aeris22’s avataraeris22’s Twitter Archive—№ 78,109

        1. …in reply to @trainline_eu
          @trainline_eu @FabianRODES @edasfr @yverry As stated by WP29, analytics and product improvement can never be a legitimate interest. And so, you’re not GDPR compliant, because you **need** consent before collecting and using such data.
      1. …in reply to @aeris22
    1. …in reply to @aeris22
      @trainline_eu @FabianRODES @edasfr @yverry Analytics & product improvement is (business) legitimate interest for data controller, but can't be (privacy) legitimate interest and can't rely on 7(f) of GDPR.
  1. …in reply to @aeris22
    @trainline_eu @FabianRODES @edasfr @yverry If it's really your (business) legitimate interest, you have to find another RGPD rule to collect and use data, for example by consent collection.
    1. …in reply to @aeris22
      @trainline_eu @FabianRODES @edasfr @yverry And in all cases, even if you rely on 7(f), you have to ensure privacy for processed data, and never ever Facebook was a trustable third party. And worse since 1 year and all Facebook privacy issues.
      1. …in reply to @aeris22
        @trainline_eu @FabianRODES @edasfr @yverry And in all cases, even if you rely on 7(f), you need a "workable mechanism to allow objecting to such a processing" (14(b) of GDPR)