Would there be anything wrong with writing a program to pull Google Flights data? I live in Florida, U.S. and I would like to write a program (for personal use) which searches the Google Flights site for cheap flights. I am a beginner at programming so I have no idea if there are likely to be any issues with this. I tried looking through the terms of service and didn't find anything that I thought was prohibitive. One thing I thought might be an issue is the number searches/minute, but I again didn't find anything about that.
Contrary to the other answers, Googles Terms of Use state: Don’t misuse our Services. For example, don’t interfere with our Services or try to access them using a method other than the interface and the instructions that we provide. https://policies.google.com/terms?hl=en Google withdrew the Flights API in April 2018, leaving the website as the only public access for the data. Given the wording in the general Google Terms of Service and the withdrawal of API support, it’s highly likely that scraping this data could be viewed as a breach of those terms as you are not accessing the web UI as intended.
united-states Facts are not copyrightable. Assuming Scrapehero collected these facts in a legal manner and assuming the source of these facts does not contain copyrighted (protected) material, then selling such a collection may be legal. Of particular relevance is Feist Publications, Inc., v. Rural Telephone Service Co.. Here, Feist Publications copied Rural's phone directory into Feist's own phone directory. The supreme court found that Rural's phone directory was not copyrightable and thus not protected. Of course, this cuts both ways. Assuming Scrapehero did not inject creativity into the data, nothing stops a recipient of such data from distributing it themselves. In practice, this probably isn't a concern for Scrapehero. This answer is US-specific. Some countries recognize Database Rights, which may prevent such activity.
Your app is a simple case of copyright infringement. All the Pokémon are copyrighted, the lettering and names are also protect by trademarks. Trying to claim fair use will be outright impossible: you'll use huge portions of the individually protected Pokemon (the iconic ones like Pikachu) and you are usurping a market they are already in. They have given licenses for apps (Pokemon Go). Pokemon are artistic and some form of fiction. The last straw might be if you'd do a rather obvious parody, but even then, I see no way to show Fair Use with what you stated. No disclaimer can change that, and publishing your work might open you to a huge lawsuit with damages for each individually protected Pokemon you infringed on. With between 750 $ minimum and 150,000 $ absolute upper limit per infringed item (last is for willful infringement), you don't want to infringe on Pokemon, as you could be very easily liable for a number in the 6 to 9 digits! Even if Nintendo might only try to get the statutory damages for all the 900 Pokémon, that is a number of at least 675,4000 $. And that's before looking at Trademarks. Pikachu has about 6 live word marks and there are 111 different Pokémon trademarks filed (some expired or dead)!
What you are doing is commonly referred to &quot;web scrapers&quot; and they are legal in the EU. What you cannot do is extract personal data. Since the data you are aggregating is non-personal data, whether or not a chat button is available, it should be fine. EDIT As some of the commenters said - it's legal, but many websites detect scrapping. To (try to) avoid being blocked by the server, make it act human. Something like. I check once every 15 minutes with 3 minutes +/- is probably enough. That also is probably what a human would do using the website so it should strengthen your argument the website is unavailable.
Your rights notwithstanding, the government has the power to do such things under appropriate circumstances. First, you would have to be in violation of some ordinance, for instance in Columbus OH you are a violator if the grass is over 12". This should generate a notice informing you what the issue is and giving a deadline for remedy. If you don't comply by the deadline, they are then empowered to send out guys with tools, and the city will bill you for the work. You could call them and ask what the deal is. They might say "We put the notice on your gate", or "we mailed it to you". From a legal POV, the onus is on them to be sure that you're notified. It would be a good idea to verify that this isn't a scam. [Addendum] Bryan TX kindly provides a video about code enforcement, and gives a link where you can go directly to the section of interest (starting 0:43). Your description of the situation is at variance with what they say is the law (12"; 7 day advance notice whereafter they will correct the violation. They also say no notice is required for second violation within a year; $100 administration fee added to costs; lien will be placed on property if unpaid). I assume that your back yard is publicly visible: they recognize that "when the area observed is plainly visible, from a vantage point where the Code Officer has the right to be there, there is no reasonable expectation of privacy". That could include visible from a neighbor's property if the inspector has permission from the neighbor to be there. Otherwise, there's a simmering 4th Amendment problem (assuming that they didn't get a search warrant).
