Saymine Technologies (Mine) and requests to erase all personal data

[Pat Falcon <patricia_falcon () BROWN EDU>]

We had a question today from one of our administrative offices about the
legitimacy of an email they received from Saymine (see below). While I
agree that it's suspicious, Mine's website <https://saymine.com/about> seems
to support their email. Digging a little deeper, though web searches didn't
turn up much, I did find that they are a relatively new company, launched
in the UK in late January according to Top Business Tech
<https://tbtech.co/mine-the-start-up-revolutionising-data-ownership/>, plus
Mine has a listing on Crunchbase
<https://www.crunchbase.com/organization/saymine-technologies-mine#section-overview>
.

Has anyone else had any dealings with Mine or have any more information
about them, or for that matter, received similar requests from others like
this?

Sorry for the cross-posting but I wasn't sure which of the two lists might
be more pertinent.

Pat Falcon
*Computing & Information Services | Information Security Group*
*Brown University | Box 1885 | isg () brown edu <isg () brown edu> **| *
*she/her/hers *
*| 401.863.9259*


-------------- Original Message ---------------
*From:* Mine [request () saymine com]
*Sent:* 1/23/2020 10:27 AM
*To:*  <precollege () brown edu>[redacted]
*Cc:*  [redacted]; request () saymine com
*Subject:* Data Subject Request from [redacted] under the GDPR

Data Subject Request: Brown
Request number: [redacted]

Dear Sir/Madam,

Saymine Technologies Ltd. d.b.a Mine (“*Mine*”), is contacting you on
behalf of [redacted] (the “*Data Subject*”),
regarding whom personal data is processed by Brown, in connection with the
exercise of the Data Subject's rights
under applicable privacy laws, including, but not limited to, the General
Data Protection Regulation (“*GDPR*”) and the California
Consumer Privacy Act (“*CCPA*”) (collectively, “*Applicable Privacy Laws*”).


*Background*

The Data Subject registered to Brown, using the email address: [redacted].
Certain Personal Data concerning the Data Subject has
been and is processed by Brown, and regarding which the Data Subject is
entitled and willing to exercise such rights granted under
the Applicable Privacy Laws.

Mine is a platform enabling users to exercise their rights in their
Personal Data and facilitating the submission of Data Subject Requests
(“*DSR*”), on behalf of its users, and in accordance with applicable
laws. [redacted] has
registered to Mine, and has instructed Mine
to submit the following DSR to Brown.


*Please note that any further communications with [redacted] in connection
with this request,shall be sent directly to **[redacted]**’s
email [redacted].*


*Data Subject Request*


   1. The Data Subject hereby requests that Brown *erase any and all
   Personal Data*
   about the Data Subject it processes, without exception.
   2. Following the complete erasure of such Personal Data, please provide
   confirmation that the
   Personal Data have been erased, without the possibility to restore or
   reconstruct the data,
   by sending such confirmation to the Data Subject's email address at:
   [redacted], and copying Mine,
   at request+4O2BRRI () saymine com


Companies interested in directing this message to a different email address
or discussing more ways of streamlining this process - contact us
<https://u14508181.ct.sendgrid.net/wf/click?upn=TqVUCJXeGA5WuTTUFtSdr5WRq4ozpMiOOATCjWhuiq51Uhmk1WscGURa-2FTrLHnSd_4JZHQUjYoW9jsnr2z-2F7DRHtq9YhBrW21sbKPLdWAkau52EYMyXSuUfEyn6ZooKyPGMseYqvuWmduuJKv5p3HAtS5FdKbPgc4-2B3aOOxqVZq976MEPXy6aLJI2ZzxWXb3mdOuD2m23BqRvZbRraGZ6m53jLtEDNVG8tMGh46fnjmSqHnwzxO9tzdLPILREdW8GqbZTKRhbEgE38bQRMKFJ9nZO3gPTu9riW1eT0U4ueHw-3D>


Regards,

[image: mine logo]

*Say Mine Technologies Ltd.*
23 Derech Begin
Tel Aviv-Yafo, 6618356
Israel

https://www.saymine.com/
<https://u14508181.ct.sendgrid.net/wf/click?upn=TqVUCJXeGA5WuTTUFtSdr6mUFnLyrHiomNf1Eh0tmKcrB8ZEJaduiL6YlJXnL-2BpiJOuTiv5YKJebWEFx5zdRkvTC6daueBuRvVEfb9o14RCBbSC3qFUvvqdRCvgFk2hNiGDiEvdAUh8MklJM-2FPN-2BSw-3D-3D_4JZHQUjYoW9jsnr2z-2F7DRHtq9YhBrW21sbKPLdWAkau52EYMyXSuUfEyn6ZooKyP7QL6v1LPIOJGn8-2BkzgLRQ4-2F-2FLG-2Blcp4RJi5JQQoJfijqs58k8svlw8tNWWDyWcoGfjNY-2FLfFuvYSUvTG1XyG9KP-2FbsLbPy8byoI1-2Fl-2Boq9eKw5lXHu1coGFGyc28rO8Sut-2FlEfdnzBIGwVgfuZXyHDAg-2BH8gmZS3EdkEDb3Dtmc-3D>


Under the circumstances at hand, we believe that the Data Subject is
entitled to have the personal data erased
pursuant to one or more alternatives specified in Applicable Privacy Laws,
including, inter alia, Article 17(1)
of the GDPR and Section 1798.105 of the CCPA. Nothing in this email
purports to exhaust any of the Data Subject's rights, claims, defenses or
remedies.

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community