whole issue in the long grass...
They're in the UK, but their location is irrelevant anyway.
  #22  
Old 30.04.2018, 15:00
Spinal's Avatar
Forum Veteran
 
Join Date: Dec 2016
Location: Zurich
Posts: 1,336
Groaned at 11 Times in 10 Posts
Thanked 1,312 Times in 573 Posts
Spinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
They're in the UK, but their location is irrelevant anyway.
So while we say that it should be GDPR compliant regardless of server location (something I think we can all agree on), if the servers are in a third party country then cross border transfers comes into play.

Luckily, in US there is both EU and Swiss Privacy shield (for now)... so in theory the US company hosting it could be Privacy Shield (self)certified. If not, there will need to be further controls (e.g. standard contractual clauses) to ensure that the data is protected even when exported...

M.
  #23  
Old 05.05.2018, 20:02
Forum Legend
 
Join Date: Dec 2010
Location: ZH
Posts: 5,317
Groaned at 58 Times in 48 Posts
Thanked 2,696 Times in 1,612 Posts
SOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
They're in the UK, but their location is irrelevant anyway.
Nonsense - They still have to be compliant.
  #24  
Old 05.05.2018, 21:13
Forum Veteran
 
Join Date: Jul 2007
Location: Vaud
Posts: 2,466
Groaned at 175 Times in 122 Posts
Thanked 4,947 Times in 1,902 Posts
Mikers has a reputation beyond reputeMikers has a reputation beyond reputeMikers has a reputation beyond reputeMikers has a reputation beyond reputeMikers has a reputation beyond reputeMikers has a reputation beyond repute
Re: GDPR and EnglishForum

Although there is a lot of good and humorous answers here, the point is valid: after June this year someone can request their account and data to be removed from the forum and there is a legal obligation to do so. Failure can be a penalty up to (in my light understanding) up to 4% of company turnover (per year). The owners of the forum should have been preparing for this for some time.
  #25  
Old 05.05.2018, 21:27
Forum Legend
 
Join Date: Jun 2008
Location: Zurich
Posts: 8,296
Groaned at 294 Times in 223 Posts
Thanked 19,005 Times in 6,627 Posts
k_and_e has a reputation beyond reputek_and_e has a reputation beyond reputek_and_e has a reputation beyond reputek_and_e has a reputation beyond reputek_and_e has a reputation beyond reputek_and_e has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
They're in the UK, but their location is irrelevant anyway.
if you are doing business in the EU, you need to be compliant regardless of your location.
  #26  
Old 05.05.2018, 21:34
Guest
 
Posts: n/a
Re: GDPR and EnglishForum

Quote:
View Post
if you are doing business in the EU, you need to be compliant regardless of your location.
Quote:
View Post
Nonsense - They still have to be compliant.
That is what he is saying
The following 3 users would like to thank for this useful post:
  #27  
Old 05.05.2018, 21:39
Forum Legend
 
Join Date: Dec 2010
Location: ZH
Posts: 5,317
Groaned at 58 Times in 48 Posts
Thanked 2,696 Times in 1,612 Posts
SOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
Although there is a lot of good and humorous answers here, the point is valid: after June this year someone can request their account and data to be removed from the forum and there is a legal obligation to do so. Failure can be a penalty up to (in my light understanding) up to 4% of company turnover (per year). The owners of the forum should have been preparing for this for some time.
Exactly - it would be nice to know whether any steps have been made in terms of data mapping and the retention schedule.
  #28  
Old 05.05.2018, 21:47
curley's Avatar
Forum Legend
 
Join Date: Oct 2006
Location: canton ZH
Posts: 12,691
Groaned at 206 Times in 171 Posts
Thanked 14,531 Times in 7,505 Posts
curley has a reputation beyond reputecurley has a reputation beyond reputecurley has a reputation beyond reputecurley has a reputation beyond reputecurley has a reputation beyond reputecurley has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
That is what he is saying
Only SOBEIT replied to Ace1

Even quoting should be done responsibly.
  #29  
Old 05.05.2018, 21:54
curley's Avatar
Forum Legend
 
Join Date: Oct 2006
Location: canton ZH
Posts: 12,691
Groaned at 206 Times in 171 Posts
Thanked 14,531 Times in 7,505 Posts
curley has a reputation beyond reputecurley has a reputation beyond reputecurley has a reputation beyond reputecurley has a reputation beyond reputecurley has a reputation beyond reputecurley has a reputation beyond repute
Re: GDPR and EnglishForum

The implementation of this regulation will be most interesting to watch unfolding.

