“PrestaShop GDPR addon helps EU business comply with the GDPR law and avoid any kind of troubles in the future. It adds a GDPR tab on the front end of your website and allows your customers to raise a request regarding data access, modification or deletion, any time.”
GDPR stands for General Data Protection Regulation. It is a law implemented for European countries on 25th May 2018 to enhance the data privacy of the people.
Every online business was enforced to comply with this law and it gave EU citizens better control over their private information. Any business failing to follow the GDPR law would be charged a heavy penalty.
With this law, people would be able to check what information does a website have about them and they would be able to modify the details they want to share with a business.
Realizing the extreme importance of GDPR in the EU countries, Knowband comes up with the GDPR- Rights of the Individual addon.
What does PrestaShop GDPR addon offers?
Once installed, the PrestaShop GDPR module places a GDPR tab on the header that has the following options:
1. Right of Access to Personal Data
2. Right to Data Portability
3. Right to be forgotten
4. Right to Data Rectification
5. Rights in relation to automated decision making and profiling
6. Right to be Anonymous
7. Right to Restriction of Processing (Coming soon)
Let’s try to get insights into each option-
1. Right of Access to Personal Data
Through this option, the customer can raise a request to the merchant to get access to their personal data, by submitting their email address.
The user receives the confirmation email. Once confirmed, the report is sent to the user.
From the backend of the module, you can check the requests of the users who have raised the data access request, under the GDPR Personal Data Request tab.
2. Right to Data Portability
Through this option, the customer can download his/her data in a CV format. This tab consists of three options named as-
Personal Information
Addresses
Orders
The customer needs to head over to the desired option and they will get the option to download your data, after confirming the email address.
The requests can be seen under the GDPR Data Portability tab in the backend of the module.
3. Right to be forgotten
This option allows customers to permanently delete their account details from the website.
Once performed, the user details would be removed from the store and they would be required to create a new account if they wish to come back to the store.
The account deletion requests can be seen under Data Forgot Request tab.
4. Right to Data Rectification
This option allows customers to rectify their existing information captured by the brand. It allows editing personal information, address and the option to update the password.
The merchant can check the rectification requests under GDPR Rectification Request.
5. Rights in relation to automated decision making and profiling
Through this option, consumers can check which services have they been automatically subscribed to. Upon request, the consumers have the option to choose only those automation services which they would want to receive.
6. Right to be Anonymous
If a customer does not want to share his original email address with the brand and want to remain anonymous, they can opt for this option.
Upon submitting this request, the existing email address of the user will be replaced by a system-generated email address. These requests can be looked under the GDPR Anonymous Request tab.
7. The Right to Restriction of Processing
This option is not available to use as of now but would soon be reflected in the module.
Let’s now come to some general settings of the PrestaShop GDPR addon.
General settings
1. Specify the number of requests a customer can raise in a single day.
2. You can mention the time after which the user account will be deleted permanently.
3. You can customize the cookies consent bar.
4. You can enable or disable any option at any time.
5. Customize the user consent option as per your requirements from the User Consent tab.
6. Restrict GDPR to some specific countries or specific IPs only.
7. You can customize the email templates and adjust the cron functionality.
There are many more options available in this module. Check out the PrestaShop GDPR addon to know its complete features and benefits.
For any assistance regarding this addon, kindly contact us at support@knowband.com
The enforcement date of the GDPR is approaching. Yet, most of the businesses are still struggling to make their online store GDPR compliance. In order to make it easier for the Prestashop store owners to meet the GDPR requirements, Knowband has developed the Prestashop GDPR Addon – Rights of the Individual. As per the suggestions of our valuable customers and by referring the discussions on the various forums, we have added some additional features to the Prestashop GDPR Addon. We will release the new version of the Prestashop GDPR Module on May 23, 2018. In order to give a glimpse of the new features to our valuable customers, we are sharing the details and interface design here.
