GDPR - Consent to use personal information

  • Posts: 112
  • Thank you received: 1
  • Hikamarket Multivendor Hikashop Business
8 months 4 weeks ago #288090

-- HikaShop version -- : 3.3.0
-- Joomla version -- : 3.8.5
-- PHP version -- : 2.0.1

Hi all,

I guess users of my website will need to consent to the use of their personal information being used when placing an order, so as to comply with GDPR regulations?

A simple tick box with the following would do as part of the checkout process.

"I consent to NAME_OF_WEBSITE_HERE using my personal information, subject to the terms of the URL_OF_PRIVACY_POLICY, for the purpose of fulfilling this order".

The idea being that I can only use this personal data for fulfilling the order, and nothing else, and specifically have permission to do so (the important bit).

Where would be the best place to have such code to do this, or do you already have/have planned a solution for this?

Thx, Darrell

p.s. any comments from anyone on this most welcome. Did anyone tackle this a different way?

Please Log in or Create an account to join the conversation.

  • Posts: 63971
  • Thank you received: 9221
  • MODERATOR
8 months 4 weeks ago #288098

Hi,

You have the "terms and conditions" view that you can add to your "checkout workflow" in the HikaShop configuration to have such checkbox during the checkout.
The text can be customized with a translation override.
Next version of HikaShop will allow for even more flexibility on that end and you'll be able to have several terms and conditions views on your checkout, independent from one another so you could have several checkboxes for different things (GDPR, terms and conditions, licence agreement, privacy pocily, etc.

Please Log in or Create an account to join the conversation.

  • Posts: 338
  • Thank you received: 10
  • Hikamarket Frontedition Hikashop Business
5 months 2 weeks ago #293275

Hi Nicolas,

Having the privacy policy checkbox would not be enough to be fully compliant, it's even required that you keep track of all consents given by users for each form dealing with personal data on your website. You may be asked to prove a given consent.

How can we find out who has signed up for which privacy policy?
Because it may be that you have an updated privacy policy six months later.
You have to prove who have signed op for which privacy policy.

There is a new GDPR extension who can do this ( storejextensions.org/extensions/gdpr.html ), but it's not working with Ajax forms like the Hikashop checkout. Could you make an integration with this product for example?

Hope to hear form you.

Kind regards,
Lumiga


Kind regards,
Lumiga
Last Edit: 5 months 2 weeks ago by Sailfin73.

Please Log in or Create an account to join the conversation.

  • Posts: 63971
  • Thank you received: 9221
  • MODERATOR
5 months 2 weeks ago #293277

Hi,

If you're using a custom user field of the type "checkbox" in order to have the checkbox on the user registration form, then it's not a problem to handle that.
You just have to update the value in the custom field or create another custom user field when you change the version of your privacy policy. That way you'll know which privacy policy has been agreed on.

Regarding the integration to something more complex to be able to better track all the user data, consent, etc, we'll integrate with Joomla 3.9 and it's new privacy system once it's available, probably in a few months.

Please Log in or Create an account to join the conversation.

  • Posts: 338
  • Thank you received: 10
  • Hikamarket Frontedition Hikashop Business
5 months 2 weeks ago #293288

Hi Nicolas,

Do you mean a Joomla custom field or a Hikashop Custom field?

We also like (need) the option that you can open a popup with the privacy policy text at the checkout.
You think that's still possible?

Kind regard,
Mirek


Kind regards,
Lumiga

Please Log in or Create an account to join the conversation.

  • Posts: 63971
  • Thank you received: 9221
  • MODERATOR
5 months 2 weeks ago #293292

Hi,

I mean a HikaShop custom field of the table "user".
It will display on the HikaShop registration form. And you can force Joomla you use HikaShop's registration form with the registration redirect plugin that you can enable via the Joomla plugins manager.
If you want a popup for the label of the custom field, it will require a popup plugin like this one:
extensions.joomla.org/extension/modals/

Please Log in or Create an account to join the conversation.

  • Posts: 338
  • Thank you received: 10
  • Hikamarket Frontedition Hikashop Business
5 months 1 week ago #293590

Hi Nicolas,

Do you think it will be easier for us to log the user consent with the new version of Hikashop on Joomla 3.9?
In that case I'll wait for this integration.

Because I have tested what you said and made a user custom field checkbox with the total privacy policy as value.
But on the back-end I can't find the value in the customers view. Or do I have to look in the database?
Also the checkbox is not checked on the back-end when the user has accept the privacy policy.



Kind regards,
Lumiga


Kind regards,
Lumiga
Attachments:

Please Log in or Create an account to join the conversation.

  • Posts: 63971
  • Thank you received: 9221
  • MODERATOR
5 months 1 week ago #293601

Hi,

The value of the checkbox there should be the same as what the user did.
Please provide a screenshot of the settings of your custom field.

Regarding the 3.9, we'll see how we can integrate with it. There might be something else than a custom checkbox field but it's too early to say.

Please Log in or Create an account to join the conversation.

  • Posts: 338
  • Thank you received: 10
  • Hikamarket Frontedition Hikashop Business
5 months 1 week ago #293657

Hi Nicolas,

See here my screenshot.
And where can I see the value from the checkbox after someone has accept it.
I can't find it in the customers menu?



Kind regards,
Lumiga


Kind regards,
Lumiga
Attachments:

Please Log in or Create an account to join the conversation.

  • Posts: 63971
  • Thank you received: 9221
  • MODERATOR
5 months 1 week ago #293671

Hi,

I've created a similar custom user field on my end and it works fine with the 3.4.0.
During registration, I see the checkbox and I have to check it, and when I check the user information via the Customers menu, the checkbox is checked corresponding to the fact that the customer checkec the checkbox:
monosnap.com/file/EdmKwMoSc5fqLTi4fkEaTB4RyZbWCr
monosnap.com/file/LdwnIFKyThYxrZzFmQmHq8RsQEKhql

Please Log in or Create an account to join the conversation.

Time to create page: 0.110 seconds
Powered by Kunena Forum