giropay knows what you bought last summer

Instead of only processing the payment, the German payment service "giropay" (formerly "paydirekt") keeps the information about each individual item purchased in online shops. This may lead to the processing of sensitive, personal data. A customer contacted noyb after seeing a detailed list of products she had ordered in an online pharmacy and a sex shop listed in her giropay account. Such data is specially protected under the GDPR and may not be processed without consent. noyb filed a complaint against giropay today with the Hessian State Commissioner for Data Protection and Freedom of Information. Link to the complaint (machine translated) Transparent shopping bags or "private remains private"? The German payment service giropay advertises on its website with pithy slogans like "Private remains private" and "Data protection according to German guidelines". A customer suddenly found a detailed account of her purchases - including a sex shop and an online pharmacy in her giropay profil