MartiniDaniels wrote: »anitajoneb17_ESO wrote: »MartiniDaniels wrote: »Your game is info is open to add-ons of other players already, and you are not complaining. Why complain now?
Upload and storage onto a 3rd party site with search functionality.
There are hundreds of similar sites for different online games, where you just need to enter @userid and got information on his "statistics". They were never objects of legal cases or anything, it's like nobody cared before that gaming info is stored somewhere and others may look into it.
I mean look at Starcraft or Overwatch, those are public cyber-sport games and yet all info is online, even available with graphs, trends, list of latest plays etc.. i doubt that Blizzard may overlook something that may backlash them from law side.
- The user MUST be informed of the purposes of the cookies up front.
- The cookies arranged in comprehensible categories based on their purposes (can be Marketing, Preference etc..), and the user may then tick or untick the types of cookies, that one wishes to accept and reject.
- One may also choose to see a detailed overview of the cookies in use.
- The overview simply folds out of the consent banner, mapping all active cookies and presenting them in an accessible manner.
- At a glance, the user can now scroll through all of the cookies, see where they come from, read a description of their function and check their duration.
- The user can then easily accept or reject the different types of cookies.
These are facts and I helped my English with this text from dedicated and serious websites about GDPR and cookies, hope it's all clear, Eso Logs has nothing at present like this and the banner consent at present is not complaint at all.
There must be transparency about cookies and a detailed consent.
So yes, very promising.
What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
The site appears to be in breach of GDPR compliance, the consent put there (in a hurry it seems after this thread came out) is a joke, that's NOT compliant at all.
That's a dummy consent, the "learn more" just bring the user to a cookies and you page, are you serious?
Any DGPR compliance scans give results about cookies for which the users must give consent.
- The user MUST be informed of the purposes of the cookies up front.
- The cookies arranged in comprehensible categories based on their purposes (can be Marketing, Preference etc..), and the user may then tick or untick the types of cookies, that one wishes to accept and reject.
- One may also choose to see a detailed overview of the cookies in use.
- The overview simply folds out of the consent banner, mapping all active cookies and presenting them in an accessible manner.
- At a glance, the user can now scroll through all of the cookies, see where they come from, read a description of their function and check their duration.
- The user can then easily accept or reject the different types of cookies.
These are facts and I helped my English with this text from dedicated and serious websites about GDPR and cookies, hope it's all clear, Eso Logs has nothing at present like this and the banner consent at present is not complaint at all.
There must be transparency about cookies and a detailed consent.
So yes, very promising.
BTW since we are at it, let's see in depth what is needed to be answered to be compliant when collecting data, these are the simple questions that must be answered:1. Do any data subjects you are collecting data from, including your employees, reside in the EEA/EU?
If you are collecting data from citizens or employees that reside in EEA then GDPR applies to you, even if you are based in a country outside the EU.
2. Is your organisation aware of what personal data means under the GDPR?
The GDPR's definition of personal data is ‘any information relating to an identified or identifiable natural person’. There is, however, a wide interpretation - it could mean a nickname, an ID number, an IP address or other indirect identification.
3. Have you assessed the impact of the new definition of consent under the GDPR and how this affects your surveys?
GDPR’s revised approach means you must have clear documentation that the audience is happy for you to email them. And remember, you will need to obtain new consent from any current contacts in your database as well.
4. Do you have a process for breach notification?
There will be a duty for all organisations to report certain types of data breaches and, in some cases, inform the individuals affected by the breach as well.
5. Have you given the data subject the right to access his or her information?
Individuals must have the right to access any personal data that you store about them and this must be provided free of charge.
6. Where a data subject has asked for his or her information, is the information given in a commonly useable and machine readable format?
When asked, you must use “reasonable means” to supply the information. For example, if the request is made electronically, you should provide the information in a commonly used electronic format.