New features of Prestashop GDPR Module
The purpose of these features is to provide additional control to the Prestashop store admin to comply with the GDPR directives. Please find the details of the new features below:Right to be forgottenAdmin has the advanced options to process the data deletion request.Now, admin can select the options like Delete Order, Random data fill or No Action.Delete Order: If the Delete Order option is selected then on requesting for the Data Deletion the order details will be deleted.Random Fill: If the Random Data Fill option is selected then on requesting for the Data Deletion the personal details of the customer will be anonymized. It will help the store admin to keep the statistics of the order and product sale.No action: If the No action option is selected then on requesting for the Data deletion previous order details will remain untouched.Time to process request deletion: Admin can select the option to delete the customer data immediately or after some days. If the admin would like to delete the customer data after some days then admin need to specify the number of days. (Make sure to delete the customer data within 30 days of the request)Deletion of the customer data from Back-office: In order to handle the data deletion requests which have been received through other sources like email, the Prestashop GDPR module provides an interface to the admin to delete the customer data. Follow the steps listed below to complete the data deletion action:
Go to the GDPR Forgot Request Tab
Click on the Delete Customer’s Data option as highlighted in the screenshot
On clicking the Delete Customer’s Data a new tab will open. Please refer to the attached screenshot.
Admin needs to enter the customer name or the email id to find the customer details. The details will appear like.
From here, admin can check the customer details and also select the option to delete the customer data. Admin can also notify the customer regarding the data deletion through email.Note: As of now, the Prestashop GDPR Compliance Module by Knowband does not keep the record of the data deletion requests processed from the back-office.Purge request day: This option allows the store admin to define the data retention period for the GDPR requests. As per the number of days defined by the admin GDPR request log will get deleted automatically (cron setup for the data deletion).Cron setup: To enable the option to delete the customer data after a specified day and the purge request day, the admin has the options to set up the cron.User Consent: The user consent option allows the store admin to display the checkboxes on the Signup and Contact form.Please refer to the attached screenshot:Title: This is for the internal use. The title of the consent box will appear in the back-office details.Content: The text entered here will be displayed to the user at the front-end.Form Type: Admin can select the Registration Form or the Contact form to display the additional information.Consent URL: Admin can add the link to the Privacy Page or Terms and Conditions page.Required: Admin has the choice to make the field a mandatory filed.After enabling the checkboxes on the registration form the store admin can record the customer permission. To check the customer permission customer need to go to the Customers section. Here at the bottom of the page Under the GDPR Consent – the permission of the customer will be listed. Please refer to the attached screenshot (as per the title entered by the store admin the user consent will be recorded)Tips for updating the Module URL:In order to generate the SEO friendly URL for any third party module page. Please follow the below steps:
Navigate to the Preferences >> SEO & URLs
Click on the Add New Page.
Select the “Modules Page” from the Drop-down (in case of Knowband GDPR Module select the kbgdpr – gdpr)
Now enter all the required details and save the changes.
5) Here is your updated URL of the page.5 must have Prestashop Extensions to increase the Average Order Value.
Making a sense of urgency by displaying the count-down time to avail the offer is one of the popular trick used by the online businesses. This encourages the customer to place their orders to get the advantage of the offer. The flash sale timer addon is the best way to achieve the same. By using this module admin can display the countdown timer on the selected product or category. Click here to get this addon.
As per the business requirement sometimes COD option is required on the website. To achieve this goal the store admin can use the Cash on Delivery Addon with Fee. By using this addon store admin can offer COD payment option to the customer and add a minimal fee for the service. Click here to get this addon.
Admin can offer the free products over a fixed order value. Offering freebie helps to encourage the customer to shop more and increase the cart total. Gift the product addon helps the store admin to set a minimum cart value over which the customer will be able to select the free gift. Click here to get this addon.
Cross-selling and Upselling are the important factors to increase the averageorder value. By showing the similar products at a higher price or related products you can encourage the customer to buy more. The automatic related products addon allows the store admin to display the related products based on the multiple criteria like manufacturer, color etc. Click here to get this addon.
The Free shipping option puts a psychological effect in the customer’s mind. eCommerce store can offer the free shipping over a fixed cart value. In order to get the free shipping customer will buy more products and it will help you to increase the revenue. Click here to get this addon.
As suggested by the Prestashop team regarding the adaption of the new hooks to make the Prestashop Modules compliant with the official GDPR module, we are happy to announce the release of our first module with the hooks introduced by the Prestashop team. (Click here to know the details regarding the Prestashop hook to make a Prestashop addon compliant with the official Prestashop GDPR module).
