DuskWill wrote:I haven't been into international laws lately, but the erasure of data, according to the aforementioned Article 17(1), requires to be done upon request under one oft the listed situations.
"DuelingBook.com" is processing my personal data (namely, my email address and username, and also IP address if they are storing that). That processing must fall within one of the legal bases laid down in Article 6: namely, consent, contract, legal obligation, protection of vital interests, performance of a public task, or legitimate interests. Of those, the only that are possibly applicable to this processing are consent or legitimate interest. If consent is a basis, then I withdraw that consent under Article 7(3).4: "It shall be as easy to withdraw as to give consent." Then, under Article 17(1)(b): "the data subject withdraws consent on which the processing is based", the data must be erased. If legitimate interest is a basis, then I object to the processing under Article 21(1), and accordingly, the data must be erased by virtue of Article 17(1)(c): "the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing" (it is clear, given the nature of the "DuelingBook.com" website, that there can be no significant public or commercial interest in the processing as to provide overriding legitimate grounds). Accordingly, in either case, my situation falls under one of those listed (either Article 17(1)(b) or Article 17(1)(c)).
Debt wrote:Moldova isn't even apart of the EU or EEA
This is irrelevant. Article 3(2)(a) states that the Regulation applies to processing even by a controller located outside the EU, where it involves the offer of goods or services (in this case, the online service provided by "DuelingBook.com") to people within the EU. Since the "DuelingBook.com" website is accessible from all over the world, including the EU, the Regulation applies.