Velox media under new management

alexanderras · January 8

How can they not be his customers anymore? Have all customers agreed to break the contract? Doesn’t sound like that from this thread does it? I what world can he unilaterally decide they are not his customers anymore without refunding them. We’ve been over this before - they are still his customers.

He is the data controller under GDPR regardless of whether he has registered or not. That is besides the point.

It is the customers’ data, controlled by Lewis as part of their contract with him, and processed by you by virtue of you controlling the systems.

We’ve been over this before - it’s not your data, it’s definitively not US data, and GDPR applies to you as a processor regardless of where you are based.

Maybe you need your lawyers to explain this to you slooooowly

ralf · January 8

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data. I'm not responsible for your data, Lewis is.

Where are you seeing that any responsibility was transferred from lewis to me? What notification or agreement or anything did you receive saying this? Who specifically did you pay for the service. What does your credit card statement say? Who signed your agreement? These are what matter and none of this is with us.

You are a data processor for Lewis given you currently hold that data. You are indeed responsible for that data.

No it doesn't work that way.

Actually, yes it does.

ralf · January 8

@VeloxMedia said:

@AlteredParadox said:
Guys are we going for 100 pages!?

I think so. Still don't know what we're talking about either, but very entertaining

So you breaking the law is just "entertainment"?

alexanderras · January 8

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@ralf said:

@VeloxMedia said:

There's no privacy violations on our end as we're fully compliant. Any issues would be with Lewis sending us data which depends on customers agreement with Lewis.

No that's not how the law works.

No that's not how the law works. I bought the bus not the bus company. You need to deal with the bus company to get a refund or another bus.

If you bought a bus, it doesn't come with all the personal information and data of the previous passengers.

And no we don't have privacy violations because we're properly handling data and properly registered.

You are not.

If any issues it's with Lewis depending on your privacy agreement

Lewis seems to be no longer keeping any of our data. If that's the case, he's not violating our privacy.

Interesting as our legal team seems to agree that we're handling it fine and so does outside council who's liable for any issues. So I guess we'll see what happens

Clearly a lie - no outside council is ever liable

Are you in the US? This is the whole reason for hiring outside council. They stamp their guarantees on things so we can ensure liability. I'm assuming you don't do a lot of commercial contract law

It sounds like I do more than you. There is no way any legal council would accept liability on behalf of a client. You can’t just sue a lawyer because you lost a case.

Come on, you’re out of your league here.

ralf · January 8

@VeloxMedia said:

@default said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data.

Thank you for clarifying this. I am glad Lewis was responsible for my data. I paid him for precisely that.

I'm not responsible for your data, Lewis is.

You did not answer my question as to why my data is with you. I have not paid you, I paid Lewis, but you have my data, and my account, and my info. You said you are GDPR compliant - I hereby invoke the GDPR legislation in demanding explanation from you as to why you have my data.

Where are you seeing that any responsibility was transferred from lewis to me?

You have my data. You should answer this. You must explain yourself, not me. I paid Lewis, and now you have my invoice in how I paid Lewis. You also have my data which Lewis hosted; so you're the one to answer.

What notification or agreement or anything did you receive saying this?

You stated you acquired Veloxmedia and its data in this thread.

Who specifically did you pay for the service.

VeloxMedia - but the data is with you. It is up to you to justify yourself.

What does your credit card statement say?

[REDACTED ON THIS FORUM] (for GDPR legislation with regards to sensitive data - you should know this)

Who signed your agreement?

VeloxMedia - now with you because you have the whole client area

These are what matter and none of this is with us.

Actually it is, all of it is. The whole client area and all the services are with you.

Ahh I see the issue. We're Velox Media inc. I don't think veloxmedia was ever a real company, what's the address on the invoice? I thought it has Lewis's name on it as a sole trader and his address. You should really investigate that. Also if you want to know how we have your data you should file a complaint against the company you purchased it from. Velox Media inc is on the ICO and it's a new company so anything before 12/21 wasn't us.

See you're confusing the companies and people. Completely different. We're in different continents even.

Again we're not responsible for how we obtain data just responsible for maintaining that data is compliant from now on.

Which you are not doing. You have no business need for people's PII and data, because according to you they are not your customers and have no relationship with you.

When you file a chargeback it'll be against lewis and you'll get the answers you seek.