When you use other services, the question is whether that service acts as an independent data controller, or as a data processor who only uses the data on your behalf. When engaging a data processor they must be legally bound to only use the data on your behalf, for example with a contract / data processing agreement (DPA). See Art 28 GDPR. Data processor status is attractive because processors are seen as an extension of the controller. In contrast, when sharing data with other controllers you would need a separate legal basis to authorize this sharing. Google offers tons of different services, so this question needs to be considered on a case by case basis. For Google Cloud services or Google Workplace, Google generally acts as a data processor. For other services, Google acts as a controller. Notably, Google Fonts does not offer a DPA so that you cannot claim they're acting as a processor in that context, regardless of what other Google services you use. An equally important problem when using Google services is the data transfer problem. Google is controlled from the US, but the US do not offer an adequate level of data protection (see the Schrems II judgement). Comparatively few Google services allow you to select where the servers are located, as to prevent transfers of personal data to countries where privacy cannot be guaranteed. For example, this is why Google Analytics (GA) is problematic. Google acts as a data processor for basic GA features but makes no promises about the location of servers. Thus, using GA implies a (probably) illegal transfer of personal data to the US.
Using software generally does not entail any legal requirement to acknowledge the use of that software, and would only arise as a licensing condition. Google services, including Translate, are subject to certain terms of use especial the part about what they expect of you. They do not impose any requirement regarding acknowledgment, therefore they cannot later demand any royalties. If a translation program imposes any demands on your usage of the program, that has to be part of the original agreement whereby you were allowed to use the software at all.
You probably can't refuse to use such services. The relationship between you and these services is very different when you interact with them as a consumer, versus when these services are provided on behalf of your employer. In the latter case, the service is (or at least should be) bound as a data processor who can only* use your personal data as instructed by the data controller, your employer. Thus, it is your employer who determines for what purposes your data will be used, not the cloud service. Your employer has a legitimate interest in providing a modern and secure productivity suite to its employees, and in requiring you to use such services for efficient communication and collaboration. Of course it would be possible to provide some such services on-premises, but the GDPR doesn't really discriminate between self-hosted and third party services, as long as the third party service is contractually bound as a data processor. To a large degree, this is of course a legal fiction. The cloud services deploy new features all the time, and all that your employer can really do is agree to those changes, including agreeing to new ways for how to process your data. Also, the service provider may act both as a data processor on behalf of your employer for some purposes, but as their own data controller for others. E.g. in Google Workspace (formerly GSuite, formerly Google Apps for Business) Google collects analytics data about how you use their Docs product, and they use it for their own purposes. However, they would only process the document itself as a data processor. This is quite different in the consumer version where Google can use personal data for their own purposes, although within the limits of their privacy policy. Within your work account, you do have some privacy controls, similar to a consumer account. While your employer can set defaults and restrict features, you are not forced to share all data. E.g. in a Google Account, you can “pause” web and app activity (i.e. browsing history) that would otherwise be collected from Chrome browsers while logged in with your work account, or from Android devices that are managed by your employer. This data would potentially be used by Google for Ads, even with a Workspace account (I'm not sure). However, Google Workspace services generally do not feature ads themselves, e.g. the paid Gmail version does not feature ads. The largest real issue with the use of such services by an European employer is the international transfer of data to a non-EU jurisdiction, especially into the U.S. The GDPR offers many alternatives for how such transfers can be protected. In the past, the EU and US had used the Privacy Shield mechanism. However, it was found to be invalid in the 2020 Schrems II ruling, due to concerns about US mass surveillance. Subsequent guidance from supervisory authorities explained that it's not sufficient to use “standard contractual clauses” as an alternative protection, but that additional safeguards have to be implemented, which would effectively deny the personal data to actors in the US. Both Google and Microsoft offer some “data sovereignty” choices that prevent international transfers into the US. However, those have to be configured appropriately by your employer. Thus, instead of asking “can these services be used?” to which the answer is yes, it might be better to ask “is my employer using these services in a compliant manner?”. If you have concerns about such issues, you can contact your employer's data protection officer