Gdpr Breach

AntF1985

User has deleted their comments.

photome

mountain out of a molehill.


yes its stressful having a daughter in hospital (hope she recovers)


a few texts from a car saleseman , in the grand scheme of things does it matter, just forget about them and move on

daveyjp

Think of the benefit. You won't now be stuck with a Peugeot.

Go and visit a Toyota dealer.

pulliptears

wesleyad wrote: »

Isn't that point though. Whilst going through all that having a daughter in hospital, why on earth would anyone give two hoots about some texts from a salesmen they'd initially contacted?

Some things need to be let go of else life becomes one big stress and you have a crap time.

Have you never had an event happen in your life that leaves you a bit out of sorts? A child in hospital would certainly leave you a lot more sensitive to things you'd probably usually brush off. Very much a 'Why are they doing this to me now when I have all this going on!'

Any other time OP would probably have let go.

sgun

GDPR may been breached by the salesman taking your number and storing it on a system (his personal phone) that is outside the company regulated system (their own secure database).

However, if your phone number only was taken, without your name or anything else that can identify you then it is unlikely a breach has taken place. If your phone number has not been passed to a third party then a breach has not taken place. You cannot be identified by a phone number alone.

The DPO would be involved in an investigation because personal data was involved and will have to check if you can be identified by the data now held on the salesman's phone (and will have to look at their data security systems, policies and training). The company will have to log the incident and decide if a breach has taken place, hence the involvement of the DPO.

They need to ensure that your number has not been passed onto a third party for any reason and ensure that he hasn't taken all your details from the file (including address, email etc).

I think its perfectly reasonable to assume if a big company like Peugeot gets their DPO involved, and the DPO admits fault personally to you, then GDPR has been breached, broken, not adhered to, clearly, by your responses, this is not a reasonable assumption, and you have responded to me like I'm an idiot or fool for thinking so, I can only thank you for this.

Actually, it isn't reasonable to assume a breach has taken place just because a DPO is involved. They would investigate any erroneous use of data if it was reported to them, they have to. It doesn't mean in any way that a breach has taken place. There is a huge problem with over-reporting GDPR and you have done the right thing by leaving it with the company to sort out. Its out of your hands, leave it to them. The DPO will be a highly qualified legal expert so nothing for you to worry about there either.

No-one has replied to you in a patronising way, just given you facts. It is nature of the forums that people don't sugar coat their replies.

I hope your daughter is well again, time to move on and let Peugeot deal with the issue. It probably is a sackable offence if it makes you feel any better.

Undervalued

sgun wrote: »

GDPR may been breached by the salesman taking your number and storing it on a system (his personal phone) that is outside the company regulated system (their own secure database).

However, if your phone number only was taken, without your name or anything else that can identify you then it is unlikely a breach has taken place. If your phone number has not been passed to a third party then a breach has not taken place. You cannot be identified by a phone number alone.

It is pretty unlikely the salesman would have stored just the number without the name of the person associated with it?

This is an area where, let us be honest, there are breaches of the GDPR all the time. That doesn't make it right, nor does it mean it shouldn't be reported, but it does put it into perspective.

Nothing makes me walk away from a company faster than over pushy salesmen and I would certainly be very annoyed by being given a hard time for choosing not to buy something. Most times I would let it pass but just occasionally I will use any technicality I can to fight back. Only the OP can decide if this particular situation warrants their time and energy.