7. Does your organisation have the process of erasing the subject’s data at his/her request?
Make sure you have a process in place for when an individual asks you to delete their personal data. Would you know where to find the data, who has to give permission to delete it and what internal processes are in place to make sure that it happens?
8. Does your organisation hold and process data only if it is absolutely necessary for the completion of its duties?
GDPR will introduce the concept of ‘privacy by design' and by default to encourage organisations to consider data protection throughout the entire life cycle of any process. Organisations will need to implement internal policies and procedures to be compliant.
9. Have you trained your staff on the GDPR and how to properly handle data?
The majority of data breaches occur because of human error. To make sure staff are aware of their obligations, organisations are encouraged to implement GDPR staff awareness training and provide evidence that they understand the risks.
10. Have you considered if you need to appoint a Data Protection Officer (DPO)?
For many businesses, it will be mandatory to appoint a DPO, for instance if your core activity involves the regular monitoring of individuals on a large scale. You should consider now whether or not you need to appoint a DPO and to make sure they have the required expertise and knowledge.
Now let's see what are the fines for infringement directly from www.gdpreu.org/compliance/fines-and-penalties/
You @ZOS I'm waiting to see what are your actual plans with all this Logs thing, this may be the actual finishing blow to my love for this game. Total transparency about collecting and managing data is needed!
anitajoneb17_ESO wrote: »MartiniDaniels wrote: »anitajoneb17_ESO wrote: »MartiniDaniels wrote: »Your game is info is open to add-ons of other players already, and you are not complaining. Why complain now?
Upload and storage onto a 3rd party site with search functionality.
There are hundreds of similar sites for different online games, where you just need to enter @userid and got information on his "statistics". They were never objects of legal cases or anything, it's like nobody cared before that gaming info is stored somewhere and others may look into it.
I mean look at Starcraft or Overwatch, those are public cyber-sport games and yet all info is online, even available with graphs, trends, list of latest plays etc.. i doubt that Blizzard may overlook something that may backlash them from law side.
The question was "how's that different from what's already in ESO". I answered that question.
Other games are something else. Just because something is "normal" in WoW doesn't mean we all HAVE TO welcome it on ESO. We play ESO, not WoW. And there are reasons why we play ESO and not WoW. Some/Many of us may feel like "MMO players" but some/many of us feel like "ESO players". And I believe the ESO audience to be significantly different from the usual MMO crowd.
Also, just because Blizzard does it doesn't mean it's legal. Companies get into legal trouble all the time.
- The user MUST be informed of the purposes of the cookies up front.
- The cookies arranged in comprehensible categories based on their purposes (can be Marketing, Preference etc..), and the user may then tick or untick the types of cookies, that one wishes to accept and reject.
- One may also choose to see a detailed overview of the cookies in use.
- The overview simply folds out of the consent banner, mapping all active cookies and presenting them in an accessible manner.
- At a glance, the user can now scroll through all of the cookies, see where they come from, read a description of their function and check their duration.
- The user can then easily accept or reject the different types of cookies.
These are facts and I helped my English with this text from dedicated and serious websites about GDPR and cookies, hope it's all clear, Eso Logs has nothing at present like this and the banner consent at present is not complaint at all.
There must be transparency about cookies and a detailed consent.
So yes, very promising.
What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
VaranisArano wrote: »DocFrost72 wrote: »One thing I don't understand, supposedly this system (exactly or incredibly similar) is already in WoW and FF. It has not been legally challenged in either game, has it? Why is ESO different? Is there something special about this particular setup the others do not have?
If I had to guess....
1. GDPR is relatively new, coming into effect in 2018. As some posters have mentioned, compliance hasn't been tested in court yet
2. ESO has a large portion of single player gamers, here from the TES games, some of whom are rather adverse to the data sharing that seems (or so I'm told) to be normal in other MMOs
3. Until this point, ESO's handing of add-ons that give other players access to your combat info has been to disallow directly tying your combat data to your character id. ZOS says ESO Logs is fine because its not in real time. Many players are still concerned because our consent is assumed and its a 3rd party site - neither of which has happened before in ESO. As currently implemented, ESO Logs reverses the status quo by assuming all players consent to have their character id tied to shareable, searchable public logs.
