Edit: I was under the wrong impression that if you specifically call out ia_archiver in robots.txt they would honor it. It’s been completely ignored since 2017.
It could just let you delete an arbitrary account ;)
https://web.archive.org/web/20230324031319/https://www.soflo...
I guess things are improving?
Is this a real product, or a test item?
In the UK it's showing the initial link as costing £ 29,90.
'rip off Britain' I guess.
“ Your personal data will be used to process your order, support your experience throughout this website, and for other purposes described in our privacy policy.”
Does this mean while processing my order, the account removal, they update or recreate the account? :)
I've found forum posts of people resorting to using the email/password from the previous owner, or sending a registered letter to SoFlow asserting the new ownership.
So, and now I'm speculating, it's possible that this is less about deleting the account than it is about unlinking a scooter from your account, and it is a way for SoFlow to dip into the secondary market -- each transfer nets them another 20 EUR.
It's also possible that this is a way for the new owner to unlink their scooter from the previous owner, with an associated service charge -- the checkout page requires proof of ownership. In that case, it might be a way to prevent fraud, i.e. people stealing scooters and resetting them; thieves are unlikely to pay 20 EUR for that, nor are they keen on tying their real identity to the stolen scooter.
Like I said, this is speculation and I'm not saying this is a good way to do it, and it's not at all explained on the website, I'm just thinking aloud here. It just seems unlikely that anybody would attempt to charge 20 EUR for a simple account deletion.
4. Right to deletion
a) Obligation to delete
You may request the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete such data without undue delay, if one of the following reasons applies:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing was based and there is no other legal basis for the processing. You object to the processing and there are no overriding legitimate grounds for the processing, or you object to the processing.
- The personal data concerning you have been processed unlawfully.
The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO.
This itself is illegal. It must be simple and straightforward. EU laws broadly do not tolerate the rules lawyering popular in the US, companies know what the intent is and playing games will not work out in their favor.
the problem is violations are just far to many
the reporting of them spotty
and the processing is far too slow
also too little clarification for "predictable edge cases and ways companies try to circumvent" had been put in law upfront (laws some a form of comment section into which such things can be placed, most times as result of previous court decisions)
and from the resources which are available too many are bound in large companies bullshitting around by trying to delay enforcement by a very obvious misinterpretations of the law and huge legal teams/founds to delay and delay and delay
There are circumstances where they can charge a 'reasonable fee' for processing a Subject Access Request.
also having a payed deletion and a hidden free GDPR complilant deletion is also not legal
Deletion of user account
Purchase the required SoFlow account deletion from the official SoFlow online shop.
€ 19,90
Well, looks like they took this too literally and put actual price on "your privacy".
That would be 19.90€ please.Total € 183.545.103.533.410.025.472,00
They apparently don't do live stock availability checks :)
SoFlow AG Bionstrasse 4 9015 St.Gallen Switzerland
They are not members of the EU. Still, a well-written email in legal lingo in the country's official language helps a lot. Remember to include a reference to the relevant local law.
Some leads: https://www.ey.com/en_ch/law/a-new-era-for-data-protection-i...
- provide it for free and process it in due time
- not hide it trying to trick the user into "buying" something to delete their account
through if you have bought one but can not use it because someone else has an account with the hardware you bought from them then the person from which you bought it must do the deletion request for it to be covered by GDPR
and they probably could come up with some nonsense where the account is deleted by the device "stays locked" and you have to pay 20€ to unlock it for a new account
that might still be in violation of consumer protection law, but no longer has anything to do with GDPR and even in consumer protection law will be in a gray zone where you can do little but complain to official agencies