Roon access to personally identifiable core data without user consent

I might be misunderstanding but you are a volunteer, right? So these are your opinions?

So what is being pulled, then, and why would it be pulled it unless it could be linked to a specific user?

It depends on whether the answer to question 1 is yes or no. Also the matter of continual access raises questions of transparency on how data is collected.

Yes, opinions have been presented but no answers as yet.

If I come across as a grump it might reflect the fact that I am one but I do have legitimate (I think) issues with this forum being the only way to ask for support. I do understand that there in some cases can be some efficiency gained by distributing the answering of simple questions to the community, but when I ask for support I would prefer to have my questions answered by people who have some sort of privileged access to the/an answer. People can guess right but is that good support? Using «regular» channels such as e-mail or chats usually gives you some indication that an official is on your case but my experience with this forum is that you need to make noise to be noticed.

1 Like

Well for this particular question you are having regarding the accessing and its privacy, may I suggest

  1. Contact us

If a User believes that the Company is not complying with the policies outlined in this Software Privacy Policy, or if the User has any questions relating to this Software Privacy Policy, then the User should write to the Company at this email address: contact@roonlabs.com.

1 Like

O.P.
Maybe do the above.

1 Like

Yes, that seems useful.

Hello @Hestepare,

You wanted comment from Roon, I think you may have missed the post that @danny made a couple of hours ago 
 he is Roon’s COO.

Link to that post to save you scrolling 


2 Likes

Personal data is data that can identify you as a person. It is not things like the logs of what your Roon Core is doing.

Yep - not referring to Roon’s involvement in GDPR specifically, just GDPR and CCPA in general. I was trying to make sure people walked away with a clearer picture of GDPR/CCPA
 Roon doesn’t seem to violate the GDPR/CCPA, they just need to be able to have the ability to remove PII if (a) they are collecting it, and (b) if the request comes from a region that is covered by the GDPR/CCPA.

The moment you collect logs from my computer in order to solve my problems with Roon the data you pull is necessarily linked to me. What would be the use otherwise?

As per your link from the EU commission,

Personal data is any information that relates to an identified or identifiable living individual

It says not only data that can by itself identify someone, but any information that relates to an identifiable individual, such as information about a named individual’s computer or network environment.

You might have a juridical argument that supports your claim, but at the moment it isn’t stated. Therefore it isn’t clear at all to me that the data you pull is not personal because it is data about my hifi (?), usage (?), network environment (?), computer (?) and maybe more. Logs contain some sort of info and if you need it to solve my problem, that info needs to be about me. So the answer to my first question, whether the pulling of data concerns personal data, appears to be «yes».

The second question is about the technical solution. How does this pulling happen? Is it a persistent calling-home or is it initiated by a Roon employee? Can Roon in principle harvest logs (personal data) without the customer knowing and is this ok?

The third question is whether this could all be done differently, for example with a big blue «send logs to Roon» button which would really solve all of my issues with this. As the title says my concern is not that Roon deals with my personal information but whether it does so without transparency.

Hi @AMT and thank you for your input. What data they’re pulling is less important to me than how and when. There are rules and regulations, and these take precedence over what’s in the TOC. You’d be hard pressed to find a court that would agree you had to do any weird thing just because the TOC said so.

My point is perhaps subtle, but if Roon pulls personal data at their own convenience I think it’s important to know what that implies.

To all of you saying I should close my eyes and think of England, thank you for your input, it is duly noted and I disagree.

2 Likes

Are you not from Norway? :rofl:

Yes! So why are they saying it???

Thanks but this is honestly besides my point.

I too encourage people to seek out entertainment forums when they want entertainment just as I seek out support forums when I would like support.

My understanding of @Hestepare’s question is by what method does Roon tech support access the logs. I attempted to explain the process, but he would like an official answer.

2 Likes

:joy: :rofl:

1 Like

30+ years working with IT, and if you ask me, no one in their right mind would want to examine logs if there isn’t really a reason :nerd_face: :woozy_face:

3 Likes

#LoosingTheWillToLive reading this thread. I ended up scrolling to the bottom and started listening to ‘Boredom’ :rofl:

There’s always one or two Edward Snowden’s in most forum’s / community pages. Now we know who ours are! Every cloud 
 :cloud:

Anyway, back to the music! :musical_note:

1 Like

There really should be more of them.
Find it troublesome that this is the support forum and an official answer is not given
yet


2 Likes

You have misinterpreted the definition. The information must relate to you, i.e., the information could be used, on its own, or with other data, to identify you.

For instance, an email address, public IP address or post code are PII. However, your play history or artists contained in your library are not.

The logs do not contain PII.

1 Like

I don’t think it’s troublesome, because I’m not sure what the issue is! As subscribers we have all read and agreed to the terms and conditions and as such we are in agreement with the provider of the service having access to the information stated in the T’s & C’s.

There is no where I have seen that stipulates that additional permissions and consents will be sought for the collection of this data other than in the agreement that concludes the contract that we take out as we commence the subscription and therefore it is beholden on us as the consumer to determine this before we finalise the subscription agreement.

I am concerned that it appears that many people do not fully read, comprehend and understand many of the contractual agreements that they enter into on a regular basis, not just in regard to Roon, but in many of the services that we commit to in especially in and around online/internet/digital providers.

1 Like