DMarket: Difference between revisions
| (2 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
{{Incomplete}} | |||
{{CompanyCargo | {{CompanyCargo | ||
|Founded=2017 | |Founded=2017 | ||
| Line 8: | Line 9: | ||
}} | }} | ||
DMarket is an international online blockchain-based marketplace for trading and buying virtual assets from games located on [[Steam]] such as ''Counter-Strike 2'', ''Team Fortress 2'' and others. The company’s headquarters are located in America, and it has development roots in Ukraine. | '''DMarket''' is an international online blockchain-based marketplace for trading and buying virtual assets from games located on [[Steam]] such as ''Counter-Strike 2'', ''Team Fortress 2'' and others. The company’s headquarters are located in America, and it has development roots in Ukraine. | ||
==Consumer impact summary== | ==Consumer impact summary== | ||
| Line 31: | Line 32: | ||
===DMarket requires submission of sensitive personal details to delete account.=== | ===DMarket requires submission of sensitive personal details to delete account.=== | ||
[[File:DMarket deletion "process" form screenshots.png|thumb|446x446px|[1] Shows the account deletion page on DMarket. [2] Shows the request submission form on DMarket. [3] Shows the "GDPR form" sent by DMarket support.]]To delete a DMarket account regardless if or any transactions were made, a user must submit a request on the DMarket websites ''<small>[image-n1]</small>'' that includes proof of ownership with screenshots and a detailed explanation. <ref>{{Cite web |title=Account deletion |url=https://support.dmarket.com/hc/en-us/articles/25102594718993-Account-deletion}}</ref> After submission ''<small>[image-n2]</small>'', DMarket support sends a "[[General Data Protection Regulation|GDPR]] form" ''<small>[image-n3]</small>'' requiring full name, government ID, home address and other personal data. This applies to accounts that have not completed " | [[File:DMarket deletion "process" form screenshots.png|thumb|446x446px|[1] Shows the account deletion page on DMarket. [2] Shows the request submission form on DMarket. [3] Shows the "GDPR form" sent by DMarket support.]]To delete a DMarket account regardless if or any transactions were made, a user must submit a request on the DMarket websites ''<small>[image-n1]</small>'' that includes proof of ownership with screenshots and a detailed explanation. <ref>{{Cite web |title=Account deletion |url=https://support.dmarket.com/hc/en-us/articles/25102594718993-Account-deletion}}</ref> After submission ''<small>[image-n2]</small>'', DMarket support sends a "[[General Data Protection Regulation|GDPR]] form" ''<small>[image-n3]</small>'' requiring full name, government ID, home address and other personal data. This applies to accounts that have not completed "KYC" (Know Your Customer) verification as well. | ||
This appears to violate [[General Data Protection Regulation|GDPR]]'s minimization principle <ref>{{Cite web |title=Art. 5 GDPRPrinciples relating to processing of personal data |url=https://gdpr-info.eu/art-5-gdpr/}}</ref>, as the personal data required to delete an account exceeds what was necessary to create the account.<ref>{{Cite web |title=You will NEVER be able to delete your account and unlinking your steam is a massive hassle. |url=https://www.reddit.com/r/csgomarketforum/comments/w8p4vi/psa_dmarket_is_sketchy_you_will_never_be_able_to/}}</ref> DMarket forces users to provide additional sensitive information than were not originally collected, which is disproportionate and potentially non-compliant with [[General Data Protection Regulation|GDPR]]. DMarket refuses to provide specific legal basis for why this information is needed, ''<small>[image-n4]</small>'' leaving users without justification. As a result, users are effectively prevented from exercising their Right to erasure <ref>{{Cite web |title=Art. 17 GDPRRight to erasure (‘right to be forgotten’) |url=https://gdpr-info.eu/art-17-gdpr/}}</ref> unless they disclose unnecessary personal information, undermining the foundation and the requirements of the regulation. | This appears to violate [[General Data Protection Regulation|GDPR]]'s minimization principle <ref>{{Cite web |title=Art. 5 GDPRPrinciples relating to processing of personal data |url=https://gdpr-info.eu/art-5-gdpr/}}</ref>, as the personal data required to delete an account exceeds what was necessary to create the account.<ref>{{Cite web |title=You will NEVER be able to delete your account and unlinking your steam is a massive hassle. |url=https://www.reddit.com/r/csgomarketforum/comments/w8p4vi/psa_dmarket_is_sketchy_you_will_never_be_able_to/}}</ref> DMarket forces users to provide additional sensitive information than were not originally collected, which is disproportionate and potentially non-compliant with [[General Data Protection Regulation|GDPR]]. DMarket refuses to provide specific legal basis for why this information is needed, ''<small>[image-n4]</small>'' leaving users without justification. As a result, users are effectively prevented from exercising their Right to erasure <ref>{{Cite web |title=Art. 17 GDPRRight to erasure (‘right to be forgotten’) |url=https://gdpr-info.eu/art-17-gdpr/}}</ref> unless they disclose unnecessary personal information, undermining the foundation and the requirements of the regulation. | ||
==See also== | ==See also== | ||
{{Ph-C-SA}} | |||
==References== | ==References== | ||
| Line 41: | Line 43: | ||
[[Category:{{PAGENAME}}]] | [[Category:{{PAGENAME}}]] | ||