| Statement from Kolibri Image (German): https://kolibri-image.com/causa-datenschutz/ Google translate: https://translate.google.com/translate?hl=&sl=de&tl=en&u=htt... tl;dr The Data Protection Authority of Hessen suggested Kolibri Image to draft their own data processing agreement and get Packlink, located in Madrid, to sign it. [1] Kolibri Image then stated that they would "leave things as they are", which was incorrectly interpreted to mean that they'd use Packlink without an agreement instead of not using Packlink in the future. In addition, Kolibri Image forgot to update one of their six data processing agreements on various websites which still mentioned Packlink, so their clarification of the matter was not believed. Finally, the case was dropped because it (partially?) happened before the 24th of Mai. [1] Drafting a data processing agreement for Packlink is of course not very practical because who knows how they handles their data and why would Packlink sign it in the first place if they don't want to offer a data processing agreement. In addition, the cost of drafting and translating the agreement is much more expensive than the savings from using Packlink as a shipping processor. In any case, I agree that fining after asking for advice is not a friendly move. |