Could my parents change my birth name without me knowing? Could my parents change my birth name without me knowing?
This generally requires a court order (everything depends on jurisdiction: this is a state matter, not a federal matter). As a minor, the courts could allow your parents to change from Dweezil to William without involving you, until you are old enough that the judge thinks you might be able to have reasonable input into the matter. Once you're over 18, your parents can't change your name &ndash; you would have to do that, at least if you are mentally competent. In Washington, the courts juggle the wishes of the child, the wishes of the parents, how long the child has had the name, and the social advantages or disadvantages of the name change, and permission from the minor is required if over 14 (child input would be solicited for a child over 7). Since this involves a court order, in principle this information is available to the child. In cases involving domestic violence, the records could be sealed. A name can be changed by changing the birth certificate which means filling out a form and paying a fee, and if the child is under 1 year old, it just requires the signatures of the parents (or, a court order). This "under 1" paperwork approach seems to be widespread (Colorado, New York, others). Also bear in mind that the initial filing of a birth certificate may well not have a child's name, which may not be supplied until the parents make up their minds. Changes to the birth certificate are knowable (they don't erase anything), but can only be revealed to the subject of the record, or in case of court order. Thus a change should be discernible, if other states are like Washington.
Does Amazon prohibit a family of adults from sharing a single Amazon account? No, or at least it seems unlikely. As outlined in my answer &amp; comments on Law Meta, a domestic or family-oriented character is palpable in the clause. That weakens the notion that Amazon's intent is to preclude scenarios which are of a personal-domestic nature and short of commercial/sublicensed use. The language &quot;You are responsible for [...] restricting access to your account&quot; seems more permissive than something akin to &quot;only you are allowed to access your account&quot;. The former language is consistent with the term &quot;non-exclusive&quot;, which otherwise seems to have no relevance or purpose in the clause. Users' ability (if any) to enter multiple payment methods with different names (i.e., card holder name) could be an additional indication that the scenario you have in mind is acceptable to Amazon. It is easy for a company to implement a validation for the purpose of identifying significant discrepancies of holder names and/or to have the user confirm that all payment methods refer to one same owner. The latter approach is more conclusive for scenarios where a woman has changed names as a result of getting married or divorced. The fact (?) that Amazon declined to include that simple validation weakens the notion that the company is genuinely interested in sticking to a rule of one-person per account.
No GDPR applies to people (not just citizens) who are in the EU. It has no applicability if both parties are not in the EU.
Term 1 isn't going to hold up, but that is not a GDPR matter. It's just a matter of basic consumer protection law in the EU. You can't offload responsibility for your mistakes. Looking at 2, Dale M. already pointer out that it's now how the GDPR works. You are the Data Controller. X,Y and Z are Data Processors. Article 28(1) of the GDPR is in direct conflict with your disclaimer. You accept zero responsibility, the GDPR says you are fully responsible. That's the exact opposite.
In general, providing a false name or birthdate (DoB) is only actionable when there is a legal duty to provide the correct information, or when a provision of a contract to which the person agreed requires it. If the falsity is part of a common-law fraud, then it would be unlawful, and possibly criminal. In the cases listed in the question: Sign up for an online service with a false identity although the ToS requires an accurate identity: This would be a breech of contract. Whether there could be a successful suit for such a breech would depend on why the contract demanded an accurate ID, and what harm the lie did or might do. Use a false name at a restaurant or hotel, but with no intent to defraud or avoid payment. I don't think there is any duty to give an accurate name on a restaurant reservation. In some jurisdictions the law requires an accurate name be used on a hotel register, and valid ID presented. But such violations are rarely pursued, unless they are part of a fraud or some other criminal activity (theft, prostitution, or drug dealing, say). Giving a false name when opening a bank account or other financial account. In the US, and I think many other jurisdictions, the law requires accurate identification of all bank account holders, including a SSN, EIN, or TIN. It also requires a bank to make efforts to verify such IDs, and violation are prosecuted. There are legal ways to get an account under an alternate name such as a penname or DBA, but this must be disclosed to the bank and to the IRS. Other cases that occur to me: Giving a false name at a shop when not obtaining credit or avoiding payment: generally legal. Obtaining a credit card under a false name: Can be done legally if disclosed to the issuer. Giving a false name or DoB to a pharmacy for a prescription: unlawful if attempting to access the medical info of another, or rely on another person's history to get a prescription, but may be lawful if this is just an alias, such as a celebrity might use to avoid publicity. Unlawful if done to obtain a controlled substance, or if insurance fraud is involved. Putting a false name on a job resume: lawful, but if hired an I-9 form will require a valid name and SSN or TIN. Employers usually may not require that a DoB be provided. Giving false info as part of any credit application: usually considered fraud, even if there is no intent to avoid payment, as it can deceive the creditor as to the amount of risk involved; specifically criminal in some states. Giving a false name on a date: perfectly lawful, but may cause a problem if a long term relationship develops. Some states require a valid name on a marriage license.