The Spin and Win pop-up addon, that can be used as a welcome or Exit intent pop-up is now in compliance with the GDPR. The GDPR compliant version of the Spin and Win Popup module will be released on Monday, May 21st, 2018.
The Spin and Win Pop-up module is an interactive, gamified pop-up that allows the Prestashop store admin to display a unique wheel with the various discount options at the store front-end. Admin has so many options to customize the look and feel of the pop-up. Customers also like this welcome pop-up as by just spinning a wheel they get awesome discounts to make their purchase. In order to spin the wheel, it is required to enter the email id, as per the settings enabled by the store admin the coupon code will be displayed to the customer. Admin has the choice to send the coupon code via email. As this pop-up module captures the personal details of the visitor so we have made the required changes in the module to make it compliant with GDPR. Please refer to the attached screenshots:
Here, are the details of the Spin and Win module with the new changes.
GDPR Settings Tab: In the configure section of the Prestashop Spin and Win module a new tab GDPR has been added. The EU merchants can enable the GDPR settings from this tab. Please refer to the attached screenshot in which we have highlighted the GDPR Settings tab.
2) GDPR Settings: The GDPR settings tab has the option to enable or disable the GDPR options. There are following options in the GDPR settings tab for the merchants to make the popup module compliant with the GDPR.
a)Enable GDPR: Enable GDPR option allows the store admin to enable/disable the GDPR settings. By default, the GDPR settings will remain disabled and as per the business need, store admin needs to enable it.
b) Compatibility with Prestashop GDPR: Admin has the option to enable/disable this feature. If you are using the official GDPR module then you must need to enable this setting. The main purpose of this feature is export and deletes user data on PrestaShop GDPR module request. It is also compatible with Prestashop GDPR Module developed by Knowband. Click here to check the details.
Note: Benefits of using Prestashop GDPR Module by Knowband:
Free 3 months support
Advance features
Automated process
c) Delete user data from MailChimp/Klaviyo/SendinBlue on delete request: As the Spin and Win pop-up addon syncs the captured email ids to the MailChimp/Klaviyo/SendinBlue email service providers (third-party service providers, so if this setting is enabled and you use the services of any one of these email service provider then on the data deletion request the subscriber details will get deleted automatically.
d) Privacy Text: The module will add a checkbox to the pop-up design with the privacy text; this text will be visible to the front-end user at the time of entering email id in the email box.
e) Page URL to Link the Text: Admin can add the link to “Privacy Policy” or any other page with this message.
f) Enable Advanced Feature: This option allows the store admin to add more checkboxes to the pop-up design for marketing permission or any other permission like age verification (age should be 16+). (For Age verification module – click here).
If the Advance Feature setting is enabled then admin will be able to access the additional checkbox setting option. As per requirement, admin can add multiple checkboxes.
i) Service Settings: All the additional checkboxes which have been added by the admin will be listed under the Service Settings. Admin can add the multiple checkboxes with ease.
How to add a new checkbox:
Click on the (+) sign to add a new checkbox.
Note: By default one service will be listed on the service list and admin can update the text for the service.
2. On clicking the + sign will open a pop-up and admin need to enter the details like – Service Label, Make service mandatory and Enable Service.
Service Label: This is a text input field. The text entered here will be visible to the front-end user.
Make Service Mandatory: This is a toggle button. If this is set to Yes, then this field will be marked as Mandatory and without confirming the checkbox visitors will not be able to get the offer.
Enable Service: Admin has the choice the Enable/Disable a service at any time.
Cookie Details:
As the Spin and Win module uses the Cookies so the description and the use of these cookies have been listed in the section so that admin can put these details on the Cookie Policy or Privacy Policy page.
Record of consent:
As soon as the user opt-in for the promotion and spin and the wheel to get the discount coupon code. The Spin and Win Pop-up module keep the proof of the opt-in, as it is required for the lawful processing of the captured data. As the unique coupon code is generated each time so the Statistics tab of the Spin and Win GDPR Compliant Module also record the permissions of the users. Please refer to the attached screenshot.
On clicking the view button admin can check the permission of the user.
The GDPR compliant version of the Spin and Win module will be available on our store from Monday, May 21st, 2018. After enabling the GDPR Settings the Spin and Win pop-up design will look like –
Knowband has developed more than 70+ Prestashop Modules which are also available on the Addons store. Please click here to browse the Prestashop Addon store.
