Life would've been so much simpler if the major Italian payment provider was not an asshole. But it has always been, even if now US competitors have come down to the same level.

Over the past few months, our former payment provider Nexi S.p.A. (โ€œNexiโ€) requested access to private data, which we understood to be specifically the usernames and passwords of our supporters. We have refused this request. All our attempts to clarify Nexiโ€™s request, or to understand how their need for such information was necessary and legal, were met with what we consider to be vague and unsatisfactory explanations relating to a general need for risk analysis.

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
4 comments in c/gdpr@sopuli.xyz view that post
[+] 4 points 7 months ago (3 children)
  • [โ€“] [S] 2 points 7 months ago (2 children)

    Indeed that was why I called it out. To stress what shit is happening despite the GDPR. Violations are rampant and enforcement is sparse.

  • source
  • parent
  • hideshow 2 child comments
  • [+] 1 point 7 months ago (1 child)
  • [โ€“] [S] 2 points 7 months ago* (last edited 7 months ago)

    Data subjects have a right to complain under art.77 to the extent their own data is involved. But I am not a data subject in this case.

    I could still complain, but it would not have the force of art.77. It would basically be a request that the DPA voluntarily investigate in an โ€œex officioโ€ capacity -- on the DPAs own initiative (if they care to do so). Iโ€™ve done that before and the DPA simply ignored the complaint. I did not even get an acknowledgement.

  • source
  • parent
  • 3 comments in c/cash@slrpnk.net view that post
    [โ€“] 8 points 7 months ago (1 child)

    Who the fuck demands the passwords of users? If you're doing basic security you shouldn't even be able to get the passwords of the users, just the password hashes. Even then I wouldn't give that shit out ever.

  • source
  • hideshow 1 child comment
  • [โ€“] [S] 2 points 7 months ago* (last edited 7 months ago)

    Oh shit.. I didnโ€™t even think about the PWs.. that slipped passed me. I got to usernames and thought about how obnoxious it was to demand any info regarding someone elseโ€™s customers. But indeed the demand for passwords should perhaps even warrant a police investigation. Nexi clearly has no competency for working in the financial sector.

  • source
  • parent
  • [โ€“] 5 points 7 months ago

    Name and shame in the title. These ghouls deserve every piece of negative press.

  • source