beberlei

you need to send complaints to your data protection authority, each european country has one.

Yes.

They are a belarus company, selling to mostly US companies, so probably pay little sales taxes. other taxes are paid on profit, so explicitly after employee salaries are paid.

Salaries are usually the largest expense in many IT companies. They don't collect monitoring data or otherwise huge ingest of data from users, their server costs are probably low.

Their main channel of acquisition is partners, I believe Basecamp+Asana doen't take money for being on their partners page. Both just link out to the websites of partners without any means of "tracking", so that seems a right assumption.

If renting an office is more expensive than one monthly salary for one employee you have got yourself a palace, or you strategically choose the wrong city like SF or NY.

65% of my costs are salaries in my company. Looking at Buffers transparent cost report they are similar. From my experience talking to other business owners it is about the same, sometimes higher.

Now depending on what profit margin you are targeting, lets say 20% pre-taxes for a bootstrapped business in growth mode (it is "low" because you are re-investing money into the company by hiring people) that leaves 800.000$ * 70% => 560000$ for salaries. More than enough for 7 people.

obviously?

Not every employee must be a high paid engineer. And there are certainly non SV based engineers that are totally fine with less than 100k $ per year?

Being based in Germany, I calculate around 100k€ revenue per employee myself, maybe a bit more.

I doubt that is true, do you have numbers for this claim? I see many companies founding limited structures (UG or GmbH) to have avoid maximum personal risk. It can be done with just 1€ of capital.

I dont know much about that, but in a previous job 6 years ago we saw mediawiki in quite a few non technical companies used as internal doc system

A reminder, HHVM is not Hack. you can run both type of scripts with either <?php or <?hh. Wikpedia is <?php because its underlying MediaWiki is PHP and used outside by many companies. As such a migration of Wikipedia to PHP 7 is probably mostly an ops and not a software task.

Wikipedia was always a PHP software and just running on HHVM for the performance gain, not for the Hack language. The underlying MediaWiki software is used outside of Wikipedia a lot, always on the PHP not HHVM stack. I expect its only a project for their operations team and should be managable.

Afaik Etsy and Wikipedia only used HHVM for the performance win and not the Hack language on top. Since Wikipedias tech stack "MediaWIki" is heavily used by PHP companies it can't be using Hack features.

Slack came out with a blog post a few month ago, writing that they use the Hack features on top of HHVM. That is the only one besides Facebook that I know of (there are probably more)

Edit: Source for Etsy using PHP 7 now https://speakerdeck.com/wcgallego/hitting-the-turbo-button-u...

But you are sending personal data (ip address) to a third party by directly connecting to their service. Not sure about canadian privacy law, but eu company would need to list this third party in their policy.

edit: just realized this comes across like bikeshedding. I do applaud and like your approach to privacy and its simplicity. It wouldn't decrease the appeal of your app at all to mention that you query the environment canada data, which is probably a public service and will not missue the data itself).

The definition of median is precisely that the top 0,1% affect it only 0,1%.

But household income is very tricky to measure and for example its unclear if they include health expenditure in exactly the same way

But the absolute freedom of speech is just from prosecution of the government (correct me if I am wrong). private parties can always deny you their platform to be used for hatemongering or anything else really.

In the 90s and early 2000s you had to search for the nieche content as well or know where it was located. Hundrets of different phpBBs or other forums hidden from "uninitated" people.

The simplicity of central platform just has all the users going there, because they don't want to search for hours to find communities to participate in.

infowars is still available at infowars.com, they just can't use the platform and distribution effects of fb, twitter, spotify, etc anymore, so they are precisely back in 1999.

The post mentions heavy API users will get exceptions based on their use-case.

If privacy shield gets scraped, then I might have to switch my European business to use only European third party services. At our company we use a carefully selected number of U.S. services that we believe have the interest of their customers and data at heart, but without privacy shield we might not be allowed to use them.

The massive downside for me as EU business:

1. Lost time and money having to migrate. 2. Usually european companies providing the same service are worse, leaving me and my customers worse off.

If you look at the numbers of how many people listen to radio I think this is a fair number. Each song on the radio is pushed to thousands and more of listeners at once on a station. The daily listener reach of big stations is essily in the millions. Spotify is a drop in the ocean compared to radio

suddenly the EU VAT system looks awesome :-)

consider the increase in child birth rate by this outage. lives will be forever changed :-)

Diesel has a much lower tax than gasoline per liter. The car manufacturers just serve the higher demand for diesel cars, because it is cheaper to operate monthly.

Fifa has billions of dollars, it is still not for profit.

Not for profit financially just means you cant give profits but have to reinvest it 100%

But wikipedia is not for profit, it seems the law doesnt apply to it?

i assumed that only small repositories that nobody except the author is using can be moved in such a small timespan of a few hours. Heavily used open source projects have issues indexed in Google with permalinks, their users probably hardcoding git urls, connections to package managers, heavily customized Travis CI integrations and the like.

a few hundred thousand repositories of the 85 million reported Github repositories is really not much, see https://github.com/ten at the bottom for the number.

The EU had competition law before that mentions 10% of global turnover as a maximum fee, along with very detailed notes of how to set them: https://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:C:...

The Sherman Act also mentions a ceiling of 10 million, 3 years of prison for private persons. And from history we know antitrust authorities broke up companies like AT&T or Standard Oil, which seems to me a much bigger punishment.

Both laws only mention the maximum fine.

Yet you don't see small companies sweating over competition law.

how is interpretation of the law not a problem with any law that was in effect before GDPR. It didn't stop anybody from starting businesses before and will not after.

20 million is the max penalty for repeat offenders. See article 83 about fines being proportinate to the offense: https://gdpr-info.eu/art-83-gdpr/

This is a european thing, if any law says $x is the max fine or alike, then for a first time offense you usually get much less.

from the DPA that you can sign with Google with regard to GSuite:

> 5.2 Scope of Processing. > 5.2.1 Customer’s Instructions. By entering into this Data Processing Amendment, > Customer instructs Google to process Customer Personal Data only in accordance > with applicable law: (a) to provide the Services and related technical support; (b) as > further specified via Customer’s use of the Services (including the Admin Console > and other functionality of the Services) and related technical support; (c) as > documented in the form of the applicable Agreement, including this Data Processing > Amendment; and (d) as further documented in any other written instructions given > by Customer and acknowledged by Google as constituting instructions for purposes > of this Data Processing Amendment.

So no, they probably can't track and feed that into youtube ads, because it is not a cause that provides the service or support.

Afaik Google announced last year that they stopped processing GSuite account emails to a large degree.

I agree, and Google is probably well aware that they tread on thin ice and they will probably fight their version of legimitate interst up to the European Court of Justice.

It is not illegal to track users only if they opt out, by citing legitimate interest as the ground for processing not consent. That is how all privacy policy generators and lawyers handle google analytics, facebook pixel, even self hosted solutions like piwik/matomo. We will need to sit out what legimitate interests really mean, but at least in germany there are some state privacy agencies that put forth this approach where you allow to opt out.

Have you looked at Shopware? Having worked with many PHP-based ecommerce systems I like it the most.

You are not excluded from the law as volunteer organization.

As far as deleting old member records and public archives, it depends on what consent members have given before. Membership information, especially receipts for subscription must be kept usually for 10 years for bookkeeping purposes. As for public posts, unless the members withdraw their consent (Excercise Right to be Forgotton) i don't see why. They knew then that the posts are public?

edit: you must formalize this with a privacy policy though, what data you keep, what type of consent (article 6) and for what reason you need it, if you haven't done so yet. Then ask every member for approval of the policy.