Assume I am leaving my job and want my personal information removed from this third-party service (Slack). They say [1] "Primary Owners of a workspace or org must contact Slack to request deletion of a deactivated member's profile information.". What if I contact the "Primary Owner" before leaving my job and they ignore my request, or if I've already left and don't know how to contact them or who they are? Why can't I simply request that my personal information be removed from a completely third-party American company's database?
I thought about this out loud before, and got the response "If you are using company account, company owns the data. The data produced during company time is company's property. Company has to request for deletion. Slack is right about it."
That made makes me ask more questions:
- Is my full name, birth date, telephone number, job and other details Slack collects company property?
- Can they also sell this to other third parties, along with my social security number, which the company also collected during business hours?
- Is Slack also free to sell this data to third parties?
- Does GDPR protect your personal information ONLY if you gave it away during your free / unemployed time using your personally owned devices and ONLY to services you have admin access to?
[1] https://slack.com/help/articles/360000360443-Delete-profile-...