Is who your employer is a public/accessable knowledge in Germany Assuming you don't have LinkedIn or any social network that says who your current employer is, can your previous employer somehow find out through a certain source or access this information from somewhere to learn who you are currently employed with? Or how. For example, there are agencies in Germany such as Job-Center, Agentur für Arbeit, or immigration-office that normally have such information, but I wonder if they would disclose such information given your previous employer's query from them. In general, how easy it can be for a previous employer to access such knowledge about you in Germany.
That is private. Who you work for is not information that is disclosed publicly by any state actor in Germany, just like your taxes. In fact, that or who you are employed at is often regarded as personal and private information. Nigh impossible through agencies Public agencies like the Fiskus (tax), Agentur für Arbeit, and immigration are not allowed to give any information about a person to anyone but that person or another agency that has the right to that information. Yes, (generally speaking) the tax office may not even say that a person exists (or doesn't) and what their tax number is to anyone but the person in question.
Prove my work is not a trade secret violation Please don't. It's not your job to prove your innocence. The burden is on them to be specific, explain fully, and prove specific claims about your actions. In other words, don't justify, don't explain, and don't defend yourself to them. It's actually best you do not say anything to them, and just forward the letter to your legal counsel (Since you're selling software to be used in the medical field, I assume you already have some kind of legal counsel). For instance, even saying something as innocuous as "Managing patients, Exams, Bills etc are all public knowledge." could be used against you. Because it establishes the fact that you've been working on those features with them and that you've been working on those features with your new company (which doesn't necessarily follow, for all they know, you could have purchased a library module from someone else with those exact features). In other words, even if you were to reply with such an innocuous-sounding statement, you could be saving them months of cross-border discovery and litigation about some of their claims (even if you believed you were being entirely reasonable by defending yourself). But at the same time, don't take what I'm saying to mean that you should lie to them about which features you recently worked on. When I say that you shouldn't be talking to them. I mean that you should not be talking to them. You shouldn't be engaging with them and you shouldn't be giving them any shred of information whatsoever (implied or otherwise). It's not your job to make their job any easier. Do not reply to them. Don't even acknowledge the receipt of the letter (unless you already did by signing for it, which can't be helped). Use a legal intermediary. Give the letter to your own legal counsel (whether you signed for the letter, or not) and leave any reply to him or her (assuming he/she thinks this warning letter even warrants a response). And if this former employer gives you a phone call, kindly refer them to your legal counsel without saying another word.
Read the TOS (Terms of Service) for each DNA service you are considering. Each service will clearly outline the privacy of submitted samples, security of the process of analysis of samples, the storage and distribution (and possible destruction) of the resulting data, and linking of personal names (or the granting of anonymity, if available) to the data. The TOS will give you enough information to determine if you are comfortable with the privacy of the service. The TOS is a legal document; both you and the service are bound by that contract once you submit a sample and pay the fee. The TOS may outline any legal recourse you have against the company for violating the TOS. Each service is bound by the laws of the country where it is located and the countries where it might outsource the analysis, as well as relevant EU law - since you're looking at EU based-services - to provide security and privacy. Those laws will be outlined in the TOS. As an example, read https://dna.ancestry.com/en/legal/us/privacyStatement at ancestry.com about their DNA testing. It's an extensive TOS, and outlines US and EU law, including the Swiss Safe Harbor Framework https://en.wikipedia.org/wiki/International_Safe_Harbor_Privacy_Principles The DNA service, of course, can't guarantee the security of the data - or your personal information - in perpetuity. Companies are sold, TOS documents change (which would have to be subsequently approved by you), data storage systems "leak" information (by insiders and hackers), and on and on. ...but I don't mind doing a lot of research on my own to classify it if I get raw results. And, any kind of site that allows you to compare your DNA profile with others - if it is a different site/service than one that does the DNA analysis - will have its own TOS regarding the privacy of your data and the resulting metadata from comparisons to other DNA profiles.
If you are worried that some secret will become public, you should find and meet with an attorney, not a financial adviser or other nonlawyer. Your attorney is able to shield your secret information from disclosure in ways other professionals cannot. Raise any credit score issues you're concerned about. In general, the public has a right to access judicial records. See Nixon v. Warner Communications, Inc., 435 US 589, 597 (1978) (noting that the right is rarely litigated and not clearly defined). That right is not absolute; some records can be sealed, which means that the public can't read them. Local rules govern when that happens. I don't think the existence of a civil lawsuit could be made secretly except in special circumstances. Likewise, the plaintiff usually must identify herself, except in special circumstances. A plaintiff should assume that everything about the lawsuit--who filed it, against whom, what evidence arises, the trial, and who wins and loses--will be public.
I think you are misinterpreting what the article is saying. It's not Germany as a whole that is banning managers contacting employees (and since you are not a manager, this wouldn't affect you anyway), it is the German ministry of Employment banning it for its employees. When it comes to your own workplace, you will need to look at your own contract and see whether you are allowed to work on the weekend without, for example, getting extra money for that work. This is probably not the case for you as a PhD student, but if it is, you would usually need to talk to your employer before doing work on the weekends.
