Can I refuse to send an email to untrusted domain If I have to discuss financial, legal or medical subjects (or anything requiring privacy, or anything really) via email, can I refuse to do so if I don't trust the domain of the email of the other party? The country is Belgium if that matters. More details about my specific case: my ex-wife and I have seen a notary¹ recently regarding our divorce. We need to come to a financial arrangement, so we have to discuss this via e-mail with the notary in CC. I have a Gmail email account, the notary has a belnot² account and my ex-wife has her employer's email. I trust quite much @gmail.com because, ok, maybe their automatic systems will read my emails to target advertising, but no one malicious could ever specifically open my email about my divorce to... to what? What could anyone from Google do with that? I trust @belnot.be quite much too, just because I've seen so many notaries with such an email account. That may be a bad reason but if so many professionals use this service, and those profesionals deal with sensitive data, I hope it's not too bad privacy-wise. But I don't trust @my-ex-wife-s-company.be. Her new husband work there too, it's a small company (it's not a company but a public administration but it is small and managed without a lot of financial means and not too many rules) and I don't really know who can access the mailboxes of everyone. I'm sure that I would not send emails from my company email for personal information, but can I refuse to send emails to a recipient I don't trust? Thank you. ¹ Not sure about the translation, it is a notaire in French. ² I'm not absolutely sure about who manages this domain (maybe something like the national federation of notaries if such thing exists, or something equivalent), but most notaries in Belgium have a @belnot.be email account.
Communicate how you like You are under no obligation to use any particular method of communication. If you don’t want to use email use the post. Or hand-deliver your messages (probably better to use a courier so it doesn’t look like stalking). Of course, she is free to share anything and everything you send her with anyone she likes. Unlike the lawyer, she owes you no duty of confidentiality. I think you are naive if you don’t think she shows or at least tells her new partner what her ex-partner has sent.
No, there is no general publicly accessible directory of lawsuits against private individuals, even if it concerns yourself. The complaint must identify you as the defendant indicating a ladungsfähige Anschrift, § 253 Ⅱ, Ⅳ, 130 ZPO. Commencing an action requires service of process, § 253 Ⅰ ZPO. I presume you are not a De-Mail user. So you will get a hardcopy. You may not know that, but such mail in Germany is usually sent in yellow envelopes. The mailman will carefully compare the mailbox label and in case of a match record the date and time of successful delivery on the envelope as well as a slip of paper returned to the sender, the court in this case. Now this will obviously fail in your case (unless the landlord maliciously attached a corresponding label to a mailbox). In a civil action the court “pretends” to be dumb regarding facts. The landlord must try to track you down. Evidently he knew your email address, so he had some contact details. If he was evil, the next option would be to ask the court for an öffentliche Zustellung, § 185 ZPO. If the court agreed, this means there will be, for instance, in the city hall a paper on a bulletin board “To the attention of Coala, last known address …: There is mail for you to pick up at my office.” Two weeks later the letter is automatically considered to be delivered.Some cities (example: Cologne, NRW) also publish these documents on the internet, but due to GDPR considerations delete them after a certain period now. If there was a lawsuit, there will have been a default judgment by now, i.e. you will have lost just by being a no‑show. However, you said you have never received the bill. This means the landlord must have produced false evidence, claim to have sent the bill and a subsequent warning notice, but there was none. But this is an entirely different issue.
We cannot dispense personalized legal advice: that is what your attorney is for. However, I agree with your analysis that this is most likely covered by fair use, and indeed it is not obvious that you have taken anything that is protected. There is no creativity behind a number such as entries in the &quot;I did N pushups&quot; column. The arrangement of data into a web page passes the smidgen of creativity test, but &quot;210&quot; is not a creative number. The terms of service of a website cannot negate your right to use the website however you want in a non-infringing way. If your use is &quot;fair use&quot;, then they can't tell you that you can't use it. In case it turns out that &quot;fair use&quot; fails, the matter would hinge on what exactly the TOS says. They may have granted you permission to make use of their &quot;information&quot;. So there are three positive avenues for you to consider: not protected, fair use, and permitted. A practical difficulty is that a university lawyer is only interested in the interests of the university, and they are as likely to say &quot;don't do that&quot; or &quot;get permission&quot; as they are to say &quot;that is fair use&quot;. You can hire a lawyer who is paid to care about your interest, though there is never a guarantee that the lawyer's advice is correct. I think it is likely that the lawyer will tell you to not say anything until legally forced to, given the apparent rebuff of your request for special permission.