5 Must have Prestashop addons to improve the conversion rate.
One page checkout: One-page checkout addon reduces the additional efforts to complete the order and offers the better customer experience at the checkout page. Customers also like the one step checkout process because it offers so many options like edit/ deletes the products, update product quantity, use the coupon code, social login option (Google and Facebook) etc to the customers. Get the One Click Checkout module for your store.
Abandoned Cart Module: The abandoned cart module helps the admin to keep the track of the cart abandonment. Admin can send the reminder emails to the customers to encourage them to complete the order. Get the Prestashop Abandoned Cart Module for your store.
Return Manager Module: Customer engagement and better customer service is the key to success in eCommerce. To offer the better return management services the best solution is the Prestashop RMA extension. The Return Manager addon by Knowband allows the store admin to offer the return/refund or store credit refund options to the customers. The Return Manager addon automates the refund process and also makes it easy to handle the return requests. Get the Prestashop Return Manager Addon for your store.
Advance Wishlist Addon: Wishlist addon allows the customers to save the products of their choice to a list so that they can complete their purchase later. The Prestashop wishlist module also helps the store admin to analyze the most popular products of the store. Get the Prestashop Advance Wishlist Module for your store.
Free Shiping Manager Addon: The Free shipping option puts a psychological effect in the customer’s mind. eCommerce store can offer the free shipping over a fixed cart value. In order to get the free shipping customer will buy more products and it will help you to increase the revenue. Get the Prestashop Free Shipping Module for your store.
The General Data Protection Regulation (GDPR) is a replacement for the European Union Data Protection Directive which will be enforced on May 25, 2018. The new directives have been passed, as per the new technologies and business advances; a new approach to protection of the personal data has been introduced.
GDPR provides more control to the customers to control their personal data. Customers have the right to request for the deletion of the data. It is mandatory for the store admin to honor the customer request within 30 days. The Prestashop GDPR addon – Data deletion and data anonymization allows the store admin to provide an interface to the customer so that they can request for the deletion of the data under the GDPR directives.
The customer-end interface of the Prestashop GDPR Module –
As per the requirement, the admin has the choice to enable/disable any of these rights.
Installation of Prestashop GDPR Module
After placing your order for the Prestashop GDPR module you can download the zip file of the module. This zip file contains:
1) GDPR.zip (source code of the module)
2) User Manual
In order to install the extension in your Prestashop store follow the below-mentioned steps:
1) Unzip the gdpr.zip file.
2) Copy the entire content, that is, the files and folders of the unzipped folder. Paste the same into the “Modules” folder of your store’s directory. Follow the below-mentioned address path – Root Directory/modules/.
3) The Prestashop GDPR plugin is all set to be installed in the store. Go to the Store Admin and then to ‘Modules and Services’.
4) Click on the “Install” button just next to your module. It would show a pop-up for your confirmation. Click on “Proceed with the installation” option. This step will install the module and show notification – “Module(s) installed successfully”.
5) Once the installation is complete, you will get the access to the admin interface of the module by clicking on the “Configure” button.
Admin Interface of Prestashop GDPR Addon
In the admin section of the Prestashop GDPR Customer rights module following options are available:
1) GDPR Settings
2) GDPR Forgot Request
3) GDPR Anonymous Request
4) GDPR Email Templates
GDPR Settings
The GDPR Settings tab of the Prestashop GDPR Addon allows the store admin to enable the rights of the customer. The Settings tab of the Prestashop GDPR module has the following options:
1) Enable the Plugin:
As per the requirement, admin can Enable/Disable the data deletion and data anonymization option for the customer.
2) Maximum request per day:
The customer can request for the deletion of the data, the admin can set the limit for the requests by each user on daily basis. It will be recommended to set the maximum requests per day to a minimum number to avoid the spam requests.
3) Data anonymization request:
If the setting for the Right to be Anonymous is enabled from the admin panel of the Prestashop GDPR addon – data deletion and data anonymization, then the customer will be able to make a request for data anonymization. As soon as the customer will request for the data anonymization a confirmation email will be sent to the customer. As per the customer’s confirmation, customer details will be anonymized. Admin has the choice to anonymize the personal details of the customer like Name and email-id. The admin has the option to override the changes to the previous orders.
