Is age defined in the European Union? I feel https://travel.stackexchange.com/q/134011/4188 should have been asked here so I am doing it. To travel with a discounted Youth Pass, you must be aged from 12 up to and including 27 on the start date of the Eurail Pass. Is there a legal definition of what "age" is here? Some people in the linked Q&amp;A insist it is based on birthdays but I can't find anything to back that up. In other words, if I was born on Feb 31, how old I am on Feb 30 legally? (nonexisting days are deliberate to avoid the discussion on me doxxing myself)
In both common law countries and in civil law countries, words are given their plain meaning for legal purposes, unless there is an express definition to the contrary is provided. And, in Europe, the plain meaning is unambiguous and is what the plain language that you quote says. (The meaning would be ambiguous in the Korean language, or regarding a horse, in contrast.) While there are times when there are age groupings that aren't the plain meaning (e.g. eligibility for youth sports league divisions, school enrollment), it isn't usually stated so plainly. For example, a sports team might have a U10 division which has a defined meaning, but is unlikely to say "for children under age 10" when it really means "for children under age 10 as of the first day of the season".
I presume that the document refers to "barn" and "barnebarn". Norway has forced heirship laws, which refers to offspring as "barn", not limited to those under the age of majority. Interpreted in the context of Norwegian law, there is no assertion in using the word that it grants a right to minors. When you add the additional condition that the recipient must have reached the age of majority, there is no conflict. In this kolonihage bylaws document, which is probably similar to the one you are looking at, §11.2.1 requires that a tranferee fulfill the criteria required for the allocation of parcels, and §11.2.2 addresses the non-necessity of paying the transfer fee in the case of death of the member, and does not create a special inheritance right. It also says that the new contract must be established. But a minor cannot establish a contract, and in general cannot be forced to fulfill the obligations of a member as spelled out in §9. You should check with a lawyer to be certain, of course.
"The EU" is a lot of different jurisdictions, and laws vary between them. The following answer applies to the UK. A: Alice is guilty of making and possessing indecent images of a child. The fact that the child was herself is irrelevant, as are her current feelings on the subject. The "making" offence was committed when she was under 18, so for that she would be treated as a child, but the possession offence would be be charged at her current age. If Alice has made recent copies of the pictures, for instance by moving her files to another computer, then she is guilty of "making" as an adult. B: As with "A", but with increased penalties for publishing it. C: As with "B", except that the offence was committed when she was under 18.
Under Albanian law, the situation is somewhat open to interpretation. Law No. 7850 of July 29, 1994 (English translation) Part 1 Title 1 spells out the law of capacity. Article 6 sets 18 as the age of full majority: The person who reaches eighteen years old wins the full rights so that by his acts he gains rights and holds civil obligations. Articles 7-9 place limits on capacity for those who are younger. Those under 14 can act with approval of their legal representative, but unconditionally can be member of social organization, posses everything he gains by his work, to deposit his savings and to posses these deposits himself. Article 8 says say that he "who has not reached fourteen years old, has no capacity to act", and Article addresses 14-16 in the special case of fourteen to eighteen years who is unable to carry out his own affairs because of psychic diseases or mental illness is deprived of the capacity to perform legal transactions a court decision. These transactions can be performed through his legal representative. There is no law covering mentally-fit people between 14 and 18. The capacity to contract is neither affirmed (as for 18+) nor denied (as for 14-). Albanian Supreme Court decisions could be accessed and searched here to see if there have been any court rulings on disaffirmation of contract when one is between 16 and 18 years old. (Better translations here, Albanian original here).