Invasion of privacy and false light torts would probably not be applicable here. Very few states have adopted the false light tort because of its conflict with First Amendment principles and there was no agreement or even request to keep the text private. The copyright issue is trickier. First all, the TOS may provide that the copyright belongs to the text service provider or that there is a license. But, even in the absence of an express license, sending someone a message which is equivalent to sending them a letter, probably gives rise to an implied license that the person to whom it is sent can use the message that arises merely from the act of sending it without restriction or qualification. Implied license and fair use also heavily overlap. Publishing the text exactly as it was sent to you protects you from defamation liability because it is true. On the whole it would be extremely unlikely for there to be any legal liability for publishing a text from someone that they sent to you. Of course, one can imagine exceptions. If the person receiving the text was in an attorney-client relationship, or priest-parishioner making confession relationship, or was communicating regarding classified national security matters, or there was a non-disclosure agreement in place, among other possibilities, an evidentiary privilege and duty of confidentiality could apply and disclosing the material without the permission of the privilege holder could breach a duty of confidentiality and give rise to liability. If the picture was a nude picture of a minor, there could be a criminal and/or civil liability issue, and some states have also made posting "revenge porn" a criminal offense and/or a basis for civil liability. If the disclosure was effectively a way to facilitate insider trading that could be a problem. If the contents of the text were accurately transmitted but known to be false and were disseminated without disclosure of its falsity for the purpose of defrauding a third party, that could be a problem. But, no facts that obviously flag any exception are identified in the question. The mere fact that the posting may be embarrassing, or hurt someone's reputation, or was made without someone's express consent, in general, would not be a basis for liability.
Not going to hold up. Dutch Supreme Court confirmed 2012-09-21 in LJN BW6135 that arbitration is still covered by the the right to an independent judge, as established in Golder v UK, ECHR 1975-02-21, nr. 4451/70. Stack Exchange can't decide the rules themselves. (The Dutch case confirms that sector-wide arbitration is in fact legal, with regard to a standard arbitration clause commonly used in the Dutch building sector. The arbiter was found to be independent in that case precisely because they weren't picked by the builder involved.) The GDPR is only indirectly relevant, but the fact that it's mentioned does mean that there is an indisputable intent to provide services to EU consumers. (See section 23 of the GDPR, or its national equivalents). As such, you can't hide behind a US business address. If you intend to do business in the EU, it's under EU laws - all of them. You can't say that only the GDPR applies, and not other rules. I'm having a bit of a problem finding a source, but I'm fairly confident that consumers have the right to sue at their own, local court, overruling the default of suing in the court where the counterparty is located. Finally, I have the right under national law (Dutch: BW 6:236 start and sub-n) to strike the arbitration clause up to 30 days after the conflict arises, and demand a court decision. That's not 30 days after I accept the "Public Network Terms", that's 30 days after the arbitration is invoked. Dutch law explicitly allows arbitration abroad, and arbiters may apply foreign law, but as written the arbitration clause has no legal basis in the Netherlands, and any arbitration resolution would therefore not be considered valid. You may wonder if it matters to Stack Exchange that the arbitration decision would not hold in the EU. Well, consider a clause like Indemnification, which demands the user indemnifies Stack Exchange. That's a pretty empty demand if it's not enforceable.
Yes, their waiver has no legal basis and is invalid under the GDPR. They should have hired a better lawyer. GDPR rights cannot be waived (mrllp.com). The last bit should have been: Therefore, in consideration of my participation in any project, I understand that retaining my name and email address, as described above, does not require my consent and that the right of erasure, as spelled out in the GDRP Article 17 (1) b does not apply. The legal basis for our lawful processing of this personal data is Article 6 (1) f ("processing is necessary for the purposes of the legitimate interests pursued by the controller"). I.e. there is nothing in the GDPR that compels GitLab to erase this information, but their waiver is bogus. Keeping track of individual contributions in a software projects is necessary for a number of reasons, including security (if somebody contributes code that jeopardizes security, you want to audit everything that person has contributed).
The GDPR does indeed require that the password be stored "securely". It does not specify the technology which must be used for that purpose. Hashing the PW is a common method, and should be sufficient if properly implemented (strong hash function, use of salt, etc). But other methods of securing the password might be sufficient. Encrypting the PW rather than hashing it, so that an authorized person could decrypt it temporarily might be OK. Or perhaps a security app can separately retrieve only the specified characters of the PW through some sort of encryption. Or perhaps the ISP is not using proper security. In the case of Knuddles in the linked news story, an actual breach occurred which led to the poor security being reported. You could send a report to the appropriate national Data Protection Authority.
In German Law you need to give your agreement ("Willenserklärung") to a contract or in this case terms of service. This is done by telling the other part. In some cases this can also be implied by an action (example: putting your bottle of beer onto the cashiers table is an offer to buy this bottle). As a second criteria a "Willenserklärung" needs to be the exact will of the part that declares its will (the website user in this case) §§ 133, 157 BGB or that the other side (you) could only see so (not the case here as this mainly speaks of content). If you visit a website and there are terms of services, the "Willenserklärung" is only given when the user read and agreed to the terms. If he did not, the terms of service are not applied until the user agrees to them. So I would recommend to block the website until the user agreed (overlay) as you need to proof he did when in court. Additionally there are so called AGB's in Germany. Those are contracts that are used or planed for many (more than 3) uses and set by one side (you). This may apply here, so you need to follow a lot of other rules like making sure the user had access and agreed, then there are many content restrictions and so on... I recommend consulting a German Lawyer specialized on this topic as this is very complex and includes other German laws for Media too, depending on the content of your site and terms. Also note that everything said is only based on my own knowledge and can not be used as safe legal source.