This is not ok - Lemmy

Saw this today and now I’m reconsidering if Boost is right for me. I’m really hoping this is shitty boiler plate that was accidentally copied and over looked because that is some bullshit to say “unless we decide we want to use your personal data for whatever we want”. I know “legitimate interest” is a phrase from the cookies law but there is no legitimate interest justification for this. My data is my data and advertisers can fuck off, as can Boost if this the direction it’s going.

GDPR says no

Actually GDPR says yes. “Legitimate Interest” means things like security, anti fraud etc.

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/lawful-basis/legitimate-interests/what-is-the-legitimate-interests-basis/

What is the ‘legitimate interests’ basis?

It’s much broader than that and generally an organisation can do a balance of interest assessment and decide that a processing activity falls under legitimate interests… kind of like giving the monkey the key to the banana storage…
Exactly, I remember that while studying GDPR an example for legitimate interest was a company that self-advertises to you: I get your email from the purchase you just made because I have legitimate interest in continuing my business and I want to be able to advertise myself to you again to survive in the market. But trust me, I’ll just use it for the legitimate interest!
Yeah some of those are very atrocious and would absolutely not sustain an objective review. At any rate anything that gets money to a company in the broadest sense is vital to it soooo….
They need to crack down on what businesses are claiming is a legitimate interest. If the user could disable it and have their product/experience largely unchanged, it really isn’t a legitimate interest.
But that’s the whole thing; there needs to be a balance between users - who are largely customers or the product or an hybrid of both- and commercial interests otherwise there won’t be a lot of product / experience to be enjoyed. My personal take on the topic is that transparency is where it’s at. Knowing exactly wtf a company is doing with my data worries me much more - I can choose to be part of the game knowingly or skip if I don’t want some processing to happen. That they claim legitimate interest or not I couldn’t care less.