Add 'Fleurop AG' (community contribution)

[datenanfragen-community-edits]

This suggestion was submitted through the website.

Edit

[WebworkrNet]

This dataset can be marked as "tested".

Personal data provided at data request:

• Email address
• Name
• Address
• Birth date
• Other

Evidence requested to confirm identity:

• No provision of evidence
• Requests by email must be made from the same email address that is the subject of the request. This should be noted if the submitted address is an email forwarding address.
• Birth date
• Copy of ID

[moriarty-jim]

Hi @WebworkrNet! I've updated your suggestion according to your feedback from testing. required-elements lists all personal data that needs to be provided. needs-id-document is set to true when a copy of an ID document must be submitted.

[fm]

Thank you, all!

[fm]

Ignore that last revert commit

[WebworkrNet]

I miss the obligatory copy of the ID card in the data set.

[baltpeter]

I miss the obligatory copy of the ID card in the data set.

But it's set correctly:

data/companies/fleurop.json

Line 33 in ac0aca1

"needs-id-document": true,

[WebworkrNet]

@baltpeter
I cannot find this additional information either at

• https://www.datenanfragen.de/company/fleurop or at
• https://www.datenanfragen.de/generator#!company=fleurop.

[baltpeter]

Yes, currently that field isn't used anywhere by the website. The reason is that we're planning to add support for attaching ID documents directly in our generator but haven't gotten around that yet.

Now you might say that we could just display a hint in the meantime but we would consider that to be dangerous. Even in the (relative rare) cases where it is legal for a controller to require an ID document for verification, it is never legal to require the full document. There will always be values on the ID document that can (and absolutely should) be redacted by the user. We will only start displaying a hint like that once we also have data on which values on the ID document can be redacted, so we can display that alongside the hint.
See the second item in #690 for some first thoughts on how to implement that.

But to be honest, this feature is pretty low on our priority list at the moment. Our interpretation of the law is that a controller may only require an ID copy in rare cases.