{"id":600,"date":"2021-01-07T12:03:10","date_gmt":"2021-01-07T11:03:10","guid":{"rendered":"https:\/\/www.ragerman.de\/?p=600"},"modified":"2021-02-28T12:34:51","modified_gmt":"2021-02-28T11:34:51","slug":"how-a-security-company-mishandles-privacy-the-ithemes-security-liquidweb-com-case","status":"publish","type":"post","link":"https:\/\/www.ragerman.de\/how-a-security-company-mishandles-privacy-the-ithemes-security-liquidweb-com-case\/","title":{"rendered":"How a Security Company (mis)handles Privacy – The iThemes Security \/ Liquidweb.com Case"},"content":{"rendered":"\n

Trying to push sales with games and prices is a win-win for both the customer and the company. Usually. And it makes perfect sense to combine the price with some sort of privileges granted from the end user to the company offering the contest. Such as using the email for marketing or using the address for mailings. Current privacy legislature makes it clear how these situations are to be handled and there are strict rules in place to be followed. Seemingly not all companies know this. Especially a security related plugin developer named iThemes Security. What happened?<\/p>\n\n\n\n

No double-opt-in no consent for Marketing-Mails<\/h2>\n\n\n\n

It is not allowed to send marketing mails of whatever type to someone who has not clearly given their consent to receive them. This i regulated in all recent major privacy legislatures. And one would expect that a security focused company such as Liquidweb<\/a> who stands behind the iThemes Security plugin would know. But the either don’t know or they ignore. Permission can be given by merely two ways: implied or expressed:<\/p>\n\n\n\n