MaxTakeba · January 8

@default said:

@MaxTakeba said:

@plumberg said:

@VeloxMedia has data of customers from previous owner of VeloxMedia but not responsible for how they obtained the data
(https://lowendtalk.com/discussion/comment/4708761/#Comment_4708761)

Smells like @Calin and @cociu ❤️

So, 70 pages in and not a peep from the Administrators or Moderators. Guess LET Traffic is priority

PopcornLifeMatters

Funny...
Cause I have flagged the thread and nothing happened...

Why do you want it closed? Let the provider dig their grave.

It has ran its course. I'm not too sure what more digging there is VeloxMedia can do.

If it wasn't at the point of redemption earlier it's far too late for that. Honestly it's an eyesore watching someone who doesn't know what they are doing run around in circles despite the community give constructive feedback and ask very good questions that either don't get answered or requires pages to get answers.

If I ever ran a business and I posted like VeloxMedia I'd genuinely want you to ban me and ensure the ship goes down.

Then again if I ever ran a business like this... This thread has given me some more lessons on what not to do.

ralf · January 8

@VeloxMedia said:

@alexanderras said:

@AlteredParadox said:
Guys are we going for 100 pages!?

Don’t think we’ll need that many. VeloxMedia seem to be getting themselves into trouble.

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data. I'm not responsible for your data, Lewis is.

Where are you seeing that any responsibility was transferred from lewis to me? What notification or agreement or anything did you receive saying this? Who specifically did you pay for the service. What does your credit card statement say? Who signed your agreement? These are what matter and none of this is with us.

You are a data processor for Lewis given you currently hold that data. You are indeed responsible for that data.

No it doesn't work that way.

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data. I'm not responsible for your data, Lewis is.

Where are you seeing that any responsibility was transferred from lewis to me? What notification or agreement or anything did you receive saying this? Who specifically did you pay for the service. What does your credit card statement say? Who signed your agreement? These are what matter and none of this is with us.

You are a data processor for Lewis given you currently hold that data. You are indeed responsible for that data.

No it doesn't work that way.

It very much does. I think you should consult your legal department - and maybe they need some outside counsel.

We did and specialists in GDPR. Fully understand what's going on here. If you haven't noticed everything has been properly designed to protect us against liability and ensure we're holding the cards. This isn't our first rodeo.

But it's important to remember the facts. We're a US company and it appears that Lewis wasn't GDPR compliant nor required to be or stated such. These aren't our customers but just data we have. Our GDPR compliance started 12/21/2025

Try hiring a competent legal team.

MaxTakeba · January 8

@ralf said:

@VeloxMedia said:

@alexanderras said:

@AlteredParadox said:
Guys are we going for 100 pages!?

Don’t think we’ll need that many. VeloxMedia seem to be getting themselves into trouble.

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data. I'm not responsible for your data, Lewis is.

Where are you seeing that any responsibility was transferred from lewis to me? What notification or agreement or anything did you receive saying this? Who specifically did you pay for the service. What does your credit card statement say? Who signed your agreement? These are what matter and none of this is with us.

You are a data processor for Lewis given you currently hold that data. You are indeed responsible for that data.

No it doesn't work that way.

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data. I'm not responsible for your data, Lewis is.

Where are you seeing that any responsibility was transferred from lewis to me? What notification or agreement or anything did you receive saying this? Who specifically did you pay for the service. What does your credit card statement say? Who signed your agreement? These are what matter and none of this is with us.

You are a data processor for Lewis given you currently hold that data. You are indeed responsible for that data.

No it doesn't work that way.

It very much does. I think you should consult your legal department - and maybe they need some outside counsel.

We did and specialists in GDPR. Fully understand what's going on here. If you haven't noticed everything has been properly designed to protect us against liability and ensure we're holding the cards. This isn't our first rodeo.

But it's important to remember the facts. We're a US company and it appears that Lewis wasn't GDPR compliant nor required to be or stated such. These aren't our customers but just data we have. Our GDPR compliance started 12/21/2025

Try hiring a competent legal team.

And a PR team...

And maybe someone who knows what they are doing...

ralf · January 8

@VeloxMedia said:

@default said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data.

Thank you for clarifying this. I am glad Lewis was responsible for my data. I paid him for precisely that.

I'm not responsible for your data, Lewis is.

You did not answer my question as to why my data is with you. I have not paid you, I paid Lewis, but you have my data, and my account, and my info. You said you are GDPR compliant - I hereby invoke the GDPR legislation in demanding explanation from you as to why you have my data.