Enable the Data anonymization settings:
If the data anonymization settings are enabled from the admin interface of the Prestashop GDPR module then the customer will be able to request for the data anonymization and in this case, only customer name will be replaced by the random name.
If a customer request for the Data anonymization, then a confirmation email will be sent to the registered email address and the customer will be requested to confirm the request.
Email confirmation:
After requesting for the data anonymization customer will receive an email with a request to confirm the data anonymization request.
Note:
In case you are using the third-party services and sharing the customer data with third-party, then you need to make the required changes as per the procedure followed by the service provider. This GDPR module will anonymize the data which you have stored in your database only. The data anonymization process is just like the data deletion request.
4) Enable to update information in Order:
If a customer requests to make his/her information anonymous then admin can select the option to enable/disable the changes to the previous orders. If this setting is enabled from the admin interface of the Prestashop GDPR addon then the previous order details will be overridden.
5) Enable to generate Fake Email ID:
Admin has the choice to enable the settings to replace the customer’s email id by the system generated email-id. If the customer would like to anonymize his/her email id then they can submit the request for email id anonymization.
If the customer submits the request to anonymize the email id also. Then the customer email id will be replaced by a system generated an email.
The customer can save the system generated email id to access his/her account.
6) Enable right to be Forgotten:
The new GDPR Directives allow the customer to erase their personal data. By using the Prestashop GDPR Addon module by Knowband, the admin can provide an interface to the customers to raise requests for the data deletion.
The data deletion report request interface for the customer will be as below:
After requesting for the Account deletion the customer will be notified that an email with the confirmation request has been sent to the registered email id.
Note:
1) It is recommended to consult with your legal team before enabling this setting. After deleting the customer’s personal data it cannot be retrieved. Admin has the option to enable the delete order setting which has been explained in the next topic.
2) In case you are sharing the customer data with third-party service providers then you need to delete the customer data manually. As of now, this module does not support the feature to delete the data shared with the third-party service providers.
Example: If you are using MailChimp for sending promotional emails then you have to delete the customer details from MailChimp list manually.
9) Enable to Delete Orders:
If a customer has requested for the data deletion request under the GDPR, then the admin has the choice to delete the personal data of the customer along with the previous order details. If this setting is not enabled from the admin interface of the GDPR module then only personal data will be deleted and order information will remain as it is.
Note:
It is recommended to consult with your legal team before enabling the order deletion settings. The order details deleted from the system cannot be retrieved.
8) Enable Store Policy Acceptance:
If a customer would like to raise a request under GDPR rights then admin can add the condition to accept the Privacy Policy link before requesting for the Account Deletion or Data Anonymization. The admin interface of the Prestashop General data Protection Regulation addon allows the store admin to enable the setting so that for each request customer need to accept the terms and policy.
9) Store Policy Page:
Admin can add the URL of the page on which all the Terms and Conditions are listed. The customer can check the Terms and Conditions by clicking the link available with the message at the time of raising the request.
10) Display Header Menu
Display Header Menu option of the Prestashop GDPR compliance addon allows the store admin to display the GDPR option in the header section of the website. By enabling “Display Header Menu” setting of the Prestashop GDPR addon, store admin can allow the guest users to access the GDPR rights.
11) Header Menu Text
Admin can define the text for the Header Menu.
GDPR Forgot Request
The Prestashop GDPR Addon keeps the log of all the data deletion requests. This log is helpful for the admin to verify that the customer details have been deleted or not. Admin can also use this log to remove the customer data from the third-party service providers.
Note:
As soon as a customer request for the deletion of his/her details a confirmation email will be sent to the customer. As per the customer’s confirmation, the details of the customer will be deleted from the system.
The Prestashop GDPR Module allows the admin to exclude the previous orders so that only the personal details of the customer will be deleted but order details will be saved for the future reference. Please use this setting carefully because the data deleted once cannot be retrieved. It is strongly recommended to consult with your legal team to make sure how to use this setting.
The Prestashop GDPR Module only deletes the customer data from the store database. If you share the customer data with the third-party service providers (eg. MailChimp) or store it on the third-party platform (eg. Google Drive) then you need to delete the customer data from these platforms manually.
GDPR Anonymous Request
The Prestashop GDPR Addon keeps the log of the Data Anonymization requests. Admin can use this log to verify the status of the data anonymization requests.
