Cloudflare keeps sending emails over a year after account was cancelled

Re:Cloudflare keeps sending emails over a year after account... by hosker4u on Sunday September 27, 2020 @07:49AM (#24605933)

GDPR does exist but should GDPR exist so people can cry about an odd email. No.

[ Parent | on HN ]

Re:Cloudflare keeps sending emails over a year after account... by dannyw on Sunday September 27, 2020 @07:53AM (#24605947)

The 'odd email' is just irrefutable evidence of Cloudflare's retention of the poster's email address, which is considered personal data under GDPR.

If Cloudflare is unable to even remove a deleted account from a mailing list, how do you know they have actually deleted ANY other information?

[ Parent | on HN ]

Re:Cloudflare keeps sending emails over a year after account... by ZWoz on Sunday September 27, 2020 @08:25AM (#24606120)

General Data Protection Regulation don't exist in vacuum, other laws are regulating data handling. Most importantly, accounting related regulations. So, if you request your account deletion, all billing related information is still hold - that is probably 7 years in all EU countries. Sending unwanted mail for those addresses is different issue though, but having contact data as part of billing data is legal.

[ Parent | on HN ]

Re:Cloudflare keeps sending emails over a year after account... by corty on Sunday September 27, 2020 @09:51AM (#24606610)

Yes. But for all personal data the purposes for which it may be used is limited: generally[0] only the original reason for collecting the data or the legal basis for keeping the data dictate the uses. So anything kept for use in filing taxes or other bookkeeping obligations must only be used for those purposes.

[0] it is possible to use data for other purposes than originally collected in some circumstances, but I'm not sure if there are many legal precedents for that yet.

[ Parent | on HN ]

Re:Cloudflare keeps sending emails over a year after account... by lawtalkinghuman on Sunday September 27, 2020 @08:06AM (#24606007)

If Cloudflare can't get an email unsubscribe process to be GDPR compliant, should you trust them to handle the many far more privacy-relevant things they offer as a company...?

[ Parent | on HN ]

Re:Cloudflare keeps sending emails over a year after account... by hosker4u on Tuesday September 29, 2020 @02:59PM (#24631602)

Yes, if they cant unsubscribe people. I could not care less, it bothers me more this guy crying about getting an email.

[ Parent | on HN ]

Re:Cloudflare keeps sending emails over a year after account... by tomhoward on Sunday September 27, 2020 @12:36PM (#24607895)

I have no dog in the fight (I'm not connected or loyal to Crowdflare whatsoever), but this is a non sequitur.

Companies work to priorities lists based on how important things are for customers. So it's perfectly plausible that the very reason they're not flawless at removing cancelled users from all their email databases is that they're too busy focusing on, as you put it, "the many far more privacy-relevant things they offer as a company", which they regard as far more important.

I'm not saying that's definitely the case here; I have no idea of any specifics. But I've definitely seen things happen that way in other companies/teams I've observed.

[ Parent | on HN ]