Where are you seeing that any responsibility was transferred from lewis to me?

You have my data. You should answer this. You must explain yourself, not me. I paid Lewis, and now you have my invoice in how I paid Lewis. You also have my data which Lewis hosted; so you're the one to answer.

What notification or agreement or anything did you receive saying this?

You stated you acquired Veloxmedia and its data in this thread.

Who specifically did you pay for the service.

VeloxMedia - but the data is with you. It is up to you to justify yourself.

What does your credit card statement say?

[REDACTED ON THIS FORUM] (for GDPR legislation with regards to sensitive data - you should know this)

Who signed your agreement?

VeloxMedia - now with you because you have the whole client area

These are what matter and none of this is with us.

Actually it is, all of it is. The whole client area and all the services are with you.

Ahh I see the issue. We're Velox Media inc. I don't think veloxmedia was ever a real company, what's the address on the invoice? I thought it has Lewis's name on it as a sole trader and his address. You should really investigate that. Also if you want to know how we have your data you should file a complaint against the company you purchased it from. Velox Media inc is on the ICO and it's a new company so anything before 12/21 wasn't us.

I knew this. Thanks for clarifying it over and over again.

See you're confusing the companies and people. Completely different. We're in different continents even.

So far so good. Two distinct companies. My problem is with your company. Let's not discuss about others.

Again we're not responsible for how we obtain data [...]

What kind of stupid nonsense is this? You mean a hacker hosting illegal data on their servers is not responsible for how they obtain it?

You literally said you are GDPR compliant. You are forced by GDPR to state how you obtained data! Please enlighten us how you obtained all this data of so many customers.

When you file a chargeback it'll be against lewis and you'll get the answers you seek.

I don't care. I repeat again: I do not want to chargeback. I want to enjoy popcorn - my account is my ticket at this circus.

From what I understand Lewis has the money and you have everything (including data - we can see it in accounts and services). In business one person pays money, and receives something in return. Usually people don't pay money to get money, so in my opinion it is normal for Lewis to keep his money. But you @VeloxMedia - you're "responsible for maintaining data" as you say, therefore you are responsible for all the data. The contracts are therefore yours!

No see it doesn't work that way. You don't have a relationship with my company. You're not a customer or anything. You don't matter.

Why do you say I'm forced to tell you where I obtained the data? Please cite the law. Obviously you know where I got the data so not really sure the question anyways.

Now GDPR states I must delete the data if requested among a few other things like protect the data. That's about it. Not really sure if your data is classified as GDPR. Are you in the EU?

Yes, the law says you must delete the data if requested.

It also says that you must not keep data longer than any business requirement to hold it. You have no business requirement to hold it.

Not really sure if your data is classified as GDPR.

Anything that is PII is covered under GDPR. It's not rocket science.

Calypso · January 8

@VeloxMedia said:
Same story for over 70 pages now.

It'd be the same story if you didn't change yours repeatedly.

ralf · January 8

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data.

Thank you for clarifying this. I am glad Lewis was responsible for my data. I paid him for precisely that.

I'm not responsible for your data, Lewis is.

You did not answer my question as to why my data is with you. I have not paid you, I paid Lewis, but you have my data, and my account, and my info. You said you are GDPR compliant - I hereby invoke the GDPR legislation in demanding explanation from you as to why you have my data.

Where are you seeing that any responsibility was transferred from lewis to me?

You have my data. You should answer this. You must explain yourself, not me. I paid Lewis, and now you have my invoice in how I paid Lewis. You also have my data which Lewis hosted; so you're the one to answer.

What notification or agreement or anything did you receive saying this?

You stated you acquired Veloxmedia and its data in this thread.

Who specifically did you pay for the service.

VeloxMedia - but the data is with you. It is up to you to justify yourself.

What does your credit card statement say?

[REDACTED ON THIS FORUM] (for GDPR legislation with regards to sensitive data - you should know this)

Who signed your agreement?

VeloxMedia - now with you because you have the whole client area

These are what matter and none of this is with us.

Actually it is, all of it is. The whole client area and all the services are with you.

Ahh I see the issue. We're Velox Media inc. I don't think veloxmedia was ever a real company, what's the address on the invoice? I thought it has Lewis's name on it as a sole trader and his address. You should really investigate that. Also if you want to know how we have your data you should file a complaint against the company you purchased it from. Velox Media inc is on the ICO and it's a new company so anything before 12/21 wasn't us.