No, there is no general publicly accessible directory of lawsuits against private individuals, even if it concerns yourself. The complaint must identify you as the defendant indicating a ladungsfähige Anschrift, § 253 Ⅱ, Ⅳ, 130 ZPO. Commencing an action requires service of process, § 253 Ⅰ ZPO. I presume you are not a De-Mail user. So you will get a hardcopy. You may not know that, but such mail in Germany is usually sent in yellow envelopes. The mailman will carefully compare the mailbox label and in case of a match record the date and time of successful delivery on the envelope as well as a slip of paper returned to the sender, the court in this case. Now this will obviously fail in your case (unless the landlord maliciously attached a corresponding label to a mailbox). In a civil action the court “pretends” to be dumb regarding facts. The landlord must try to track you down. Evidently he knew your email address, so he had some contact details. If he was evil, the next option would be to ask the court for an öffentliche Zustellung, § 185 ZPO. If the court agreed, this means there will be, for instance, in the city hall a paper on a bulletin board “To the attention of Coala, last known address …: There is mail for you to pick up at my office.” Two weeks later the letter is automatically considered to be delivered.Some cities (example: Cologne, NRW) also publish these documents on the internet, but due to GDPR considerations delete them after a certain period now. If there was a lawsuit, there will have been a default judgment by now, i.e. you will have lost just by being a no‑show. However, you said you have never received the bill. This means the landlord must have produced false evidence, claim to have sent the bill and a subsequent warning notice, but there was none. But this is an entirely different issue.
The Right to Access is pretty absolute. However, there are some limitations: Is the service even the Data Controller for the data in question? Here, you're talking about notes of one user about another. Is the platform the controller for the notes, or would the note-taker be the controller? Or both, jointly? If the platform weren't a controller but merely a data processor for these notes, it would be illegal for them to disclose the information. Trish also correctly points out that the GDPR does not apply to processing for purely personal or household purposes, e.g. personal social media use. So GDPR would not provide a basis to compel a user to disclose their notes to the data subject, assuming that the note-taker is covered by this exception. Of course, this exception wouldn't apply if the notes are taken for other purposes, e.g. professional networking. Also, this exception doesn't affect the platform. There is an explicit limitation to the right of access in Art 15(4): The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others. Disclosing user A's notes about user B to user B would likely violate the privacy rights of A. The notes are both A's and B's personal data. However, the correct balance depends on context. E.g. an employer probably can't refuse to provide access to a performance assessment merely because it was written by an identifiable manager. The UK ICO has provided detailed guidance on this aspect to the right of access. They propose a three-step test: Step one – Does the request require disclosing information that identifies another individual? For example, it might be possible to redact other people's information (but not in your Mastodon notes example). Step two – Has the other individual provided consent? Step three – Is it reasonable to disclose without consent? What is reasonable is highly context-dependent, but UK data protection law gives some concrete criteria to consider. The EU EDPB has draft guidance on the Right to Access. They note that the Art 15(4) can cover a wide range of rights, not just other people's privacy rights. But as in all things, the data controller is required to strike an appropriate balance between user A and B's conflicting rights. In the Mastodon user notes scenario, I think that the note author's rights to privacy should be considered more important than the data subject's right to access those notes, thus making it possible to reject that part of a DSAR under Art 15(4) GDPR. If we assume that the note-taker A is a (joint) controller for these notes, then it would also be necessary to consult them before making a decision about the access request.
Does GDPR prohibit reading unsolicited emails from people who have not explicitly opted in to a mailing list? tl;dr: No. I have never heard of this, and I don't see how this could follow from the GDPR. You should follow up with the Secretary to find out how she came to her conclusion. Detailed reasoning: The GDPR restricts the processing of personal data, so it does in principle cover reading email, since reading counts as "processing", and an email may contain personal data. However, Article 2 (emphasis mine) says that: This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system. I would read this to mean that a human reading emails is only covered by GDPR if the emails are part of a "filing system" or intended to be. So reading the emails is ok, it's only problematic if you intend to systematically store them. Even filing them, while covered by GDPR, would presumably be allowed, because to actually act on the email, you would have to keep it, and Article 6 allows processing of personal data to "take steps at the request of the data subject prior to entering into a contract" and when "processing is necessary for the purposes of the legitimate interests pursued by the controller". One caveat: If the email contains data that falls under special categories of personal data (Article 9) you may need explicit consent for storage. That covers things like racial or ethnic origin, political opinions, religious beliefs and health information. So if someone discloses a health problem or their religious belief in their mail, you may need to ask them for permission to keep it. In summary: At most, GDPR would require you to promptly delete the email once you no longer need it (which could be immediately if the email is irrelevant to you). If the email contains data you legitimately need (e.g. a complaint you need to follow up on), you are allowed to keep it as required (based on Article 6 (f)). Note that in both cases no explicit consent is required from the email sender, unless the email contains particularly sensitive data, such as political/religious beliefs or health data.