General Data Protection Rules GDPR

[swguy]

I am astonished at that the GDPR is having unintended repercussions such as major companies blocking European IP addresses completely, i.e., the Chicago Tribune. Interesting times.

I am astonished that you are astonished. This is a huge pain in the neck. I'm tempted to do likewise.

[delia]

swguy, I got European clients on my hosting. Not giving up money. Part of the reason for me digging into this was to see what I needed on my website. Global business -which I know you have as well.

[mesnitu]

Well, it was a pain, but personally I do like this law. And I'm European.
I'm tired of getting phone messages, emails, from companies that I've never contacted.
Those days are over (I hope).
Until now we've had one customer that made a purchase and after asked to remove the account. So it was remove. Simple.
I guess the guest_account module from lat9 will prevent this situations, but didn't had the time to look into it.
From all the notifications to review the account, nothing really happen, and some "old" customers already agree with the new privacy policy. etc.
I already receive a lots of emails to review my own account on other sites, and I'm not going to. At least today. But it's nice to have the tools and laws to do it.

[swguy]

"We share your Personal Information with third parties to help us use your Personal Information, as described above."

To me, this would be better worded as,

"We share your Personal Information with third parties to help us process orders, as described above."

[swguy]

Well, it was a pain, but personally I do like this law. And I'm European.
I'm tired of getting phone messages, emails, from companies that I've never contacted.
Those days are over (I hope).

I would bet my bottom dollar they're not. Laws like this inconvenience honest vendors and don't slow down the bad guys one bit.
Bad guys are *criminals*. They are not concerned with obeying the law. That's why we call them bad guys!

[RixStix]

I am astonished that you are astonished. This is a huge pain in the neck. I'm tempted to do likewise.

DITTO. For now, We're using GDPR recital 23 and removing EU from advertisement targets

[swguy]

GDPR Checklist: https://gdprchecklist.io/

[torvista]

@jsweb
Thanks for making your efforts public. You should put it on Github for the moment, this is not really the place to discuss code.

But:
1) includes\modules\pages\privacy_review\header_php.php
has a block of code in it for sending an email.

As far as I can see, there is nothing in includes\templates\MYTEMPLATE\templates\tpl_privacy_review_default.php
to send that: the "send" action is missing.

I am guessing this header code is copied from delete_account and has not been cleaned.

2) There are many instances of incorrect break tags: <br/>.

regards
Steve

[mshultise]

A lot of websites are sending email to ask to resubscribe to newsletter. Are there any implications for not doing this? I asked the newsletter people I use, even they are not sure how to proceed.

Probably not the best solution, but a while back I created a Mailchimp account. I added all customers to the list. I disabled the default newsletter checkbox in my Zen Cart (and I think I set newsletters to NO in all user records).

I added a link in the new customer email telling them to click if they wanted the newsletter.

In the first newsletter I sent out, I told people I had switched to Mailchimp, and that if they wished at any time to remove themselves, click the link at the bottom. (I realize this forced an OPT-OUT rather than OPT-IN but decided to do it this way). If one wanted to make this an OPT-IN you would not import anyone into Mailchimp and might use the email all customers function with the Mailchimp signup link.

[mshultise]

While I applaud the work done so far by others, I have decided to *temporarily* ban European visitors until I can become compliant. I will continue to work towards that goal myself, but in the meantime..

I think I have only had a couple of customers in other countries so far.

I found a service that blocks EU visitors for free, up to 25,000 pageloads per month. It took all of 20 minutes from start to finish (most time spent adding 1 line in my header for both Zen-Cart and Wordpress). I tested it with a VPN and it seems to work fine. ezigdpr.com

As I say, I will continue to implement changes to my customers Zen-carts but this has allowed me more time to do it right.