Regus Finland Oy / Regus Group: Selling temp office facilities by spamming

Regus Finland Oy, my old friend (see previous posts 1, 2, 3, 4) are spamming to sell their temp office facilities. As with the other post today, I saw this in an address harvested from the web page of the biz, and have seen it in spamtraps as well. The ESP is the French Edatis, an acquaintance of mine from a very, very long time ago in this sordid context.


Edatis’ responses range from the hilarious to the pathetic. Abuse@ autoreply: “The email address x@x has been unsubscribed from the list.” Which list? And what does it matter if you don’t write in from the address that received the spam?

One of Regus’ rental offices happens to be within walking distance of my present workplace. So I walked in today.

“Can I please see the description of your personal data file?”

“WTF?”

“The description of the file of personal data that you use for electronic direct marketing. You need to have one according to Section 10 of the Personal Data Act, and you need to keep it available to anyone.”

“WTF!?!?!?”

The receptionist (M. S.) took down the contact information (I didn’t give an email address) and said somebody would be in touch…

Spamming IP: 83.136.212.9

Spam headers:

From bounce2@ema01.net  Thu Nov  8 18:20:31 2012
Return-Path: <bounce2@ema01.net>
Received: from mailacqui304.ema01.net (mailacqui304.ema01.net [83.136.212.9])
        by mail.atrotossavainen.fi (Postfix) with ESMTP id C0A65796467
        for <[scraped from the web]>; Thu,  8 Nov 2012 18:20:30 +0200 (EET)
Received: from mailacqui304.ema01.net (unknown [192.168.20.70])
        by mailacqui304.ema01.net (Postfix) with SMTP id CC28E18FBC3
        for <[scraped from the web]>; Thu,  8 Nov 2012 17:20:29 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=edt02.net; s=k1;
        t=[timestamp]; bh=pTnOFnLWcQJfdghOLQkfTcfvXjdW3NFGlBM9f6gm3Hk=;
        h=From:To:Reply-To:Subject:MIME-Version:List-Unsubscribe:
         Content-Type:Content-Transfer-Encoding;
        b=yhHlCHPfnGezFUSwFYw/MGa+0rmjKPkHKk0nOQDMmiGkdBShYtXSldC5Zb+ciddRJ
         AifhRDnAHgS7D/EL4jbUMK/haXFAF5+1TEPVpABzaUBlfsvqkLtiB/WMSbG9+Uk24f
         RE1/8qYXjoVmkoA6ljnJdcBkIwlfyNgQeIv9iPuo=
From: =?UTF-8?B?UmVndXM=?= <regus@edt02.net>
To: [scraped from the web] 
Reply-To: =?UTF-8?B?UmVndXM=?= <regus@edt02.net>
Subject: =?UTF-8?B?VMOkeWRlbGxpc2V0IHR5w7Z0aWxhdCBrb2h0ZWVzc2EgSGVsc2luZ2lzc8OkIA==?=
MIME-Version: 1.0
X-EDATIS-ID: x/x/x/x/0/3-0--0-0-0-0-x
List-Unsubscribe: <mailto:unsubscribe@ema01.net?subject=unsubscribe&body=XEDATISID:x/x/x/x/0/3-0--0-0-0-0-x>
Content-Type: text/html;
       charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Message-Id: <GENERATED BY THE RECEIVING SERVER>
Date: Thu,  8 Nov 2012 18:20:30 +0200 (EET)
Content-Length: 72938
Lines: 1379

Human readable contents: None. As before, the message does not have a text/plain part at all. So here is the HTML in all its glory, with links obfuscated:

regus
Onko sinulla vaikeuksia lukea tätä viestiä? Lue se suoraan verkossa.
Haluatko tulevaisuudessa vastaanottoaa Reguksen tarjouksia? Klikkaa tästä
regus
regus
regus
regus
regus
Tällä tarjouksella parannat yrityksesi näkyvyyttä Helsingissä
regus 30 päivää rajoitetut tarjoukset
regus
Erilaiset toimitilaratkaisumme on suunniteltu tukemaan pienten ja keskisuurten yritysten työskentelytapoja. Maailmanlaajuisen verkostomme ja palveluidemme avulla voit tunnustella uusia mahdollisuuksia ilman suuria riskejä ja kustannuksia tai pitkiä sitoumuksia.

regus
regus
Kalustetut toimistot
regus
Kaikenkokoiset käyttövalmiit toimistot.
regus
Joustavat sopimusehdot, ei pitkiä sitoumuksia.
regus
Pienet kustannukset – maksat vain käytöstä.