So to answer your questions:
Why now and not before? The GDPR is new.
Why ESO and not others? This is something new for ESO. It reverses the status quo on privacy of combat data. Before, no one could directly tie our combat data to our character id without our consent by posting it. With ESO Logs, every player's consent is assumed by default to share their character id in the logs, which can be shared or made public (public allows them to be searched and ranked on leaderboards.)
That being said, the above is somewhat tangential to the thread topic, which has less to do with ESO Logs itself, and more to do with their Cookies policy.
That's an even simpler answer.
Why now?
Because the GDPR is new, and the website's Cookies aren't currently in compliance with it.
Indeed. Also do I even have to be an ESO customer or even have a game account to register on the Esologs website and brows the content?
What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
MartiniDaniels wrote: »This is just strange.
All the time I play multiplayer games, all the time people act like people, i.e. celebrating or mocking each other with results, sharing achievements and losses and it was normal for years, and this is exactly how it works IRL too. In schools there are statistics on how students perform, at work there are whole complex artificial systems to evaluate employees.
Now all the sudden ESO can't be part of this, though devs allow option for anonymity (which is right thing to have such option).
LiquidPony wrote: »The site appears to be in breach of GDPR compliance, the consent put there (in a hurry it seems after this thread came out) is a joke, that's NOT compliant at all.
That's a dummy consent, the "learn more" just bring the user to a cookies and you page, are you serious?
Any DGPR compliance scans give results about cookies for which the users must give consent.
- The user MUST be informed of the purposes of the cookies up front.
- The cookies arranged in comprehensible categories based on their purposes (can be Marketing, Preference etc..), and the user may then tick or untick the types of cookies, that one wishes to accept and reject.
- One may also choose to see a detailed overview of the cookies in use.
- The overview simply folds out of the consent banner, mapping all active cookies and presenting them in an accessible manner.
- At a glance, the user can now scroll through all of the cookies, see where they come from, read a description of their function and check their duration.
- The user can then easily accept or reject the different types of cookies.
These are facts and I helped my English with this text from dedicated and serious websites about GDPR and cookies, hope it's all clear, Eso Logs has nothing at present like this and the banner consent at present is not complaint at all.
There must be transparency about cookies and a detailed consent.
So yes, very promising.
BTW since we are at it, let's see in depth what is needed to be answered to be compliant when collecting data, these are the simple questions that must be answered:1. Do any data subjects you are collecting data from, including your employees, reside in the EEA/EU?
If you are collecting data from citizens or employees that reside in EEA then GDPR applies to you, even if you are based in a country outside the EU.
2. Is your organisation aware of what personal data means under the GDPR?
The GDPR's definition of personal data is ‘any information relating to an identified or identifiable natural person’. There is, however, a wide interpretation - it could mean a nickname, an ID number, an IP address or other indirect identification.
3. Have you assessed the impact of the new definition of consent under the GDPR and how this affects your surveys?
GDPR’s revised approach means you must have clear documentation that the audience is happy for you to email them. And remember, you will need to obtain new consent from any current contacts in your database as well.
4. Do you have a process for breach notification?
There will be a duty for all organisations to report certain types of data breaches and, in some cases, inform the individuals affected by the breach as well.
5. Have you given the data subject the right to access his or her information?
Individuals must have the right to access any personal data that you store about them and this must be provided free of charge.
6. Where a data subject has asked for his or her information, is the information given in a commonly useable and machine readable format?
When asked, you must use “reasonable means” to supply the information. For example, if the request is made electronically, you should provide the information in a commonly used electronic format.
7. Does your organisation have the process of erasing the subject’s data at his/her request?
Make sure you have a process in place for when an individual asks you to delete their personal data. Would you know where to find the data, who has to give permission to delete it and what internal processes are in place to make sure that it happens?