GDPR Email Templates
The Prestashop GDPR Addon by Knowband allows the admin to send following emails to the customer on raising a request under the GDPR.
Confirm Your GDPR Account Deletion Request
Confirm Your GDPR Personal Data Anonymous Request
Customer has confirmed GDPR Request
Confirm Your GDPR Account Deletion Request
Admin can update the Subject line and the email text by using the GDPR Email Template Settings.
The default format of the email template is as below:
Confirm Your GDPR Personal Data Anonymous Request
Admin can update the Subject line and the email text by using the GDPR Email Template Settings.
the default format of the email template is as below:
Customer has confirmed GDPR Request
Note: The purpose of these features is to help you to meet with the GDPR requirements. Installing this module only does not guarantee merchant sites’ compliance with the new obligations imposed by the GDPR. It is your responsibility to put in place all the necessary measures to ensure you comply.
Il regolamento generale sulla protezione dei dati (GDPR) sostituisce la direttiva sulla protezione dei dati dell'Unione europea che verrà applicata a maggio 25, 2018. Le nuove direttive sono state approvate in base alle nuove tecnologie e ai progressi delle imprese; è stato introdotto un nuovo approccio alla protezione dei dati personali. GDPR offre maggiore controllo ai clienti per il controllo dei loro dati personali. I clienti hanno il diritto di richiedere la cancellazione dei dati. È obbligatorio che l'amministratore del negozio rispetti la richiesta del cliente entro 30 giorni. L'addon GDPR di Prestashop Addon Prestashop GDPR – Diritti degli individui, questo modulo consente di gestire i diritti del cliente con facilità. Clicca qui per i dettagli. L'interfaccia customer-end del modulo GPRPR Prestashop –
Secondo il requisito, l'amministratore ha la possibilità di abilitare / disabilitare qualsiasi di questi diritti.
Installazione del modulo GPRPR Prestashop
Dopo aver effettuato l'ordine per il modulo Prestashop GDPR è possibile scaricare il file zip del modulo. Questo file zip contiene: 1) GDPR.zip (codice sorgente del modulo) 2) Manuale dell'utente Per installare l'estensione nel tuo negozio Prestashop, segui i passaggi riportati sotto: 1) Decomprimi il file gdpr.zip. 2) Copia l'intero contenuto, ovvero i file e le cartelle della cartella decompressa. Incolla lo stesso nella cartella "Modules" della directory del tuo negozio. Segui il percorso di indirizzo sotto indicato
Interfaccia di amministrazione di Addash GDPR Prestashop
Nella sezione di amministrazione del modulo diritti cliente Prestashop GDPR sono disponibili le seguenti opzioni: 1) Impostazioni GDPR 2) GDPR Richiesta dimenticata 3) GDPR Richiesta anonima 4) GDPR Modelli e-mail
Impostazioni GDPR
La scheda Impostazioni GDPR del componente aggiuntivo GDPR Prestashop consente all'amministratore del negozio di abilitare i diritti del cliente. La scheda Impostazioni del modulo GPRPR Prestashop ha le seguenti opzioni: 1) Abilita il plugin:
Come da requisiti, l'amministratore può abilitare / disabilitare l'eliminazione dei dati e l'opzione di anonimizzazione dei dati per il cliente.
2) Richiesta massima al giorno:
Il cliente può richiedere la cancellazione dei dati, l'amministratore può impostare il limite per le richieste da parte di ciascun utente su base giornaliera. Si consiglia di impostare le richieste massime giornaliere su un numero minimo per evitare le richieste di spam.
3) Richiesta di anonimizzazione dei dati:
Se l'impostazione per il diritto di essere anonimi è abilitata dal pannello di amministrazione del componente GPRPR Prestashop
Abilita le impostazioni di anonimizzazione dei dati:
Se le impostazioni di anonimizzazione dei dati sono abilitate dall'interfaccia di amministrazione del modulo GDPR Prestashop, il cliente sarà in grado di richiedere l'anonimizzazione dei dati e in questo caso, solo il nome cliente verrà sostituito dal nome casuale.
Se una richiesta del cliente per i datitrasformazione in forma anonima, quindi verrà inviata un'email di conferma all'indirizzo e-mail registrato e al cliente verrà richiesto di confermare la richiesta.
