privacy gdpr data
Is sending log data + customer name + location compatible with data privacy and GDPR?
<p>I've written an updater program. Our customer downloads it to update our software with database. It would be helpful if we would know who has already updated our software. For this purpose I've added a function which uploads the log file to our ftp server, which is only visible to us. The log does only contain information about the update process, no personal data. But in order to know from which customer this log came he can fill out in the GUI his company name and location. Otherwise we wouldn't know to whom the log belongs to.</p>

<p>My question is: Do I need to add a checkbox that the customer agrees sending the log + customer name + location or not? Better would be if not because then not everyone will send the log. But only if it's compatible with GDPR and data privay laws. And if it's needed, is a checkbox where the customer agrees enough?</p>

<blockquote>
  <p>he can fill out [...] his company name and location. </p>
</blockquote>

<p>You only talk about data which identifies a company. </p>

<p><a href="https://gdpr-info.eu/art-2-gdpr/" rel="nofollow noreferrer">Article 2 GDPR</a> contains:</p>

<blockquote>
  <ol>
  <li>This Regulation applies to the processing of personal data [...]</li>
  </ol>
</blockquote>

<p><a href="https://gdpr-info.eu/art-4-gdpr/" rel="nofollow noreferrer">Article 4 GDPR</a> contains:</p>

<blockquote>
  <p>(1)  ‘personal data’ means any information relating to an identified or identifiable <strong>natural</strong> person [...]</p>
</blockquote>

<p>So the GDPR does not apply to legal persons like companies. So there is not privacy related issue.</p>

<p>However you have to keep in mind that data about employees is personal data. So if your log contains the (login)name of the person performing the update, it is personal data, so the GDPR would apply.</p>

<p>Of course if one of your customers is a natural person, or a <a href="https://en.wikipedia.org/wiki/Sole_proprietorship" rel="nofollow noreferrer">sole proprietorship</a>, then GDPR also applies.</p>
