Retailer supplying information with manufacturer

RockyHardlength

Hi,

I have recently been in discussions with a manufacturer of a boiling tap that has failed after three years.

They have told me that I need to replace water filter cartridges every 9 months - but have just provided information that the last one I purchased was in November 2020.

My issue is that the replacement cartridge was purchased through an independent retailer on Amazon - with no connection to the manufacturer.

I believe that this is a complete breach of GDPR regulations regarding the sharing of information. I have provided neither organisation with the authority to share data or store data.

Am I within my rights to complain or am I making a mountain out of a mole hill ? 

Carrot007

Yes complain, though depends on what you may have agreed to.

Still not going to get you what you want though as I would have expected them to request you provide details of last filter change.

And if they require a 1st party filter they may have official resellers and be party to all sales to keep details in order, and this would have been in some info somewhere surely. Though still falls foul of GDPR unless they are actually the same company selling it under different names (unless you just tixck boxes to purchase things without reading them).

RockyHardlength

Carrot007 said:

Yes complain, though depends on what you may have agreed to.

Still not going to get you what you want though as I would have expected them to request you provide details of last filter change.

And if they require a 1st party filter they may have official resellers and be party to all sales to keep details in order, and this would have been in some info somewhere surely. Though still falls foul of GDPR unless they are actually the same company selling it under different names (unless you just tixck boxes to purchase things without reading them).

Thanks Carrot007.

no tick boxes offered and not the same company, which my limited understanding would make this a breach of data sharing.

visidigi

RockyHardlength said:

Hi,

I have recently been in discussions with a manufacturer of a boiling tap that has failed after three years.

They have told me that I need to replace water filter cartridges every 9 months - but have just provided information that the last one I purchased was in November 2020.

My issue is that the replacement cartridge was purchased through an independent retailer on Amazon - with no connection to the manufacturer.

I believe that this is a complete breach of GDPR regulations regarding the sharing of information. I have provided neither organisation with the authority to share data or store data.

Am I within my rights to complain or am I making a mountain out of a mole hill ? 

Mountain out of a molehill IMO.

Have you had to share the serial number of the tap to obtain the correct model cartridge etc? Do you have any proof that they share personally identifiable information?

RockyHardlength

No serial number shared.

only thing provided was delivery address to the retailer.

the manufacturer has them come back with the transaction based on that address - clearly showing personally identifiable information has been shared.



visidigi  said:

RockyHardlength said:

Hi,

I have recently been in discussions with a manufacturer of a boiling tap that has failed after three years.

They have told me that I need to replace water filter cartridges every 9 months - but have just provided information that the last one I purchased was in November 2020.

My issue is that the replacement cartridge was purchased through an independent retailer on Amazon - with no connection to the manufacturer.

I believe that this is a complete breach of GDPR regulations regarding the sharing of information. I have provided neither organisation with the authority to share data or store data.

Am I within my rights to complain or am I making a mountain out of a mole hill ? 

Mountain out of a molehill IMO.

Have you had to share the serial number of the tap to obtain the correct model cartridge etc? Do you have any proof that they share personally identifiable information?

RockyHardlength

More I think about this the more concerned I am.

imagine this was a health insurance company, and a retailer shared you had bought a packet of beer. You never told the retailer you had the health insurance but they had passed on data about a transaction which impacts you future premium.

Or a petrol company sold information based on car registration to the manufacturer about the type of petrol you used.

user1977

RockyHardlength said:

More I think about this the more concerned I am.

imagine this was a health insurance company, and a retailer shared you had bought a packet of beer. You never told the retailer you had the health insurance but they had passed on data about a transaction which impacts you future premium.

Or a petrol company sold information based on car registration to the manufacturer about the type of petrol you used.

Why should we imagine things which haven't happened?

visidigi

RockyHardlength said:

More I think about this the more concerned I am.

imagine this was a health insurance company, and a retailer shared you had bought a packet of beer. You never told the retailer you had the health insurance but they had passed on data about a transaction which impacts you future premium.

Or a petrol company sold information based on car registration to the manufacturer about the type of petrol you used.

That happens all the time, again GDPR is about personally identifiable information - non detail information can be shared etc as needed.

Do you 100% know for sure the reseller you bought it from wasn't fulfilled by the manufacturer or required the manufacturer to be informed as part of the process.

Who you buy from and where it comes from or how its fulfilled are a VERY different thing

Sooler

On Amazon who is the Dispatched from and sold by ?

Just an Example: Dispatched from and sold by PlumbworldUK.

Click on the company name to go to the  Detailed Seller Information , and then Policies tab what is the Privacy and Security information? and Seller's Privacy Policy ?

Just an example:

Privacy and Security

Amazon knows that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly. We want you to be aware that Amazon will provide PlumbworldUK with information related to your order when it includes products that were purchased from them including your name, billing and delivery address, email address, and price paid.
Amazon requires that all sellers protect your information and only use that information to fulfil your orders and in accordance with data protection laws and in a way that is consistent with Amazon.co.uk's Privacy Policy.

RockyHardlength

Separate business. No obvious relationship. Retailer is a small, family run business based in Norfolk, manufacturer is multi national with uk hq in Scotland.

no t&cs mentioning or asking for information to be shared with third parties.

Sooler said:

Privacy and Security. 

Amazon requires that all sellers protect your information and only use that information to fulfil your orders and in accordance with data protection laws and in a way that …..

Think the key bit is that information was not used solely to fulfill, it was also passed on to the manufacturer - with my name and address (making it personally identifiable information) with a use that I had not opted into.

Bradden

I would suggest you write to the companies Data Protextion Officer.