I’m guessing that the answer is yes, but maybe someone with 1st hand experience or any sort of expertise may want to weigh in?

I really just want to order cookware from a German company that no longer ships to the US (given the toddler tantrums that have replaced our trade policy, I don’t blame them). I think reshipping companies in the EU all have to get some sort of ID verification to combat credit card fraud (side note: I live in the US so I can hardly throw stones but WTF EU? It seems like a terrible privacy law enacted to protect banks?).

Anyway, if I want to use the service, this is the deal:

We take the protection of your data very seriously, especially when it is about your identity data. Our partner for verifying your identity is Veriff, a well-known and trusted KYC provider. They will securely store your data and only transmit the status of your verification to our system. Of course your data will never be disclosed to third parties.

Feels yucky, but maybe I’m being paranoid? Pretty much everyone in my country has already been boned by Experian and Social Security leaks already 🤷🏾

  • xmrlist@lemmy.world
    1·
    1 hour ago

    The 3 years is almost certainly anti-money-laundering record keeping, not Veriff being greedy. Once a company runs a KYC check it usually has to keep the record for years, and a GDPR deletion request doesn’t override that. So whatever you upload, assume it sits there until the retention period runs out.

    Before going that route I’d try two things: email the German shop and ask if they’ll still ship to the US for a surcharge (a lot of smaller shops paused US shipping because of customs paperwork, not because they refuse outright), and check whether a forwarder without ID checks works for a one-off order of cookware. For one pan, uploading a passport scan to a third party feels like a bad trade.