I'm pretty sure that under GDPR, you can indeed request them to send all data they have on you. If it's a complex request, they may charge you something like £10. If they have a lot of data on you, they may list the categories of data they have and ask you to pick one, rather than them having to collect and send everything. They should respond within one month, but iirc in the UK implementation, they can inform you (within that month) that they will respond within three months instead. For the rest, I only know current Dutch law. GDPR is not that different from what we already had (in general terms) and in many cases it even extends it. Under our law (WBP), you can also request a correction of the data in case it is incorrect, or deletion if they no longer need it for the purpose for which it was collected and stored. I don't really know how that works out in practice though, as Facebook can of course claim that "being able to connect you to your friends when you sign up for WhatsApp or Facebook with that number" is a legitimate purpose (in their eyes). They might also not have your full name and therefore not be able to connect your data to your request. Or, perhaps, they have only your full name (and there are probably more people with your name), so they'll have a hard time verifying that it's really your data which they would be handing over or deleting. The company is required to verify your identity before acting on your request. How they implement that is up to them. Under Dutch law, if I remember correctly, any data that can be connected to your person by any party is personally identifiable information (PII). While Facebook might not be able to find who's behind a phone number, your carrier most certainly can. Therefore, the data falls under PII protection laws and they will have to implement a way to verify you and get you your data. Finally, whether your local laws apply to Facebook, I don't know exactly. There's lots of information on this though, so you should be able to find it. Generally, countries say that if something happened within their territory (e.g. you signed up for WhatsApp while in the UK), their law applies. Companies, I've read, will instead try to claim that their main office is in SomeCountry and therefore SomeCountry's laws apply. But I'm pretty sure you'll be able to find a Facebook office somewhere where GDPR applies, so that's probably fine. While not an exact answer and while I am not sure about everything, I hope this gave you some pointers to go on!
You could say something like &quot;I do not consent to [XYZ], and I revoke any consent I may have given in the past.&quot; That makes it clear that you intend to revoke consent, without acknowledging that you ever did consent.
There are several plausible possibilities. This is a scam and isn't actually from the public transit authorities, in which case paying them hasn't helped you, and has contributed to this being a problem in the future for others. The payment information may have some subtle differences from the correct information and may actually go to the fraudster. The EBE number discrepancy makes this the most likely scenario in my opinion. There was a technical error. Maybe someone with a name similar to your was really cited, but due to a typo, your name was entered instead and the street address and corrected name were entered via some sort of autocorrect function. Somebody got lucky and avoided the ticket that should have gone to them. Maybe somebody went into the wrong field in the ticket entry system which could also explain the EBE number error. Someone has stolen your identity (perhaps a refugee) and is going around with a fake ID using your name and address. This doesn't explain the EBE number discrepancy, however. I've also heard of cases in some big cities where two people have the same name and birthdate and are constantly getting tickets meant for the other person but don't discover this fact for many years. Maybe someone like that recently moved into your town. This also doesn't explain the EBE number error. The bottom line is that even though it would perhaps be cheaper and less time consuming in the short run to just pay the fine, I would not recommend doing that in this case. In scenario 1, you really have a moral civic duty to take a little extra effort to identify a fraudster who is preying on lots of people in your community. In scenario 2, you again, have something of a moral civic duty to help the transit system get this problem fixed, and who knows, it might be a technical problem that is prone to recur and if you don't address it the first time, people will assume that your "confession" of fault by paying the first ticket undermines your credibility if it happens again. In scenarios 3 and 4, the problem is likely to recur and so you have an interest beyond this transaction in sorting out the situation. While your bare assertions that this didn't happen might fall on somewhat deaf ears as potentially self-serving, when corroborated by the fact that you have a monthly pass, I think that the likelihood that you would be found to be credible and beat the ticket is great in your case. Germany is less corrupt in bureaucratic matters like this than most countries on Earth. If this is a scenario 1 situation, the legitimate transit agency wouldn't even have a record of the existence of a ticket in the system, so you could be reassured that you would be at no risk if you didn't pay it. Given the EBE number problem, it is quite possible that even if you did try to pay it and it was simply a human data entry problem or something (or maybe your ex or a high school bully you defied and forgot about is now a transit cop and trying to inflict revenge) that you might not get proper credit for it anyway, so talking to a person at the agency is probably necessary anyway. So, my advice would be to talk to a human being in their office, ideally by telephone (without using the ticket to determine the proper telephone number as the number on the ticket would be a scam in scenario 1), but in person, if necessary, to get to the bottom of this. If this didn't work, I would write a letter or email with a copy of the ticket enclosed. If this falls on deaf ears, I would even consider making a police report of a suspected fraud, or even enlisting a local newspaper reporter or television news reporter in pursuing this situation because it is odd and would resonate with the general public. All of this will be a pain and won't necessary make narrow economic sense, but we don't always have a choice about when duty calls to fix a problem or what problem that will end up being.