(2 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{Incomplete}}
{{CompanyCargo
{{CompanyCargo
|Founded=2017
|Founded=2017
Line 8: Line 9:
}}
}}


DMarket is an international online blockchain-based marketplace for trading and buying virtual assets from games located on [[Steam]] such as ''Counter-Strike 2'', ''Team Fortress 2'' and others. The company’s headquarters are located in America, and it has development roots in Ukraine.   
'''DMarket''' is an international online blockchain-based marketplace for trading and buying virtual assets from games located on [[Steam]] such as ''Counter-Strike 2'', ''Team Fortress 2'' and others. The company’s headquarters are located in America, and it has development roots in Ukraine.   


==Consumer impact summary==
==Consumer impact summary==
Line 31: Line 32:


===DMarket requires submission of sensitive personal details to delete account.===
===DMarket requires submission of sensitive personal details to delete account.===
[[File:DMarket deletion "process" form screenshots.png|thumb|446x446px|[1] Shows the account deletion page on DMarket. [2] Shows the request submission form on DMarket. [3] Shows the "GDPR form" sent by DMarket support.]]To delete a DMarket account regardless if or any transactions were made, a user must submit a request on the DMarket websites ''<small>[image-n1]</small>'' that includes proof of ownership with screenshots and a detailed explanation. <ref>{{Cite web |title=Account deletion |url=https://support.dmarket.com/hc/en-us/articles/25102594718993-Account-deletion}}</ref> After submission ''<small>[image-n2]</small>'', DMarket support sends a "[[General Data Protection Regulation|GDPR]] form" ''<small>[image-n3]</small>'' requiring full name, government ID, home address and other personal data. This applies to accounts that have not completed "[[KYC]]" (Know Your Customer) verification as well.  
[[File:DMarket deletion "process" form screenshots.png|thumb|446x446px|[1] Shows the account deletion page on DMarket. [2] Shows the request submission form on DMarket. [3] Shows the "GDPR form" sent by DMarket support.]]To delete a DMarket account regardless if or any transactions were made, a user must submit a request on the DMarket websites ''<small>[image-n1]</small>'' that includes proof of ownership with screenshots and a detailed explanation. <ref>{{Cite web |title=Account deletion |url=https://support.dmarket.com/hc/en-us/articles/25102594718993-Account-deletion}}</ref> After submission ''<small>[image-n2]</small>'', DMarket support sends a "[[General Data Protection Regulation|GDPR]] form" ''<small>[image-n3]</small>'' requiring full name, government ID, home address and other personal data. This applies to accounts that have not completed "KYC" (Know Your Customer) verification as well.  


This appears to violate [[General Data Protection Regulation|GDPR]]'s minimization principle <ref>{{Cite web |title=Art. 5 GDPRPrinciples relating to processing of personal data |url=https://gdpr-info.eu/art-5-gdpr/}}</ref>, as the personal data required to delete an account exceeds what was necessary to create the account.<ref>{{Cite web |title=You will NEVER be able to delete your account and unlinking your steam is a massive hassle. |url=https://www.reddit.com/r/csgomarketforum/comments/w8p4vi/psa_dmarket_is_sketchy_you_will_never_be_able_to/}}</ref> DMarket forces users to provide additional sensitive information than were not originally collected, which is disproportionate and potentially non-compliant with [[General Data Protection Regulation|GDPR]]. DMarket refuses to provide specific legal basis for why this information is needed, ''<small>[image-n4]</small>'' leaving users without justification. As a result, users are effectively prevented from exercising their Right to erasure <ref>{{Cite web |title=Art. 17 GDPRRight to erasure (‘right to be forgotten’) |url=https://gdpr-info.eu/art-17-gdpr/}}</ref> unless they disclose unnecessary personal information, undermining the foundation and the requirements of the regulation.
This appears to violate [[General Data Protection Regulation|GDPR]]'s minimization principle <ref>{{Cite web |title=Art. 5 GDPRPrinciples relating to processing of personal data |url=https://gdpr-info.eu/art-5-gdpr/}}</ref>, as the personal data required to delete an account exceeds what was necessary to create the account.<ref>{{Cite web |title=You will NEVER be able to delete your account and unlinking your steam is a massive hassle. |url=https://www.reddit.com/r/csgomarketforum/comments/w8p4vi/psa_dmarket_is_sketchy_you_will_never_be_able_to/}}</ref> DMarket forces users to provide additional sensitive information than were not originally collected, which is disproportionate and potentially non-compliant with [[General Data Protection Regulation|GDPR]]. DMarket refuses to provide specific legal basis for why this information is needed, ''<small>[image-n4]</small>'' leaving users without justification. As a result, users are effectively prevented from exercising their Right to erasure <ref>{{Cite web |title=Art. 17 GDPRRight to erasure (‘right to be forgotten’) |url=https://gdpr-info.eu/art-17-gdpr/}}</ref> unless they disclose unnecessary personal information, undermining the foundation and the requirements of the regulation.


==See also==
==See also==
{{Ph-C-SA}}


==References==
==References==
Line 41: Line 43:


[[Category:{{PAGENAME}}]]
[[Category:{{PAGENAME}}]]
[[Category:Companies]]