See you're confusing the companies and people. Completely different. We're in different continents even.

Again we're not responsible for how we obtain data just responsible for maintaining that data is compliant from now on.

When you file a chargeback it'll be against lewis and you'll get the answers you seek.

Wrong! As a data processor you are also liable for continuing to hold and process data (and potentially making decisions outside of instruction around how data is processed if using to look up transaction records to identify chargebacks) despite knowing the data controller, Lewis, is non-compliant with his obligations under GDPR

Why are you saying Lewis has an obligation to be GDPR compliant? Why are you saying we have an obligation to be? Why is the data considered GDPR? We're a US based company> @alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data.

Thank you for clarifying this. I am glad Lewis was responsible for my data. I paid him for precisely that.

I'm not responsible for your data, Lewis is.

You did not answer my question as to why my data is with you. I have not paid you, I paid Lewis, but you have my data, and my account, and my info. You said you are GDPR compliant - I hereby invoke the GDPR legislation in demanding explanation from you as to why you have my data.

Where are you seeing that any responsibility was transferred from lewis to me?

You have my data. You should answer this. You must explain yourself, not me. I paid Lewis, and now you have my invoice in how I paid Lewis. You also have my data which Lewis hosted; so you're the one to answer.

What notification or agreement or anything did you receive saying this?

You stated you acquired Veloxmedia and its data in this thread.

Who specifically did you pay for the service.

VeloxMedia - but the data is with you. It is up to you to justify yourself.

What does your credit card statement say?

[REDACTED ON THIS FORUM] (for GDPR legislation with regards to sensitive data - you should know this)

Who signed your agreement?

VeloxMedia - now with you because you have the whole client area

These are what matter and none of this is with us.

Actually it is, all of it is. The whole client area and all the services are with you.

Ahh I see the issue. We're Velox Media inc. I don't think veloxmedia was ever a real company, what's the address on the invoice? I thought it has Lewis's name on it as a sole trader and his address. You should really investigate that. Also if you want to know how we have your data you should file a complaint against the company you purchased it from. Velox Media inc is on the ICO and it's a new company so anything before 12/21 wasn't us.

See you're confusing the companies and people. Completely different. We're in different continents even.

Again we're not responsible for how we obtain data just responsible for maintaining that data is compliant from now on.

When you file a chargeback it'll be against lewis and you'll get the answers you seek.

Wrong! As a data processor you are also liable for continuing to hold and process data (and potentially making decisions outside of instruction around how data is processed if using to look up transaction records to identify chargebacks) despite knowing the data controller, Lewis, is non-compliant with his obligations under GDPR

No. Lots of assumptions being made and added here that aren't true.

You have repeatedly said they are his customers. All UK companies, including sole traders, are subject to GDPR. Lewis is therefore subject to GDPR.

The data contains PII, and you have just said that you have GDPR obligations from 25/12 and have registered with the ICO.

No assumptions here - just going by what you have explicitly stated

They WERE his customers and he's gone. We're a US company and we're only required to be GDPR compliant to our customers that we're providing services to that are in the EU. Those would only be people who have bought items in past couple weeks.

Again wrong. You are required to be GDPR compliant for any and all PII you hold regarding EU and UK citizens.

We're not providing services to Lewis's old customers they're just continuing to use whatever they have access to without any agreement.

So you are providing services to Lewis' customers then. If you're not, you have to delete that data.

ralf · January 8

@VeloxMedia said:
What compliance data are you talking about? Our attorneys filed with the ICO all the proper legal documentation. It was all created from legal and filed.

The purpose of being registered with ICO is so there's a public record of who the data processors are. It is not a substitute for following the regulations.

ralf · January 8

@AlteredParadox said:
In other news... benthost.com rip?!?

It's been like that for at least a day now. I didn't point it out because I thought it was funny that they claim to be a massive provider and can't even sort their own shit out.

tfgp99 · January 8

Wow, this escalated so quickly, cant even sleep.
Still feeling that we are talking to a wall.
But hey, its christmas.

ralf · January 8

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data.

Thank you for clarifying this. I am glad Lewis was responsible for my data. I paid him for precisely that.

I'm not responsible for your data, Lewis is.

You did not answer my question as to why my data is with you. I have not paid you, I paid Lewis, but you have my data, and my account, and my info. You said you are GDPR compliant - I hereby invoke the GDPR legislation in demanding explanation from you as to why you have my data.

Where are you seeing that any responsibility was transferred from lewis to me?