8. Does your organisation hold and process data only if it is absolutely necessary for the completion of its duties?
GDPR will introduce the concept of ‘privacy by design' and by default to encourage organisations to consider data protection throughout the entire life cycle of any process. Organisations will need to implement internal policies and procedures to be compliant.
9. Have you trained your staff on the GDPR and how to properly handle data?
The majority of data breaches occur because of human error. To make sure staff are aware of their obligations, organisations are encouraged to implement GDPR staff awareness training and provide evidence that they understand the risks.
10. Have you considered if you need to appoint a Data Protection Officer (DPO)?
For many businesses, it will be mandatory to appoint a DPO, for instance if your core activity involves the regular monitoring of individuals on a large scale. You should consider now whether or not you need to appoint a DPO and to make sure they have the required expertise and knowledge.
Now let's see what are the fines for infringement directly from www.gdpreu.org/compliance/fines-and-penalties/
You @ZOS I'm waiting to see what are your actual plans with all this Logs thing, this may be the actual finishing blow to my love for this game. Total transparency about collecting and managing data is needed!
You are out of your mind.
You don't know anything about GDPR or how actual websites comply with it. The cookie consent banner has *always* been there.
Go to, say, mercedes.com and tell me if you see some ridicululous multi-step form for consenting to various cookies.
No? You don't? It's just a single banner that you accept that covers their whole Privacy Policy just like basically every other website in the world?
Weird.
anitajoneb17_ESO wrote: »What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
I guess you're not in the EU.
Every single , even remotely professional site (= "serious") has now a very, very detailed procedure of getting consent from every single user, with very detailed explanations as to what's being collected, for what purposes, and where the info is redirected, if that's the case.
Some companies (Google, for instance) are trying to trick people by making this information overdetailed, and changing it very often, so that people end up agreeing to anything and everything in order to avoid this huge pile of information. These companies are currently facing mass lawsuits, too.
So yes, it's an issue.
- The user MUST be informed of the purposes of the cookies up front.
- The cookies arranged in comprehensible categories based on their purposes (can be Marketing, Preference etc..), and the user may then tick or untick the types of cookies, that one wishes to accept and reject.
- One may also choose to see a detailed overview of the cookies in use.
- The overview simply folds out of the consent banner, mapping all active cookies and presenting them in an accessible manner.
- At a glance, the user can now scroll through all of the cookies, see where they come from, read a description of their function and check their duration.
- The user can then easily accept or reject the different types of cookies.
These are facts and I helped my English with this text from dedicated and serious websites about GDPR and cookies, hope it's all clear, Eso Logs has nothing at present like this and the banner consent at present is not complaint at all.
There must be transparency about cookies and a detailed consent.
So yes, very promising.
What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
I take it in your line of work you don't have any business online with EU, If you do I would strongly suggest you make your website GDPR compliant. And I seriously don't mean that in a snarky way.
What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
Prety much any website with detailed info Webmasters had to consult from the time GDPR has been out, me included.
The info on the web about what cookies are and the importance to get a GDPR compliant consent are massive.
You maybe don't own a website if your are so clueless about this.
Try checking to inform yourself, you just can type: "cookies GDPR compliance", or "cookies GDPR compliance check", or "cookies how do I know if my website is GDPR compliant?"
NupidStoob wrote: »VaranisArano wrote: »NupidStoob wrote: »DocFrost72 wrote: »One thing I don't understand, supposedly this system (exactly or incredibly similar) is already in WoW and FF. It has not been legally challenged in either game, has it? Why is ESO different? Is there something special about this particular setup the others do not have?
No it isnt different. Every game that has a competitive ladder is tracking users statistics and in most they can be reviewed on external websites. Eso leaderboards also existed for the longest time, but I guess that didn't matter to people who would never get on there anyways. If you played ESO for some time there is a high chance you have walked past a streamer or youtuber while they were recording as well. Nothing about ESO logs is a big deal, it's just ESO forum warriors blowing something completely out of proportion.
