Results 1 to 10 of 105

Hybrid View

  1. #1
    Player
    Kaurhz's Avatar
    Join Date
    Jul 2015
    Posts
    3,619
    Character
    Asuka Kirai
    World
    Sagittarius
    Main Class
    Dancer Lv 90
    Quote Originally Posted by aiqa View Post
    Since there isn't a good reasons for the data collection, opt-out is also against EU law. GPDR sets requirements for processing personal data. FFlogs and tomestone are most likely to small to ever get into problems with that, but it's still not a great look.
    I don't think GDPR applies in this circumstance.

    Firstly because it is reference to an identifiable natural person, and whilst I am a person, nothing about my logs, or anything would attach the data to me as a 'natural person'. From Square Enix' perspective this may be true in that they hold information that would directly tie my character/account to identifiable details, but nothing about my logs does this.

    Equally in the case as with GDPR it is not strictly about the data itself but how that data is processed as to whether it would violate GDPR.

    It isn't that they are too small for anyone to care, because they absolutely would, it's just the fact that it's not really clear cut
    (3)

  2. #2
    Player
    aiqa's Avatar
    Join Date
    Jul 2019
    Posts
    358
    Character
    Eleasaid Seraqa
    World
    Zodiark
    Main Class
    White Mage Lv 100
    Quote Originally Posted by Kaurhz View Post
    I don't think GDPR applies in this circumstance.

    Firstly because it is reference to an identifiable natural person, and whilst I am a person, nothing about my logs, or anything would attach the data to me as a 'natural person'. From Square Enix' perspective this may be true in that they hold information that would directly tie my character/account to identifiable details, but nothing about my logs does this.

    Equally in the case as with GDPR it is not strictly about the data itself but how that data is processed as to whether it would violate GDPR.

    It isn't that they are too small for anyone to care, because they absolutely would, it's just the fact that it's not really clear cut
    There is no requirement for a direct reference to individual humans. It only has to relate to a human, which basically means that it wouldn't apply to bots playing FF, or data from a legal person (company). It explicitly includes data collected about online identifiers (so for FF that means usernames) as "personal data".

    And I doubt these websites would look much better if you look into the type of data processing they do. They rank everything, make it publicly available, and store for years. I haven't looked into if that is exluded from the GPDR, but I very much doubt it.
    (4)
    Last edited by aiqa; 06-25-2024 at 09:37 PM.