 
Alkaen
399 €
kuukaudessa*
479€ kuukaudessa
napsauta tätä
 
regus
Virtuaalitoimistot
regus
Edustava osoite vahvistaa yrityksesi brändiä.
regus
Puheluiden ja postin käsittely.
regus
Vastaanottopalvelut ja henkilökohtaiset tukipalvelut.
 
Alkaen
74 €

kuukaudessa**
99 € kuukaudessa
napsauta tätä
 
regus
Kokoustilat
regus
Tilat, laitteistot ja palvelut kaikkiin tarpeisiisi.
regus
Helppo ja joustava varaus.
regus
Ilmainen internetyhteys kaikkien osallistujien käytettävissä.
 
Alkaen
22 €
tunti***
napsauta tätä
regus
Soita +358 09 2516 6115 tai käymällä osoitteessa www.regus.fi lisätietoja.
regus
regus
regus
regus
regus
toimistotila virtuaalitoimistot kokoustilat videoneuvotteluesittely business lounge -esittely businessworld
1200 keskust | 550 linna | 95 riiki
regus
regus
 

* Työasemakohtainen kuukausihinta kahden työaseman toimistossa. Edellyttää vähintään 12 kuukauden sopimusta.
** Mailbox-sopimuksen kuukausihinta. Edellyttää vähintään 12 kuukauden sopimusta.
*** Tuntihinta perustuu tilavaraukseen vähintään neljälle hengelle ja vähintään neljäksi tunniksi normaalina työaikana. Hinnat vaihtelevat tilan koon ja sijainnin mukaan. Hinta ei sisällä AV-laitteita, videoneuvottelua tai sihteeripalveluita.

Tarjous koskee ennen 31.12.2012 solmittuja sopimuksia, jotka on tehty tarjouksessa mukana olevien Reguksen toimipisteiden kanssa. Tarjous ei koske nykyisen sopimuksen uusimista tai tilausjakson pidentämistä. Tarjous on voimassa tuotteiden saatavuuden mukaan. Lisäpalvelut eivät sisälly hintaan. Tiedot ovat oikeat viestin lähetyshetkellä, mutta niitä voidaan muuttaa ilman erillistä ilmoitusta. Yksi tarjous yritystä kohti. Reguksen normaalit sopimusehdot ovat voimassa.

Tietosuojamenettely. Peruuta tilaus.

Regus plc (société anonyme) Head Office: 26 Boulevard Royal, L-2449 Luxembourg R.C.S. Luxembourg B: 141159. Registered Office: 22 Grenville Street, St Helier, Jersey, JE4 8PX, Channel Islands Jersey Registered Number: 101523

Edatis autoreply:

Bonjour,

Nous accusons réception de votre demande de désinscription pour l’adresse
NAME <address>
N.B: l’e-mail objet de cette désinscription vous a été acheminé par la plateforme
Edatis Dialog (www.edatis.com), dans ce sens, nous tenons à préciser qu’Edatis n’est
pas propriétaire de base de contacts et ne peut être responsable des bases de ses clients.
Ceci est un message automatique. Vous serez contacté(é) aux meilleurs délais par le service dédié afin d’avoir des compléments
d’informations (en tête complète etc.) pour pouvoir procéder dûment à votre désinscription.

Cordialement,
L’équipe Edatis

Edatis human reply 1:

The auto-reply bot is a bit impolite, i’m going to slap its hand 😉

On a more serious note, this auto-response is only generated (to my
knowledge) on the “.fr” abuse and plaintes aliases.
But we’re gonna add the english version of the message. Sorry for the
rudeness.

Regarding your initial question, we’re not tolerating any harvesting
and we’re following the “CNIL” (french administrative authority for data
privacy) on that matter ( http://en.wikipedia.org/wiki/CNIL)

So, each time there is a complaint we’re asking our customer (here
Regus) to give us specific informations (date, address source…) and
transfer it to the complainant

Anyway, if you have any more questions you can contact directly
[REDACTED]

Have a nice day and we apologize for any inconvenience.

Edatis human reply 2, from the [REDACTED] dude:

First of all, I inform you that we have taken notes of your comments and we will make improvements on several points.

