“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”
Case closed.
Many people don’t realize you can request all the data Santa has on you. It’s honestly pretty shocking.
At least in the UK, he’s compliant with his personal data privacy policy.
https://www.royalmail.com/sites/royalmail.com/files/2021-10/Santa-Mail-Privacy-Notice-2021-Final.pdf
Taken from:
You’re literally supposed to leave out cookies for him.
To add to the approved reply:
The GDPR has some other requirements to it, such as an EU-based representative being necessary for operating in the EU, allowing users to request data updates, and getting consent for data collected
You could make the argument that the mall Santas aren’t authorized representatives of real Santa, as they are hired by malls with no supervision from the North Pole administration. Thankfully this doesn’t matter, because Santa himself is a resident of Finland, an EU country, which is also where his business is located. Chistmas is saved, everyone.
I think we can assume most non bs laws should allow legitimate good deeds
You are allowed to store info that is required to provide your service as long as the customer is aware of it.
People just don’t understand the law tbh.
And Santa has a month long awareness campaign every December with hit infomercial songs. So I think he’s Gucci
GDPR does not apply to individuals.
