JWeinCom said:
Personal data is defined as... "The data subjects are identifiable if they can be directly or indirectly identified, especially by reference to an identifier such as a name, an identification number, location data, an online identifier or one of several special characteristics, which expresses the physical, physiological, genetic, mental, commercial, cultural or social identity of these natural persons. In practice, these also include all data which are or can be assigned to a person in any kind of way. For example, the telephone, credit card or personnel number of a person, account data, number plate, appearance, customer number or address are all personal data." Not a lawyer either, but I am a law student. I don't really see any liability here. |
Art. 9 GDPR definition seems to go a bit further, but I guess it doesn't matter since as you mention that data is not necessary in order to use the website and it is made public with one's consent
still the option to delete own account sounds quite sensible imo
don't mind my username, that was more than 10 years ago, I'm a different person now, amazing how people change ^_^