> That’s good news. What sort of evidence would you require in order to terminate Regus?

We need more information about this/these spam you received. The best way is to transfer them for us.
Thereafter we will take the necessary actions towards the customer.

> Neither means qualify as opt-in. If opt-in is required in your Terms of Use, you need to terminate this customer.

Of course, we require that the addresses used are opt-in in BtoC mailing, but not in the case of BtoB mailings. According to the laws of France emailing. This is the case of this customer Regus, which has a BtoB activity.

So they don’t require opt-in for B2B spamming, and therefore allow spamming. Good to know.

Edatis human reply 3, from the [REDACTED] dude:

Firstly, I want to thank you for these two copies of spam, but the ID are missed from these contents and that make me enable to identify exactly the mailing that these spam belongs to and then the list of addresses that is relevant to this complaint, which seems questionable sources.

[I sent munged copies of spam. Of course.]

We are not tolerating any type of spamming and we treat seriously any kind of complaint, especially since March 2012. Our action can be to terminate collaboration with a customer in some cases due to complaints. But I ensure you that “nothing at all” is not on this range…

[I asked what did “necessary actions” mean, hazarding a guess that Dave might be involved.]

>I am sorry to hear that you allow spamming.
>
>I am perfectly aware of the fact that the implementation of the 2002/58/EC
>directive in both of our countries allows B2B spam, legally. It is not in
>the best interest of any email service provider to allow it, in my opinion.
>The fact that it is legal doesn’t mean that it’s not spam.

I agree with you on this point when there are no possiblity to stop these mailings, but when the mailing allow internautes to unsubscribe easily that will not be classified as a spam.

[Oh. So the presence of an opt-out link means it’s not spam? Why does Spamhaus disagree?]

I’ve asked for a link to Edatis’ Terms of Service two or three times now. Every single time I’ve been ignored.

One Response to Regus Finland Oy / Regus Group: Selling temp office facilities by spamming

  1. A response just in…

    Sandra Corcellut said this on behalf of Regus customer service:

    Dear Mr Tossavainen,

    Re your complaint dated 12th November 2012 entitled “Edatis customer Regus spam to harvested addresses”

    We have been asked by Edatis to respond to your complaint regarding the receipt of our promotional emails (at your email address(es)).

    We are sorry of the inconvenience that these emails have caused you but would like to outline our data sourcing practices so you can be assured you that we are making every effort for our communications to be within the relevant law.

    The law concerned in this matter is not the Finnish DPA (Personal Data Act 523/1999) but its French equivalent, the Law relating to the protection of individuals against processing of personal data 1978, latest version 2004. This reflects the position under the Data Protection Directive (95/46/EC), where, when messages are sent from a Data Controller established in one EEA country to Data Subjects in another, the law of the originating country applies to all processing. The French law does not require the identification of the source of the list in promotional communications.

    The law in both countries allows promotional communications to business to business email addresses which constitute personal data where consent has not been withheld. Regus is fully aware of the importance of this requirement and we only use business to business data sources where the provenance of the data and the necessary consents for marketing are guaranteed by the list owner. Our due diligence in the sourcing of targeted lists for our business to business campaigns includes written terms to this effect and we are asking our list owners to sign up to these.

    Your suggestion that the email address(es) used in this case are harvested goes against all of the above points. You will, however, appreciate that without sight of the email address(es) in question we are unable to verify 1) whether they are personal data and 2) whether they are personal data in a consumer context and 3) which list source they came from.

    As we rented the addresses in good faith, selecting only business to business contacts obtained with consent, we had good reason to believe that the activity was legal. However we are very willing to pursue the matter with the relevant list owner but cannot do that effectively without the identifying information. As a matter of course, we have re-visited the selection criteria we used for each list and requested the list owners involved to provide further information as to the source of the addresses used.

    We would like to reiterate that it is never the intention of Regus to send unlawful business to business email communications and we believe that we have robust controls in place to prevent this from happening. Again, we apologise for the trouble these communications have caused. Be assured that if one of our suppliers has failed us on this occasion we would be happy to pursue them. We have offered to remove any of your email addresses from future campaigns, however we haven’t heard from you on this. Please could you send us the addresses in question?

    We thank you in advance.

    Yours sincerely,

    Regus Customer Service

    The emphasis in the quote above is mine.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Go back to top