You have my data. You should answer this. You must explain yourself, not me. I paid Lewis, and now you have my invoice in how I paid Lewis. You also have my data which Lewis hosted; so you're the one to answer.

What notification or agreement or anything did you receive saying this?

You stated you acquired Veloxmedia and its data in this thread.

Who specifically did you pay for the service.

VeloxMedia - but the data is with you. It is up to you to justify yourself.

What does your credit card statement say?

[REDACTED ON THIS FORUM] (for GDPR legislation with regards to sensitive data - you should know this)

Who signed your agreement?

VeloxMedia - now with you because you have the whole client area

These are what matter and none of this is with us.

Actually it is, all of it is. The whole client area and all the services are with you.

Ahh I see the issue. We're Velox Media inc. I don't think veloxmedia was ever a real company, what's the address on the invoice? I thought it has Lewis's name on it as a sole trader and his address. You should really investigate that. Also if you want to know how we have your data you should file a complaint against the company you purchased it from. Velox Media inc is on the ICO and it's a new company so anything before 12/21 wasn't us.

See you're confusing the companies and people. Completely different. We're in different continents even.

Again we're not responsible for how we obtain data just responsible for maintaining that data is compliant from now on.

When you file a chargeback it'll be against lewis and you'll get the answers you seek.

Wrong! As a data processor you are also liable for continuing to hold and process data (and potentially making decisions outside of instruction around how data is processed if using to look up transaction records to identify chargebacks) despite knowing the data controller, Lewis, is non-compliant with his obligations under GDPR

Why are you saying Lewis has an obligation to be GDPR compliant? Why are you saying we have an obligation to be? Why is the data considered GDPR? We're a US based company> @alexanderras said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

@default said:

@VeloxMedia said:

Liable for what exactly? We don't have any agreement with you or anything. We didn't take anything, Lewis was responsible for your data not me.

And yet you have my info and my data. Why? You said you are GDPR compliant... so please explain how you got to be in possession of my data without my consent, because clearly my data is on your servers.

Last I remember I paid some business, but not your business.

Lewis was responsible for your agreement and your data.

Thank you for clarifying this. I am glad Lewis was responsible for my data. I paid him for precisely that.

I'm not responsible for your data, Lewis is.

You did not answer my question as to why my data is with you. I have not paid you, I paid Lewis, but you have my data, and my account, and my info. You said you are GDPR compliant - I hereby invoke the GDPR legislation in demanding explanation from you as to why you have my data.

Where are you seeing that any responsibility was transferred from lewis to me?

You have my data. You should answer this. You must explain yourself, not me. I paid Lewis, and now you have my invoice in how I paid Lewis. You also have my data which Lewis hosted; so you're the one to answer.

What notification or agreement or anything did you receive saying this?

You stated you acquired Veloxmedia and its data in this thread.

Who specifically did you pay for the service.

VeloxMedia - but the data is with you. It is up to you to justify yourself.

What does your credit card statement say?

[REDACTED ON THIS FORUM] (for GDPR legislation with regards to sensitive data - you should know this)

Who signed your agreement?

VeloxMedia - now with you because you have the whole client area

These are what matter and none of this is with us.

Actually it is, all of it is. The whole client area and all the services are with you.

Ahh I see the issue. We're Velox Media inc. I don't think veloxmedia was ever a real company, what's the address on the invoice? I thought it has Lewis's name on it as a sole trader and his address. You should really investigate that. Also if you want to know how we have your data you should file a complaint against the company you purchased it from. Velox Media inc is on the ICO and it's a new company so anything before 12/21 wasn't us.

See you're confusing the companies and people. Completely different. We're in different continents even.

Again we're not responsible for how we obtain data just responsible for maintaining that data is compliant from now on.

When you file a chargeback it'll be against lewis and you'll get the answers you seek.

Wrong! As a data processor you are also liable for continuing to hold and process data (and potentially making decisions outside of instruction around how data is processed if using to look up transaction records to identify chargebacks) despite knowing the data controller, Lewis, is non-compliant with his obligations under GDPR

No. Lots of assumptions being made and added here that aren't true.

You have repeatedly said they are his customers. All UK companies, including sole traders, are subject to GDPR. Lewis is therefore subject to GDPR.

The data contains PII, and you have just said that you have GDPR obligations from 25/12 and have registered with the ICO.

