On 11/06/2018 21:13, Andy wrote:
> In message <
gdfhSDCDepHbFw7v@jhall_nospamxx.co.uk>, John Hall
> <
john_...@jhall.co.uk> wrote
>> I've just received an email from Gradwell saying that they "have
>> decided to sell our web hosting assets to Pickaweb Limited
>> (“Pickaweb”), a hosting specialist. As a result, with effect from
>> today, your account and billing records will be transferred to
>> Pickaweb. You will shortly receive a welcome email from Pickaweb,
>> containing new contact and login details."
>>
> (and me) Does this mean that our names, addresses, banking details etc
> have been sold by Gradwell to another company without our knowledge or
> consent? If so, is that legal under the new Data Protection rules?
The Data Protection thing put me right off Pickaweb.
Legal? I am not a lawyer but I see that Gradwell recently changed their
Ts&Cs to say that they can pass on your details and assign their
contracts. That is presumably what they are relying on.
Consent is defined as: “any freely given, specific, informed and
unambiguous indication of the data subject’s wishes by which he or she,
by a statement or by a clear affirmative action, signifies agreement to
the processing of personal data relating to him or her”.
I have not given that agreement nor was my agreement sought in any way.
The ICO has some great statements on their web site eg:
"The GDPR is clear that consent should not be bundled up as a condition
of service unless it is necessary for that service"
"It must be obvious that the individual has consented, and what they
have consented to. This requires more than just a confirmation that they
have read terms and conditions – there must be a clear signal that they
agree. If there is any room for doubt, it is not valid consent."
Pickaweb then compound the whole thing by passing my banking details to
a third party without asking for consent.
Can I be bothered to complain? I have two tough days ahead of me then I
am going boating round Birmingham. So no, I will settle for writing to
ask that my details are deleted and not passed to anyone. If I don't get
a response then time to complain to the ICO.