Please or to access all these features

Legal matters

Mumsnet has not checked the qualifications of anyone posting here. If you have any legal concerns we suggest you consult a solicitor.

GDPR

15 replies

Maatandosiris · 04/09/2023 19:06

Are websites covered by GDPR? I have recently been banned from a website for contravening the moderator’s personal beliefs. It’s clear that there has been discussion about me (and this has now been made public on the forum). I am now concerned they hold my details and would like to make a subject access request (I believe they are based in the UK or the EU. Can I do this?

OP posts:
CyberCritical · 04/09/2023 19:13

Any business that processes your personal details needs to do so in a way that is compliant with GDPR which means that as long as the website is a registered business you have the right to see what information they hold about you and request it be deleted.

Maatandosiris · 04/09/2023 19:19

Thank you. How would I find out if it’s a “registered business” the website Carrie’s ads which would suggest it makes money, although there is no charge to use it per se

OP posts:
donquixotedelamancha · 04/09/2023 19:23

What sort of website is it?

What personal information do they have about you?

CyberCritical · 04/09/2023 19:30

If you look a5 the footer at the bottom of the website do they have small font that says things like Terms and Conditions or Privacy Policy. You're looking for a Privacy Policy ideally as that should contain the contact details for the DPO

Bookish88 · 04/09/2023 19:42

Registered business or not, if they're processing your personal data in anything other than a private domestic context then yes, they are subject to the regulation and your right of access applies.

Maatandosiris · 04/09/2023 20:00

Ah great thanks. They have my DofB and email address (which they use to send information to)

Its basically a forum site (although quite a bit more on there) -I guess the same set up as Mumsnet but on a different subject

OP posts:
donquixotedelamancha · 04/09/2023 20:04

In that case, yes, it sounds like a business and (even if not) they are an organisation processing your data.

I'd start by emailing them with the SAR. If they don't respond you may be able to get a physical address by searching companies house.

Maatandosiris · 04/09/2023 20:05

Great many thanks for your help everyone/ I’ll see where this gets me.

OP posts:
donquixotedelamancha · 04/09/2023 20:08

If they are a business and provably refused you service on the grounds of a protected belief it's conceivable you might have a case of discrimination under the EA2010.

That's a lot of hassle for probably little gain.

Maatandosiris · 04/09/2023 20:32

Yes this is exactly what they have done, the moderators have now posted something about me I consider libellous. Their privacy policy states I have a right to access the information held about me but gives no details anywhere on their site about how to do this.

OP posts:
Bookish88 · 04/09/2023 20:38

If they're registered in the UK, you may be able to find contact details by searching for the company here:

ico.org.uk/ESDWebPages/Search

CyberCritical · 04/09/2023 20:38

DM me the link to the privacy policy if you like and I'll take a look, often it's buried in the privacy policy itself, should be under a section labelled something like 'How to exercise your rights'.

CyberCritical · 04/09/2023 20:39

Oh and screenshot anything they've posted about you because if they have any sense they'll take it down as soon as you c9ntact them.

Maatandosiris · 04/09/2023 21:03

Thanks- I’ve sent you a DM

OP posts:
Maatandosiris · 04/09/2023 21:17

Thanks it doesn’t appear on the searches

OP posts:
New posts on this thread. Refresh page