Hello.
So when I was still on lemmy.ml, I tried to delete my posts/comments but most of them keep having them JSON error, then when I refreshed my account they somehow do not appear anymore? But when I manually inspected the communities that I was subbed into on another browser, some of my posts are still there.
Giving up after thinking that I just ignore it, I just deleted my avatar and banner, and deleted most of my posts/comments anyway. They seem to not appear when I am logged on.
Then, I somehow got onto the ‘Delete Account’ earlier this morning (just as I wanted to do several days ago), submitted the credential needed, and then the page redirected me onto homepage. But now when I did revisited the communities I was in on my .ml account, posts/comments are still there.
Did the admin just set it up so that my logins are just revoked, and will not purge and/or disassociate my posts and comments on my previous .ml account?
It should take 30 days for your data to be scrapped after an account deletion: https://github.com/LemmyNet/lemmy/issues/2977
Thank you!
Addenum:
Even my profile picture and banner got reinstated.
Do I request to GDPR my data?
You can try, but the reality is all of your activity gets replicated to every instance. You should assume that it’s permanently out there.
GDPR doesn’t apply to any entity without EU prescense. There’s still gonna be an instance somewhere out there that has your posts/comments. You should assume any information you post online to be there forever.
You are wrong. “Though it was drafted and passed by the European Union (EU), it imposes obligations onto organizations anywhere, so long as they target or collect data related to people in the EU.” From https://gdpr.eu/what-is-gdpr/
How are they gonna enforce it if you dont live in the EU and your server isn’t in the EU? Interpol?
Well the US isn’t in Interpol, (edit: okay the US is in Interpol, I got it confused with ICC, but my point still stands) and I doubt the US would extradite for something simple like violating the GDPR. There is also Russia or China potentially running a spying instance to gather up any data they can. Your posts/comments are public forever.This I don’t know. They can always send fines, but cannot force actors to pay them or to comply. I guess they can block the service in the EU through the ISPs, and arrest people if they ever set foot in the EU?
An entity outside the EU may still fall under the GDPR. Consult a lawyer.
There was a discussion about GDPR on mastodon github, and they seemed to conclude that GDPR does not apply to natural persons, which includes most instance admins who aren’t corporations or any entities, but just random people not profiting from anything.
Not sure how valid, since they aren’t lawyers.
That doesn’t sound right. But then again, like someone else already said: If they aren’t in the EU and don’t have dealings with them (because they aren’t large companies), who is going to enforce it?
I think most likely the website (instance) gets blocked in EU. Maybe they get a fine that they can’t force them to pay until they step foot into EU. I highly highly doubt they’d put the effort of extradition
This isn’t easy to do yourself: thing is, the way you identified yourself as being “you”, an asymmetric cryptographic key pair associated with your account, got deleted when you removed your account.
If your posts and comments don’t contain any personally identifiable information (that is: no-one can tell it was you who made them) I’d just let it be. Otherwise this is going to be difficult.
