I just logged in and checked my reddit account, and all my deleted posts have come back.

  • Alkalyon@lemmy.ml
    link
    fedilink
    English
    arrow-up
    6
    ·
    1 year ago

    I have already sent a GDPR request to Reddit and they refuse to comply.

    I asked them to delete everything they have about me, including my account and they told me that I need to login into reddit and ask it from there which:

    1. I don’t have to since GDPR says that I can even do it verbally and I don’t even have to write to a specific email, I can just let any employee of that company that I want this and they should honor it.
    2. They straight up don’t even have the option to delete your data there, since I requested for the complete erasure of my data as that is also in my rights.

    Reddit literally refuses to comply with GDPR rules and tonight after work I am going to lodge a formal complain about GDPR violations as I do have proof of this in my emails.

    Fuck Reddit I hope it crashes and burns.

    • wrath-sedan@kbin.social
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      Mm mm sure does smell like EU legal action in here.

      On a serious note, that is an absolute new low for Reddit and I’m sorry that you have to deal with it right now.

      • roomey@sh.itjust.works
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Yea, get onto your national data commissioner or friendly solicitor and see what happens, it’s crazy that they aren’t following GDPR. Good luck!

    • Eavolution@kbin.social
      link
      fedilink
      arrow-up
      2
      ·
      1 year ago

      Personally, I’d file the complaint with the Irish government. They seem to have a habit of going after big social media companies like Meta for GDPR violations.

    • whitehatbofh@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      1 year ago

      I am going to lodge a formal complain about GDPR violations as I do have proof of this in my emails.

      This is the way.

    • Shindig@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      1 year ago

      They are supposed to verify that the person requesting deletion or another right under GDPR is the same as the person whose data it is, or that at least the requester is authorized to act for the person whose data it is.

      • Alkalyon@lemmy.ml
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        The controller should use all reasonable measures to verify the identity of a data subject

        Huge emphasis on reasonable. If by asking me to log in for the sake of verification results in me not being able to delete my data as I’ve demonstrated above, then this is 100% NOT REASONABLE.

        They are actively hindering the process that GDPR requires me to take.

        I don’t care about the small letters, this is a GDPR violation. I should have an easy way to delete my data and this ain’t it.

      • Alkalyon@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        If you are not a European citizen you cannot ask for your data to be deleted but you 100% can report a company, in this context Reddit, for not complying with GDPR.

      • AlteredStateBlob@kbin.social
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        You can file a complaint with any EU supervisory authority, even if you’re not personally an EU citizen, as long as the company you’re complaining about does operate specifically and targeted in the EU. It is better if you are a citizen though. But as long as they’re mishandling EU citizens data, doesn’t matter who tells the authorities.

      • Shindig@lemmy.worldOP
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        For companies, GDPR applies to people in European Economic Area whose data is used by companies, or companies that have an office in EEA or another stable arrangement in EEA and process personal data of people located anywhere.