I check these threads from time to time to see what new ridiculous ideas the nay sayers are bringing to the table, but every time I feel dumber reading this. Huge waste of time honestly. There are real issues about data security out there in the world folks. If you really care so much do something about them, start by deleting all your social media and not whine about your combat logs in an online game.
A. This thread is about one of those real world issues of data security...cookies on websites, and how the GDPR requires websites to be upfront and allow users to consent to their use.
And how the ESO Logs site currently isnt conpliant when it comes to their Cookies.
B. I confess I don't understand the logic of the argument that goes like: "if you aren't concerned with ALL data security issues EVER, you can't possibly be concerned with how THIS data security issues might impact your gaming experience in ESO."
I don't feel the need to demonstrate the depth of my concern about data usage on Facebook, Google, social media, etc to your satisfaction before I can talk about my concerns about how ESO Logs assumes our consent to publicly share our character ids, or in the case of this thread's topic, any concerns that the ESO Logs site is serving EU players without being compliant with their law regarding things like Cookies.
A. Let's not pretend like we don't know what it's really about. It's just a front.
B. Like I said, there are real issues and non real issues. Nothing about your combat log could be considered sensitive data whatsoever. It won't ever affect your real life in any way. All the data willingly shared by people is usually way more sensitive. The stuff people write on the forums alone is more sensitive. If someone could connect their forum account to their real identity it could have disastrous real life consequences depending on the kind of opinions they shared. But on the other side nobody would care about anyone's combat logs in the real world. I can safely assume that 99.9% of the people who are being outraged by this have or are sharing more implicating data about themselves voluntarily. I find that hypocritical.
"Negative impact on their gaming experience": There is none. You will still not play with people you dislike. If you dislike people that use these logs then you simply don't play with them and the problem has been solved. If you want to join a guild that have these logs as requirements they will also already require CMX so nothing there changes. If you're worried about your data from random dungeons floating around because other people upload them you can just turn it off and it won't affect you either. They can search your name on the website but find nothing as the website doesn't do the extrapolation people are scared about. If you are worried about being judged real time in dungeons/trials, well CMX already exists and there is not even a need for it as anyone can look at the boss HP and take a stopwatch to calculate DPS. I just need to know how much DPS I usually do which I can also easily calculate myself and I can see how much % group DPS I approximately do.
In the end people simply don't want that it's by default on and honestly I don't care less if ZoS decides to do that or not. People could just make threads simply asking for it to be turned off, but instead we have all these massively blown out of proportion fearmongering threads, spreading misinformation and so on. Sorry if my tone is a bit aggressive, but this is frankly quite annoying.
Lol... GDPR is about personal data - your nickname from a game doesn't count unless it's attached to your real name or at least email address. Nick of a character is not a personal data period.
You @ZOS I'm waiting to see what are your actual plans with all this Logs thing, this may be the actual finishing blow to my love for this game. Total transparency about collecting and managing data is needed!
You may as well quit now then, because if you're throwing a child tantrum over website cookies that in no way shape or form tracks your personal identifiable data ... Sometimes I do cringe at the thought of a human being writing some of these posts.
anitajoneb17_ESO wrote: »What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
I guess you're not in the EU.
Every single , even remotely professional site (= "serious") has now a very, very detailed procedure of getting consent from every single user, with very detailed explanations as to what's being collected, for what purposes, and where the info is redirected, if that's the case.
Some companies (Google, for instance) are trying to trick people by making this information overdetailed, and changing it very often, so that people end up agreeing to anything and everything in order to avoid this huge pile of information. These companies are currently facing mass lawsuits, too.
So yes, it's an issue.
- The user MUST be informed of the purposes of the cookies up front.
- The cookies arranged in comprehensible categories based on their purposes (can be Marketing, Preference etc..), and the user may then tick or untick the types of cookies, that one wishes to accept and reject.
- One may also choose to see a detailed overview of the cookies in use.