Our - apparently wedding-dress-disaster - thread was a great example, I think. And that wasn't even under GPDR yet.
This user would like to thank curley for this useful post:
  #30  
Old 05.05.2018, 21:56
Forum Legend
 
Join Date: Dec 2010
Location: ZH
Posts: 5,317
Groaned at 58 Times in 48 Posts
Thanked 2,696 Times in 1,612 Posts
SOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond reputeSOBEIT has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
That is what he is saying
One would hope so, stand corrected.
  #31  
Old 06.05.2018, 03:19
Guest
 
Posts: n/a
Re: GDPR and EnglishForum

Quote:
View Post
Only SOBEIT replied to Ace1

Even quoting should be done responsibly.
To whom was k_and_e replying according to you
  #32  
Old 07.05.2018, 12:14
Forum Legend
 
Join Date: Oct 2014
Location: SG
Posts: 8,976
Groaned at 472 Times in 353 Posts
Thanked 11,951 Times in 6,211 Posts
Urs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
Also worth noting that if the legal reason of processing is consent, then you have the right to ask the organisation to stop processing your data (or delete your data)... which is something most bbs don't want as it can quickly destroy threads (you suddenly lose half an argument, and the other half doesn't make sense).
I'm not convinced that actually applies to EF. If current EF policy to remove any and all personal data from the posts, including e-mail addresses, has been implemented from EF's start, I think it most probably doesn't.

From directive 95/46/EC, the directive underlying GDPR:
"26) [..] the principles of protection must apply to any information concerning an identified or identifiable person; whereas, to determine whether a person is identifiable, account should be taken of all the means likely reasonably to be used either by the controller or by any other person to identify the said person; whereas the principles of protection shall not apply to data rendered anonymous in such a way that the data subject is no longer identifiable [..]"
  #33  
Old 07.05.2018, 12:34
Spinal's Avatar
Forum Veteran
 
Join Date: Dec 2016
Location: Zurich
Posts: 1,336
Groaned at 11 Times in 10 Posts
Thanked 1,312 Times in 573 Posts
Spinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
I'm not convinced that actually applies to EF. If current EF policy to remove any and all personal data from the posts, including e-mail addresses, has been implemented from EF's start, I think it most probably doesn't.

From directive 95/46/EC, the directive underlying GDPR:
"26) [..] the principles of protection must apply to any information concerning an identified or identifiable person; whereas, to determine whether a person is identifiable, account should be taken of all the means likely reasonably to be used either by the controller or by any other person to identify the said person; whereas the principles of protection shall not apply to data rendered anonymous in such a way that the data subject is no longer identifiable [..]"
Personal Data is a very broad definition in GDPR. Pretty much anything which can identify an individual, directly or indirectly.

Thus, these are considered personal data:
IP address
Browser serial number
forum username

Off the top of my head...
M.
The following 2 users would like to thank Spinal for this useful post:
  #34  
Old 07.05.2018, 12:38
Forum Legend
 
Join Date: Feb 2010
Location: CH
Posts: 10,732
Groaned at 346 Times in 282 Posts
Thanked 15,640 Times in 8,014 Posts
greenmount has a reputation beyond reputegreenmount has a reputation beyond reputegreenmount has a reputation beyond reputegreenmount has a reputation beyond reputegreenmount has a reputation beyond reputegreenmount has a reputation beyond repute
Re: GDPR and EnglishForum

Only the idea that one cannot delete one's account here is really disturbing. Hope these new rules will solve the English Forum in Switzerland once and for all too. If not, maybe someone with a lot of time on their hands will do this favour to all of us.
This user would like to thank greenmount for this useful post:
  #35  
Old 07.05.2018, 13:21
Forum Legend
 
Join Date: Oct 2014
Location: SG
Posts: 8,976
Groaned at 472 Times in 353 Posts
Thanked 11,951 Times in 6,211 Posts
Urs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
Personal Data is a very broad definition in GDPR. Pretty much anything which can identify an individual, directly or indirectly.

Thus, these are considered personal data:
IP address
Browser serial number
forum username

Off the top of my head...
M.
Agreed. But once the data that make the forum user name connectable to the person have been deleted, the posts are anonymous.
  #36  
Old 07.05.2018, 13:40
AbFab's Avatar
Forum Legend
 
Join Date: Sep 2006
Location: Zürich
Posts: 8,240
Groaned at 347 Times in 237 Posts
Thanked 12,019 Times in 4,126 Posts
AbFab has a reputation beyond reputeAbFab has a reputation beyond reputeAbFab has a reputation beyond reputeAbFab has a reputation beyond reputeAbFab has a reputation beyond reputeAbFab has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
Only the idea that one cannot delete one's account here is really disturbing. Hope these new rules will solve the English Forum in Switzerland once and for all too. If not, maybe someone with a lot of time on their hands will do this favour to all of us.
I believe the way vBulletin works, means that deleting a user would delete all their posts too: effectively destroying many threads...
  #37  
Old 07.05.2018, 13:59
Forum Legend
 
