GDPR data request

Anyone put in a request for your data under GDPR, to someone who’s emailing you and never asked for your permission?

How successful was it, and are there any templates that are easy to use?
 


The confusing factor is it’s an American company.

I was hoping for a template email I could send but it looks like I have to write it myself.

They should give details of how to find out and how to be deleted within their privacy policy.
It’s an American company.

But like I said, I don’t want to be deleted, I want to be a pain in the arse and get them to give me all my data.
 
The confusing factor is it’s an American company.

I was hoping for a template email I could send but it looks like I have to write it myself.


It’s an American company.

But like I said, I don’t want to be deleted, I want to be a pain in the arse and get them to give me all my data.
It is possible to make your request verbally. Probably easiest to just call them?
 
The confusing factor is it’s an American company.

I was hoping for a template email I could send but it looks like I have to write it myself.


It’s an American company.

But like I said, I don’t want to be deleted, I want to be a pain in the arse and get them to give me all my data.

GDPR only applies to the EU I think.
 
I did a few mainly to test other people's response while working out how to do this myself.

It actually doesn't matter the form btw, written, phone even social media all have to be picked up.

The bit that everyone has picked up on is that the data returned has to apply to a 'natural person'. A lot of people that are just using email addresses seem to have come back with an email address can be an alias or group so doesn't necessarily identify a natural person, so in your case I don't think gdpr subject access request is the way forward.

If it's sales stuff you are looking at consumer protection from unfair trading - they legally have to make it "clear and easy" to unsubscribe.

Edit - I ain't no stinking lawyer and this post is not legal advice.
 
Last edited:
I did a few mainly to test other people's response while working out how to do this myself.

It actually doesn't matter the form btw, written, phone even social media all have to be picked up.

The bit that everyone has picked up on is that the data returned has to apply to a 'natural person'. A lot of people that are just using email addresses seem to have come back with an email address can be an alias or group so doesn't necessarily identify a natural person, so in your case I don't think gdpr subject access request is the way forward.

If it's sales stuff you are looking at consumer protection from unfair trading - they legally have to make it "clear and easy" to unsubscribe.

Edit - I ain't no stinking lawyer and this post is not legal advice.
Unless your email address is [email protected] for example.

Includes your name is what I’m saying.
 
Unless your email address is [email protected] for example.

Includes your name is what I’m saying.
I've made the same argument and it comes down to interpretation of the phrase 'natural person'. Most are going with because the email could be an alias and isn't directly and purposely mapped to an entity you are fine to keep them. I mean I could create [email protected] and say that identifies me as you.
 
I've made the same argument and it comes down to interpretation of the phrase 'natural person'. Most are going with because the email could be an alias and isn't directly and purposely mapped to an entity you are fine to keep them. I mean I could create [email protected] and say that identifies me as you.
Yeah, I’m with you. However, it’s clear that any email address with name.name is classed as personal data regardless of whether it is business or personal and it can’t be assumed it’s an alias.
 

Back
Top