r/gdpr
Reddit seemingly refusing to delete or anonimyze support tickets.
- upvotes
- 0
- comments
- 12
Post
Highlighted: the lines this signal was extracted from
I am asking specifically about Reddit, including its privacy/data-rights process and its Zendesk-backed support tickets, though any experience helps. I no longer have an active Reddit account under the email address involved. I opened roughly 6 support tickets, only one of them was handled (a GDPR deletion of the account, as due to a bug on reddit's systems I could not do it myself). I do not know the state of the other 5 tickets, they may be open or closed. I asked Reddit (via their support form under "Privacy inquiries") to erase my support data or, at minimum, permanently remove the identifying association between my email address and my former Reddit account identity in its customer-support records. I made clear that Reddit may retain a genuinely non-identifying operational record if needed for a lawful purpose. Reddit initially replied that it retains emails sent through customer-support channels for “legitimate business purposes, including security and abuse protection.” That response did not say whether Reddit would retain the actual email-to-account association, why that association itself was necessary, whether it could be removed/anonymized, or how long it would be retained. It was very clearly some macro they used. 5 working days ago, I replied via email with: An objection under Article 21(1) GDPR, insofar as Reddit relies on legitimate interests under...
Keep reading with a free account
The rest of this post, and every signal for Reddit, is in your free account.
Also quoted as evidence
5 working days ago, I replied via email with: An objection under Article 21(1) GDPR, insofar as Reddit relies on legitimate interests under Article 6(1)(f) to continue retaining the identifiable association.
From the post