Who in the fraternity would be prosecuted if this became an issue? A lot of people could be held liable for this, including people who are not even in the fraternity. Anyone who has knowledge of the machine or the fact that it was possible for minors to access alcohol through it could technically be held liable if a prosecutor wanted to make that case. Presumably the building is owned by someone else and just leased out to fraternity members, and they very well could be held liable for sale to minors also. Would the machine be safer if it just accepted cash (so that no electronic paper trail was created), with a big warning sign WINK WINK that anyone under the age of 21 was strictly prohibited from purchasing from it? No. Payment method is irrelevant here. There are a number of states that legally allow vending machines to sell alcohol, but vendors are required to verify the age of any person accessing them and ensure that those cards aren't being used by people not authorized. What you describe is an extremely relaxed environment where admittedly no one is attempting to verify identities. The "accepting cash" scenario is no different than a liquor store selling alcohol to anyone that comes in just because they're willing to pay with cash instead of a credit card. Sales to minors laws are not "as long as you warn them, you're safe" laws. They require vendors to actively check IDs and ensure that alcohol is not landing in the hands of minors. Accepting cash just to erase the evidence doesn't meet that burden. There are a lot of legal troubles with the situation that could get a lot of people charged with multiple offenses. That you have underage fraternity members living there suggests you should not have alcohol readily accessible in the house at all, as most state laws expressly forbid providing access to alcohol, not just serving or selling. Them being there provides access to it, even if it's just a case in the fridge with a note on it. Not to mention, you technically cannot sell alcohol, as I highly doubt your fraternity has a liquor license to be able to do so. There's a big difference between asking everyone to pitch in to buy the case versus actively selling individual cans through a vending machine. The vending machine itself is violating liquor laws in your state merely by existing.
It's hard to prove a negative, and I'm not sure which specific part of the quoted Terms you object, to, but it specifically states that content access may be done to: Comply with the law Protect its customers; and Protect the security of its business; and Protect its business interests. It's unlikely that access of information to comply with the law is illegal. At least one EU directive, Directive 95/46/EC, sets limits on the collection and use of personal information. We're concerned with the first condition for lawful data processing, and the second principle of data quality. Data processing is only lawful if the data subject has unambiguously given his consent; or processing is necessary for the performance of a contract to which the data subject is party; or processing is necessary for compliance with a legal obligation to which the controller is subject; or processing is necessary to protect the vital interests of the data subject; or processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or in a third party; or processing is necessary for the purposes of the legitimate interest pursued by the controller or by the third party, except where such interests are overridden by the interests for fundamental rights and freedoms of the data subject which require protection. The principles of data quality, which must be implemented for all lawful data processing activities, are the following: personal data must be processed fairly and lawfully, and collected for specified, explicit and legitimate purposes. They must also be adequate, relevant and not excessive, accurate and, where necessary, kept up to date, must not be stored for longer than necessary and solely for the purposes for which they were collected; special categories of processing: it is forbidden to process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. This provision comes with certain qualifications concerning, for example, cases where processing is necessary to protect the vital interests of the data subject or for the purposes of preventive medicine and medical diagnosis. So, let's say that someone has given their consent. It'd be at least a little questionable whether the inspection of private information could mean that they access personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life. I'm a bit less clear on US laws, but you'd probably look for laws around Personal Identifying Information, as that's where a lot of focus has been.
Nicknames, usernames, or gamer tags are definitely personal data under the GDPR. You are operating under a very narrow definition of “identifying”, which is understandable since the definition of personal data in the GDPR isn't overly enlightening at first glance: […] an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; — GDPR Art 4(1) However, this definition does show that “identifiable” should be interpreted rather broadly. For example, indirectly identifying data is still identifying data – there doesn't even have to be a strong identifier like a name, passport number, or street address. It is also not necessary that identification enables you to determine the real world identity – identification is anything that allows you to single out a person, or to combine data into a profile of that person (compare Recitals 26 and 30). In any case, an online username or user ID is clearly an identifier and will fall under one of “a name, an identification number, […] an online identifier”. If in doubt, ask your data protection authority for guidance. You've correctly understood that you will need a legal basis to process this data, and that legitimate interest could be that legal basis. This doesn't have to be your own interest, so a community interest would be OK. You need to balance the user's rights against this interest. You have performed this balancing and have found that the interest outweighs these rights. You've noted that such leaderboards are a cultural norm and are generally expected, which strongly weighs in your favour. However, legitimate interest is not a free pass but just means an opt-out solution (right to object per Art 21). You should also inform users that the leaderboard is accessible publicly when they join your server (transparency principle per Art 5(1)(a) as detailed by the information obligations in Art 13). In particular, you should use a “message of the day” or welcome message functionality to link to your privacy policy. You should also be aware that other rights such as the right to access, erasure, and data portability apply. As an alternative to legitimate interest (opt-out) you could also consider consent (opt-in), though this results in slightly different data subject rights and is more difficult to do correctly. But I'd agree that legitimate interest is more appropriate here.