Join Date: Jun 2008
Location: Zurich
Posts: 8,296
Groaned at 294 Times in 223 Posts
Thanked 19,005 Times in 6,627 Posts
k_and_e has a reputation beyond reputek_and_e has a reputation beyond reputek_and_e has a reputation beyond reputek_and_e has a reputation beyond reputek_and_e has a reputation beyond reputek_and_e has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
Agreed. But once the data that make the forum user name connectable to the person have been deleted, the posts are anonymous.
you don't need to delete. Scrambling all personal data should be sufficient.
  #38  
Old 07.05.2018, 14:51
mirfield's Avatar
Moddy Wellies
 
Join Date: Apr 2007
Location: North Yorkshire
Posts: 8,681
Groaned at 52 Times in 46 Posts
Thanked 9,623 Times in 3,557 Posts
mirfield has a reputation beyond reputemirfield has a reputation beyond reputemirfield has a reputation beyond reputemirfield has a reputation beyond reputemirfield has a reputation beyond reputemirfield has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
I believe the way vBulletin works, means that deleting a user would delete all their posts too: effectively destroying many threads...
Deleting a user removes their data from the database. Their posts remain with user name visible (but no link because there's no account), and assigned to "guest".

Removing posts would mean manual deletion, or SQLing the database directly

Even then, another issue is that our flavour of vB uses the user name when quoting (I believe the vB default is their id number, but I may be wrong), so any quoted text will include the user name, even if the quoted post was deleted.

See the first two posts of this thread for an example.

https://www.englishforum.ch/introduc...-s-uliamt.html
__________________
Nothing of value kept in this post overnight.
  #39  
Old 07.05.2018, 15:07
Spinal's Avatar
Forum Veteran
 
Join Date: Dec 2016
Location: Zurich
Posts: 1,336
Groaned at 11 Times in 10 Posts
Thanked 1,312 Times in 573 Posts
Spinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond reputeSpinal has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
you don't need to delete. Scrambling all personal data should be sufficient.
From the previous post - it's really easy to delete/scramble structured data (e.g. my username).

It's really hard to delete/scramble personal data from unstructured data (e.g. the post content). e.g. if I say that I live in Zurich, my age is 128 years old and I'm male - that can probably uniquely identify me. Thus the content of this post, would be personal data. Good luck identifying that without manually going through all my posts.

(note, the data above is clearly spurious and inaccurate).

m.
(also, I've used my real name in a few posts and PMs, that too would need anonimising.

Quote:
View Post
See the first two posts of this thread for an example.

https://www.englishforum.ch/introduc...-s-uliamt.html
That still shows the username though "vwild1" - My username (Spinal) is used on most forums I visit. Along with my avatar, you'll struggle to say it doesn't uniquely identify me...
  #40  
Old 07.05.2018, 15:29
mirfield's Avatar
Moddy Wellies
 
Join Date: Apr 2007
Location: North Yorkshire
Posts: 8,681
Groaned at 52 Times in 46 Posts
Thanked 9,623 Times in 3,557 Posts
mirfield has a reputation beyond reputemirfield has a reputation beyond reputemirfield has a reputation beyond reputemirfield has a reputation beyond reputemirfield has a reputation beyond reputemirfield has a reputation beyond repute
Re: GDPR and EnglishForum

Quote:
View Post
That still shows the username though "vwild1"
That's what I wrote
Quote:
View Post
Their posts remain with user name visible
...
any quoted text will include the user name, even if the quoted post was deleted.

Quote:
View Post
My username (Spinal) is used on most forums I visit. Along with my avatar, you'll struggle to say it doesn't uniquely identify me...
In theory, your user name could be changed to something random before the deletion, and your avatar would not be visible after deletion. But your user name would still be visible in quoted text; that could be fixed, but it would again rely on directly SQLing the database.
Closed Thread

Tags
englishforum, englishforum.ch




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
ANNOUNCEMENT: Englishforum.ch - change of owner and new paid subscriber model. Upthehatters2008 Jokes/funnies 30 01.04.2011 14:08
How to search englishforum quickly and effectively Midas Forum support 4 16.06.2010 21:56
Google and englishforum.ch? xuexi Forum support 2 17.09.2008 10:44
englishforum.ch Naps Complaints corner 26 17.05.2007 17:43


All times are GMT +2. The time now is 10:18.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0