No assumptions here - just going by what you have explicitly stated

They WERE his customers and he's gone. We're a US company and we're only required to be GDPR compliant to our customers that we're providing services to that are in the EU. Those would only be people who have bought items in past couple weeks.

We're not providing services to Lewis's old customers they're just continuing to use whatever they have access to without any agreement.

They remain his customers - unless he has voided the sales agreement and refunded them. If so, he should probably inform you so you’re not providing free hosting services to them.

For all new customers you are the data controller as the agreement with you. By holding the PII data of Lewis’ customers you are a data processor. You are subject to GDPR obligations towards both groups.

I think you might need to look for new external counsel - you’ve been given terrible advice.

No. They're not Lewis's customers anymore. He did inform us. I've stated this over and over on here. You're missing the key detail and choosing to ignore it.

Again, you remain completely ignorant of the law.

As a sole trader, those contracts remain solely between Lewis and the customers. He might subcontract out the fulfilment of those contracts to a third party, but ultimately he still remains liable for them.

Also, you've been at pains to tell us over and over that they're also not your customers.

Anyone who isn't happy chargesback. Anyone new is GDPR if in EU if not they aren't because no need, although we file same policy for all anyways.

The "same policy for all" seems to be disregarding the GDPR regulations. Not your customers, you shouldn't have their PII. Simple.

ralf · January 8

@MaxTakeba said:

@plumberg said:

@VeloxMedia has data of customers from previous owner of VeloxMedia but not responsible for how they obtained the data
(https://lowendtalk.com/discussion/comment/4708761/#Comment_4708761)

Smells like @Calin and @cociu ❤️

Administrators:
@trewq / @jbiloh / @FAT32

Moderators:
@hawc / @Jord / @netomx / @angstrom / @DP

So, 70 pages in and not a peep from the Administrators or Moderators. Guess LET Traffic is priority

PopcornLifeMatters

Funny...
Cause I have flagged the thread and nothing happened...

I hope this thread remains open.

It's great evidence to support anyone wanting to do a chargeback, but also documenting @VeloxMedia 's willful continued violation of GDPR regulations.

ralf · January 8

@VeloxMedia said:

@tof said:

@VeloxMedia said:

@tof said:

@VeloxMedia said:

@tof said:

@MaxTakeba said:

@alexanderras said:
Forgive my simple take - and for the record I find VeloxMedia’s communication and behaviour here to be highly unprofessional - but if Lewis was a sole trader and contracts have not been transferred, then I think you remain customers of Lewis’.

Velox Media Inc is effectively providing services to Lewis, and the obligation to inform customers that there has been a change in data processor also remains with Lewis, who is the data controller.

If the buyers didn't agree to host the data... Why the hell are they doing that? Why not refund and just give everyone 30 days to leave? Why not buy those customers out and do it cleanly?

That's why I and many others have been ultra critical and fairly so.
@default said:

@MaxTakeba said:

@VeloxMedia said:

@default said:

@VeloxMedia said:
Your agreement is with Lewis. Period end of story.

I paid to hold my data. My data is with you, on your servers. It is not end of story, because it is not the end of billing period.

He is gone and we have all the services.

Yes you do. I paid and you took them. Now it is your job.

If you have a concern with your data then send us a ticket and we'll delete it.

No. You won't escape that easy. You took something that did not belong to you. There's consequences, because we paid.

If you have a concern with your money then file a chargeback or lawsuit against lewis.

No I won't. You took my hosting service for which I paid. Someone can't simply buy me without notifying me and without obligations.

We have zero responsibility to store your data or run your services.

Oh yes you do. Big time. I paid. Please remind me where I accepted for my data to be on your servers.

We do have a responsibility to protect data privacy we have and abide with government regulations, as well as partner agreements like with payment providers and ensuring we aren't complicit in fraud.

Yes you do. I am glad you are aware of that. Please don't forget that you need to notify your customers about partners and sharing data with said partners too.

It's that simple.

No, it is obviously not. We are at page 69 and you still did not get the picture - or maybe you're just dressing as a clown on purpose.

We have every intention of retaining services for users solely because it's good business and what's right.

No. You do not have an intention; you have an obligation. You took data for which customers paid to be hosted. You have no right and no consent; therefore the only way out is to honour the services as justification.

It also costs us basically nothing to host all your data compared to everything else we do so we don't care.

This is useful information for later, in a possible court of law.

You didn't agree have your data on our servers. We didn't agree to host your data. There is zero responsibility for us to do anything. Again these aren't our customers so we have no obligation to notify them anything.