I think that there won't be any trouble from Germany, but the US could be a problem if the girl reports the case to authorities. In that case, further details would depend on the state in question. As far as Germany is concerned, there are two sections in the penal code that could be relevant here: § 176 StGB - Sexual abuse of children § 182 StGB - Sexual abuse of juveniles To make things more complicated, we would also have to take into account juvenile penal law and whether Germany would have jurisdiction in the first place. 1) Jurisdiction: I'm not sure whether this case would fall into German jurisdiction under § 3 StGB as the case could be deemed to be committed in the US. However, in that case, Germany could still assume jurisdiction under § 5 item 8 StGB. 2) Since our guy was only 18, it would be at the discretion of the court to decide whether juvenile criminal law or regular criminal law is to be applied. In the former case, the sentence would be lower (if there is a sentence at all). But then we still have to figure out whether our guy broke a law in the first place. So first of all, let's take a look at § 176 StGB: “Section 176 Sexual abuse of children (1) Whoever performs sexual acts on a person under 14 years of age (child) or has the child perform sexual acts on them incurs a penalty of imprisonment for a term of between six months and 10 years. (2) Whoever causes a child to perform sexual acts on a third person or has a third person perform sexual acts on the child incurs the same penalty. (3) In especially serious cases, the penalty is imprisonment for a term of at least one year. (4) Whoever 1. performs sexual acts in the presence of a child, 2. causes the child to perform sexual acts, unless the act is subject to a penalty under subsection (1) or subsection (2), 3. influences a child by way of material (section 11 (3)) or information and communication technologies a) in order to cause the child to perform sexual acts on or in the presence of the offender or a third person or to have the offender or a third person perform sexual acts on the child or b) in order to commit an offence under section 184b (1) no. 3 or under section 184b (3) or 4. influences a child by showing pornographic images or depictions, by playing pornographic audio recordings, making pornographic content available by way of information and communication technologies or pornographic speech incurs a penalty of imprisonment for a term of between three months and five years. (5) Whoever offers or promises to supply a child for an offence under subsections (1) to (4) or who arranges with another to commit such an offence incurs a penalty of imprisonment for a term of between three months and five years. (6) The attempt is punishable; this does not apply to offences under subsection (4) nos. 3 and 4 and subsection (5).” Since the girl is 15 years old, this section is probably not relevant. However, to know for sure, we would need to know her exact age when contact started. If she was only 13 years and 11 months and contact lasted 1 year and 2 months, then § 176 might be relevant after all. That takes us to § 182. “Section 182 Sexual abuse of juveniles (1) Whoever abuses a person under 18 years of age by taking advantage of a predicament by 1. performing sexual acts on that person or having said person perform sexual acts on them or 2. causing the person to perform sexual acts on a third person or to have sexual acts performed on them by a third person incurs a penalty of imprisonment for a term not exceeding five years or a fine. (2) A person over 18 years of age who abuses a person under 18 years of age by performing sexual acts on that person or having that person perform sexual acts on them for a consideration incurs the same penalty. (3) A person over 21 years of age who abuses a person under 16 years of age by 1. performing sexual acts on that person or having that person perform sexual acts on them or 2. causing that person to perform sexual acts on a third person or to have a third person perform sexual acts on that person, and thereby exploits the victim’s lack of capacity for sexual self-determination, incurs a penalty of imprisonment for a term not exceeding three years or a fine. (4) The attempt is punishable. (5) In the cases under subsection (3), the offence is prosecuted only upon request, unless the prosecuting authority deems there to be a special public interest in prosecution which calls for ex officio intervention. (6) In the cases under subsections (1) to (3), the court may dispense with imposing a penalty pursuant to these provisions if, having regard to the conduct of the person against whom the offence was committed, the wrongfulness of the act is minor.” § 182 para. 1 StGB applies only to cases where the offender takes advantage of a predicament. I seriously doubt there's a predicament involved here. § 182 para. 2 StGB only applies for sexual acts for consideration, i. e. when money is being paid. Since apparantly there was no payment involved in this case, no problem here and we can go on to para. 3. § 182 para. 3 StGB only applies to cases where the victim lacks the capacity for self-determination and the offender is at least 21 years old. Neither is the case here. Summary: As far as Germany is concerned, there's no trouble to be expected under § 182 StGB. § 176 StGB might cause problems but only if the girl was under 14 when contact began. (You stated that she's 15. This could mean that she just turned 15 but was 13 years and 11 months when contact began.) As far as German law is concerned, it looks like our guy was overly cautious and there was no need to cut contact. From the US perspective, however, things will probably be different. I'm not familiar with US law but we would probably need to know the state in question.