- The overview simply folds out of the consent banner, mapping all active cookies and presenting them in an accessible manner.
- At a glance, the user can now scroll through all of the cookies, see where they come from, read a description of their function and check their duration.
- The user can then easily accept or reject the different types of cookies.
These are facts and I helped my English with this text from dedicated and serious websites about GDPR and cookies, hope it's all clear, Eso Logs has nothing at present like this and the banner consent at present is not complaint at all.
There must be transparency about cookies and a detailed consent.
So yes, very promising.
What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
I take it in your line of work you don't have any business online with EU, If you do I would strongly suggest you make your website GDPR compliant. And I seriously don't mean that in a snarky way.What are those serious websites you're talking about? Because this directly relates to my line of work and I can tell you that there is no requirement for the users to have the ability to accept only certain types of cookies.
Prety much any website with detailed info Webmasters had to consult from the time GDPR has been out, me included.
The info on the web about what cookies are and the importance to get a GDPR compliant consent are massive.
You maybe don't own a website if your are so clueless about this.
Try checking to inform yourself, you just can type: "cookies GDPR compliance", or "cookies GDPR compliance check", or "cookies how do I know if my website is GDPR compliant?"
I see a lot of personal attacks here but still no proof that the GDPR requires users to have the ability to accept only certain types of cookies.
You may as well quit now then, because if you're throwing a child tantrum over website cookies that in no way shape or form tracks your personal identifiable data ... Sometimes I do cringe at the thought of a human being writing some of these posts.
Except I would imagine that you associate yourself rather closely with the username Billdor and the characters Billdor and Lord Seht - they are as much YOUR identities as your real name is. And would feel good if these were commented on favourably. If, say, ESO logs showed that you were pulling down significantly good dps and someone highlighted it in a blogpost. Equally you might feel the opposite way if someone referred to these identities negatively.
It's clear ZOS feel the same way, which is why there is a policy of no naming on the forums. Equally, it's why they disabled real time stats in the first place.
The issue here is about privacy and consent. If you want to share your gaming data great, go for it. If you want to see or share mine without my knowledge or consent, not great.
This is entirely or partially incorrect and very messy.In fact it’s not cookies only. It’s about gathering data in general and or tracking an online user, not only on web sites, but any online service.
Although having your actions recorded and stored on your or someone else’s hard drive with or without consent might be considered a cookie.
anitajoneb17_ESO wrote: »What you miss mate is the identification part, to be considered as a personal data collection it has to contain reference to data allowing to identify you. Nick name on it's own is not a personal data because there may be 1000 people who used nick Mayrael, there is no way to connect this nick with my person. But when there would be at least my mail attached to this nickname situation is different. I have talked about it with our law team in our company mate.
I hope you realize that this argument is pretty much just as valid as "I discussed it with my grandmother".
EU laws consider pseudonym different from anonym, and a nickname is considered private data, whether you like it or not.
Besides, not everything has to be legal or illegal. Some things are just morally ok or not ok. If I'd, for instance, change my forum name into @slashlurk , it probably would not be illegal and it probably wouldn't mean anything to anyone not familiar with the ESO community. It wouldn't, still, be a very nice move, and a moderator would probably kindly require from me to change it, and rightfully so.
The fact is, ESO setting should defaut to "anonymous" when logging events, and the esologs site should make it much clearer what they do and don't do with the info they collect, and explicitly require educated consent. That's all there is to it and it wouldn't hurt anyone.
logging to 3rd party sites should be disable by default, anonymous or not.
i have no problem with dps logs but a 3rd party site thats use logs to monetize Data, i cant even opt out.
logging to 3rd party sites should be disable by default, anonymous or not.
i have no problem with dps logs but a 3rd party site thats use logs to monetize Data, i cant even opt out.
First, there seem to be a misconception here. The data is not automatically uploaded to a third party. Someone has to log it first and then upload it.
Second, where did you get the idea that the Encounter Log Data were being monetized?