Wait a fucking minute. What DID you agree to?
You can't just... Buy the business, buy the contracts for the servers, ASN, networking agreements and the CRM(s)... Without having to deal with the active customers on your shit that you're buying.

Please answer this honestly. What did you agree to? Because you can't claim you "didn't agree to host your data" unless you literally zero'd the drives, which you haven't done, and you've openly admitted to keeping the customers...

They are your customers now...

That's exactly what I am trying to say... but this guy says I don't know the law.

At this point I am willing to pay too to have a lawyer sue the hell out of this guy in US. I want his ass in jail.

He kept talking about the law, but seemed unaware that every country's legal code contains one provision: “prohibiting the possession of stolen goods."

'veloxmedia co.' came up with a new argument: offering services for free is an act of charity toward users.

That doesn't make any sense at all. What's stolen in you're scenario?

Servers and data you currently hold—even without the contract between you and clients, the servers are leased by users.
About the data, where did the compliance data in the documents you claim to have submitted to the ICO come from? It wasn't just picked up off the street, was it?

Huh? We've repeatedly offered to delete anyone's data if requested. Servers are leased with Lewis... That's his responsibility to provide... It's not a physical item but an obligation/service he needs to provide.

What compliance data are you talking about? Our attorneys filed with the ICO all the proper legal documentation. It was all created from legal and filed.

I don't need to submit a deletion request. What you currently hold is stolen property. I have accounts on the domains and websites you own—how do you explain this relationship? How did you explain it to the ICO?

We don't need to. Lewis would have to as he would be the one responsible for the data.

Incorrect. I'm sick of typing the reasons why, just scroll up.

rpqu · January 8

@Saragoldfarb, could you update the discord dump, please?

ralf · January 8

@VeloxMedia said:

@default said:

@VeloxMedia said:
No. They're not Lewis's customers anymore. He did inform us. I've stated this over and over on here. You're missing the key detail and choosing to ignore it.

Yes. I ignored that detail because it is irrelevant. What matters to me for example is why you hold the customers accounts, info and data?

Yes he should have refunded them but he didn't.

This is again irrelevant. You are not allowed to judge the decisions of other brands or businesses, unless you are their customer or something. You should mind your own business first.

So the options are to chargeback or we keep system running but not assume as a customer and not provide a service.

Why did you take the data if it was not yours to take?

Why you keep data if it was not part of the deal?

Anyone who isn't happy chargesback.

Yes, but this is not up to you to decide. Your problem is why having data which you are not supposed to have?

Because everyone on here asked me to keep the data and they want us to keep it running.

Not a single person here asked you to keep the data and keep it running.

We found out about this after the data acquisition, and with no consent.

Why am I not supposed to have the data?

Because of the GDPR. You don't have a business requirement for it.

I don't understand the issue?

You don't understand because you refuse to believe that you even have an issue.

tfgp99 · January 8

This definitely warrants a criminal complaint. Law it is on our side. He cannot escape these responsibilities.

tfgp99 · January 8

@rpqu said:
@Saragoldfarb, could you update the discord dump, please?

If the link still works
https://discord.gg/gRgFwH28Pm

cosmossofa · January 8

Lewis = Neutral evil
"Eric" = Chaotic evil, 100% pure.

tfgp99 · January 8

@tfgp99 said:

@rpqu said:
@Saragoldfarb, could you update the discord dump, please?

If the link still works
https://discord.gg/gRgFwH28Pm

invalid already, damn
i will not generate another one since he can catch my account in there.
ill find a way to check the current invite.

ralf · January 8

@VeloxMedia said:

@ralf said:

@VeloxMedia said:
Why won't you just post the invoice here? You brought it up now you're backpedaling when pressed for facts?

Have you considered that perhaps people who actually give a shit about GDPR might not want to dox themselves?

Also, given how you reacted to people earlier in the thread who'd asked questions and you just terminated their services, it should be obvious why some people prefer to not identify themselves to you either.

I asked for the invoice without their personal info. Like just the spec info.

They already shared that they had a contract for Intel Gold and receive Intel Silver. That should give you enough information to check which customers are supposed to be on Gold and actually on Silver.

