Quote:
Originally Posted by FrustratedReader
In reality if Kobo had retailed this to me direct they would be breaking SOGO in EU as they have changed and damaged functionality of my property after I bought it. Without permission.
I'm sceptical that Kobo is GDPR compliant any way.
|
A rather inflammatory statement. Exactly what functionality have they changed and/or damaged? Their sync implementation has not changed in years so it predates your purchase.
As for being GDPR compliant? Last time we (corporately speaking) looked at GDPR, the keywords seemed to be "reasonable level of protection for personal data".
Given that Kobo does not collect your health and genetic data, biometric data, racial or ethnic data, political opinions or sexual orientation, this pretty much leaves basic ID information such as your name, address and ID numbers (for Canadians, your Social Insurance Number (SIN)) and web data information such as location, IP address, cookies and RFID.
I haven't noticed any need to give a real name, address, ID information and/or email address to register a Kobo device and the information collected does not seem to be being resold elsewhere (the only emails I've received at my test address for Kobo devices are from Kobo in contrast to the multiple messages I receive at several other test email addresses). If you start purchasing books from Kobo using a credit card, that falls under PCI DSS in this area and even stricter regulation. If you want to stick with gift cards and manual downloads, you can avoid even that level of potential exposure.
I feel asking what evidence do you have that Kobo is not offering a "reasonable level of protection for personal data" is not an unreasonable question. So, what evidence do you have?
The Google Analytics stuff might be iffy given that Google was recently hit with a 50 million euro fine in France. OTOH, if Kobo has "IP Address Anonymization" enabled, there covers most of the possible privacy concerns.