Gymbox - PT added me on Facebook

steampowered

princesse_sarah_x wrote: »

I totally agree with the OP. The same thing happened to me once, I joined a local gym, filled in the form and went about my workout. The next day the guy who I had spoken to at the counter when signing up had added me on Facebook, obviously from my personal details I'd used on the form. Luckily I hadn't signed a contract and paid upfront for 1 month. I went back a couple of times after he had tried to add me but felt so uncomfortable I didn't return. I do find it invasive, unless he had asked 'do you have facebook' or 'can I add you on facebook' first. I'm friends with my hairdresser on facebook but we added one another whilst in the salon. I don't think the OP is overreacting at all, it's creepy behaviour

Perhaps there is a generational gap here. I see adding someone on facebook as no different to saying 'hi'.

It would be a bit silly to stop doing normal day-to-day activities or to find it creepy because someone you vaguely know said 'hi' to you on the street.

Fosterdog

A lot of people are assuming that he deliberately looked her up and added her, I've noticed that if two people have location services turned on and are in the same location more than once they get added automatically by Facebook to the "people you may know" list. It is entirely possible that as they had been in the same building at the same time on possibly more than one occasion (even if they weren't in the same room) then Facebook algorithm has automatically matched them.

I usually keep mine turned off but on the rare occasion I leave it turned on within a few days colleagues that I'm not linked to on Facebook and regular customers start to show up in my "people you may know" list.

That is probably more likely than him just happening to import his contact list at that time and without a surname it's more likely than him looking her up. If this is what has happened then I can't see how he could have breached anything as it's an entirely separate company that has chosen to link them.

[Deleted User]

steampowered wrote: »

I suspect we are derailing the thread a bit here

That was waaaay back on page 1.

The Op just wanted to know why she wasn't offered a month's free gym, I very much doubt she expected her thread to become a GDPR "magnum opus"

ThumbRemote

steampowered wrote: »

Anyone can browse the list of enforcement actions here: https://ico.org.uk/action-weve-taken/enforcement/. As you will see, pretty much all enforcement action has been against large businesses in respect of major data breaches or in respect of unlawful mass marketing campaigns. I failed to identify any small businesses on that list.

Daniel Short, 17th May - small business
Michelle Harrison, 23rd April - individual
Paul Shepherd, 28th March - individual

As these were all within the first page I can only assume you've deliberately chosen not to identify them.

steampowered

ThumbRemote wrote: »

Daniel Short, 17th May - small business
Michelle Harrison, 23rd April - individual
Paul Shepherd, 28th March - individual

As these were all within the first page I can only assume you've deliberately chosen not to identify them.

Fair enough, but they aren't small businesses - the first one was a recruiter who stole several hundred CVs to use in his new job, the second was an NHS worker who accessed patient records without authorisation and the third was a social worker who shared a confidential report about vulnerable children. Nothing which would worry a PT I would have thought.

unholyangel

steampowered wrote: »

I suspect we are derailing the thread a bit here, but the GDPR is not nearly as draconian as a lot of you guys think.


I followed the ICO's self-assessment tool as if I were a PT and it suggests that registration is not required. See https://ico.org.uk/for-organisations/data-protection-fee/self-assessment/y/N/Y/Yes/Yes/No/No/Non/Yes.

Except you answered none of the above to question 7. Change that to social (for networking sites) or even any of the other topics this might fall under and you have to register & pay a fee.

ETA: If they're marketing via digital format then they will need consent. The only exception is soft opt in - but to rely on that exemption you need to give them the option to opt out not only at the time of collecting their data but also any subsequent messages.

Legitimate interests is not a default basis for direct marketing. It can be classed as a legitimate interest but the sole fact its direct marketing doesn't make it so. It still needs to satisfy the 3 step test, they still need to inform you of their processing and the purpose in a privacy policy etc.

Having to inform you that they are processing your data and why is not the same thing as having to obtain consent.

marliepanda

steampowered wrote: »

Fair enough, but they aren't small businesses - the first one was a recruiter who stole several hundred CVs to use in his new job, the second was an NHS worker who accessed patient records without authorisation and the third was a social worker who shared a confidential report about vulnerable children. Nothing which would worry a PT I would have thought.

Post of the year. We can all just stop now, we can’t beat this.

The fact this is being compared to an add on Facebook. If only Zuckerberg knew what he was starting!

waamo

Who cares? The op has long gone.

reason2

ThumbRemote wrote: »

Daniel Short, 17th May - small business
Michelle Harrison, 23rd April - individual
Paul Shepherd, 28th March - individual

As these were all within the first page I can only assume you've deliberately chosen not to identify them.

hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahaha

I dont really need to reply since you were already burned by someone else, but HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA.

#clutchingatstraws

unholyangel

reason2 wrote: »

hahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahahaha

I dont really need to reply since you were already burned by someone else, but HAHAHAHAHAHAHAHAHAHAHAHAHAHAHAHA.

#clutchingatstraws

I sincerely hope you're still at school, writing a post as childish as that.