Sorry, not "customers", whatever the hell it is you think they are.

ralf · January 8

@VeloxMedia said:
At the end of the day people paid Lewis for a service and he left. This isn't our responsibility to provide the service. I have no reason to give assurances that their service won't be terminated in the future. I have no reason to do anything. We're only providing services because we're a legitimate provider and trustworthy. We'll prove ourselves to our legitimate customers and build an amazing brand as we grow this thing. But we don't need the drama nor do we need to assure anyone, because if you need assurance then you should chargeback or do whatever you want.

So are they your customers or not your customers? You seem to keep flip-flopping based on whichever best suits whatever argument you're trying to make.

I'll make it simple:

If they are your customers, you have an obligation to provide a guarantee of service, or else a refund
If they're not your customers, you have their data without consent and are violating the GDPR.

So "pick a lane".

rpqu · January 8

@tfgp99 said:

@tfgp99 said:

@rpqu said:
@Saragoldfarb, could you update the discord dump, please?

If the link still works
https://discord.gg/gRgFwH28Pm

invalid already, damn
i will not generate another one since he can catch my account in there.
ill find a way to check the current invite.

That's why I prefer dump. There's no matrix or irc bridge either, right?

ralf · January 8

@VeloxMedia said:
Yes again we keep asking this same question. Why the hell are we continuing to keep this service active? Everyone keeps telling me to shut it down but the money doesn't matter. It's all this bs drama.

If the money doesn't matter, why are you threatening cancelling services that you think Lewis sold too cheaply?

If the money doesn't matter, why don't you refund customers whose services you plan to cancel?

ralf · January 8

@VeloxMedia said:

@ralf said:

@VeloxMedia said:

@default said:

As long as you have access to my data, you must respect that. You are obliged to respect that; otherwise you are forced to delete all customers to honour their privacy, because there is no contract and no obligations.

I'm forced by what exactly? Please provide the legal agreement you had with Lewis's company concerning your data and that he wasn't allowed to transfer it to anyone or give anyone access to it.

The basic requirements of the GDPR:

PII data can only be held for a legitimate business purpose. If people aren't your customers, you don't have a legitimate business purpose.

PII data must be removed as soon possible (within maximum 1 month) unless there is a continuing ongoing business need for it or a statutory requirement (e.g. keeping invoices so you can prove business tax affairs for 5 years)

Users have to consent to having their data used

Users have to have access the privacy policy prior to giving consent that details exactly what PII data is stored and how it will be used, including who it is shared with.

Any changes to the privacy policy must be given to customers in advance of the change (typically one month) with an option to revoke that consent - at which point existing contracts need to be cancelled and refunded AND the customer data deleted within one month (subject to statutory requirements)

Anything that can identify an individual counts as PII. That includes everything from an ID in a database to their VPS disk image.

You keep saying that we are Lewis' customers not yours. You therefore have no rights to have ANY of Lewis' customers' data.

GDPR doesn't apply to US data.

Incorrect. GDPR applies to any data that personally identifies EU or UK citizens regardless of where that data is located.

tfgp99 · January 8

@ralf Too many questions that he will ignore. Im telling again and again that isnt convenient.

ralf · January 8

@VeloxMedia said:

@Calypso said:

@VeloxMedia said:
It isn't required for 30 days and hasn't been 30 days.

You are changing your story again. You've said before that you don't plan on informing the customers because you don't see the need for it.

Also we aren't certain it's required because we only need to notify customers of this and we aren't planning on converting them into customers until they renew their agreement or purchase services, which then invoice satisfies this. Until then we're not delivering any services or anything.

You have their data. So you are obliged to inform. It's one of the basics of GDPR; if your "legal team" doesn't understand this, they're as usefull as a legal team as my mother is. And she's dead for quite a while now.

It's not a handover and the terms are vague.

No, it's not vague and it is a handover. A handover is when someone else, not acting as the initial person/company, owns/processes the personal data.

And either you are another company or you are Lewis. In latter case, please admit now and we can go on. If not: there was a handover of data.

Same story for over 70 pages now. 30 days is the rule and it hasn't been close to 30 days.

We're still working the details and waiting on the response from everyone on what to do. This only applies to EU users anyways.

Hopefully you realise that the 30 days is a MAXIMUM time for compliance.

The regulations are quite clear that you should delete data as soon as possible after the business requirement for it has ended.

Howdy, Stranger!

Categories

In this Discussion

Velox media under new management

Comments

PopcornLifeMatters

PopcornLifeMatters

Howdy, Stranger!

Quick Links

Categories

In this Discussion

Velox media under new management

Comments

PopcornLifeMatters

PopcornLifeMatters