Conferma via email:
Dopo aver richiesto l'anonimizzazione dei dati, il cliente riceverà un'e-mail con una richiesta di conferma della richiesta di anonimizzazione dei dati.
Nota:
Se si utilizzano i servizi di terzi e si condividono i dati dei clienti con terze parti, è necessario apportare le modifiche richieste secondo la procedura seguita dal fornitore di servizi. Questo modulo GDPR renderà anonimi i dati memorizzati solo nel database. Il processo di anonimizzazione dei dati è simile alla richiesta di cancellazione dei dati.
4) Abilitare per aggiornare le informazioni nell'ordine:
Se un cliente richiede di rendere anonime le proprie informazioni, l'amministratore può selezionare l'opzione per abilitare / disabilitare le modifiche agli ordini precedenti. Se questa impostazione è abilitata dall'interfaccia di amministrazione del componente GPRPR Prestashop, i dettagli dell'ordine precedente verranno sovrascritti.
5) Abilita la generazione dell'ID e-mail falso:
L'amministratore ha la possibilità di abilitare le impostazioni per sostituire l'ID e-mail del cliente tramite l'id-email generato dal sistema. Se il cliente desidera rendere anonimo il proprio ID e-mail, può inviare la richiesta di anonimizzazione dell'ID e-mail.
Se il cliente inoltra la richiesta di anonimato anche l'id dell'email. Quindi l'ID e-mail del cliente verrà sostituito da un sistema che ha generato un'e-mail.
Il cliente può salvare l'ID e-mail generato dal sistema per accedere al proprio account.
6) Abilita il diritto ad essere dimenticato:
Le nuove direttive GDPR consentono al cliente di cancellare i propri dati personali. Utilizzando il modulo Addon Prestashop GDPR di Knowband, l'amministratore può fornire un'interfaccia ai clienti per sollevare richieste per la cancellazione dei dati.
L'interfaccia di richiesta del report di cancellazione dei dati per il cliente sarà la seguente:
Dopo aver richiesto l'eliminazione dell'account, al cliente verrà notificato che un'email con la richiesta di conferma è stata inviata all'ID e-mail registrato.
Nota:
1) Si consiglia di consultare il proprio team legale prima di abilitare questa impostazione. Dopo aver cancellato i dati personali del cliente, non può essere recuperato. L'amministratore ha la possibilità di abilitare l'impostazione dell'ordine di cancellazione che è stata spiegata nell'argomento successivo. 2) Nel caso in cui si condividano i dati del cliente con fornitori di servizi di terzi, è necessario eliminare manualmente i dati del cliente. A partire da ora, questo modulo non supporta la funzionalità per eliminare i dati condivisi con i fornitori di servizi di terze parti. Esempio: se si utilizza MailChimp per l'invio di e-mail promozionali, è necessario eliminare manualmente i dettagli del cliente dall'elenco MailChimp.
9) Abilita per eliminare gli ordini:
Se un cliente ha richiesto la richiesta di cancellazione dei dati in base al GDPR, l'amministratore ha la possibilità di eliminare i dati personali del cliente insieme ai precedenti dettagli dell'ordine. Se questa impostazione non è abilitata dall'interfaccia di amministrazione del modulo GDPR, solo i dati personali verranno eliminati e le informazioni sugli ordini rimarranno invariate.
Nota:
Si consiglia di consultare il proprio team legale prima di abilitare le impostazioni di cancellazione degli ordini. I dettagli dell'ordine cancellati dal sistema non possono essere recuperati.
8) Abilita accettazione criteri negozio:
Se un cliente desidera richiedere una richiesta ai sensi dei diritti GDPR, l'amministratore può aggiungere la condizione per accettare il collegamento Informativa sulla privacy prima di richiedere la cancellazione dell'account o l'anonimizzazione dei dati. L'interfaccia di amministrazione del componente aggiuntivo Prestashop di protezione dei dati generali consente all'amministratore del negozio di abilitare l'impostazione in modo che per ogni richiesta il cliente debba accettare i termini e la politica.
9) Pagina politica negozio:
L'amministratore può aggiungere l'URL della pagina in cui sono elencati tutti i Termini e condizioni. Il cliente può verificare i Termini e condizioni facendo clic sul collegamento disponibile con il messaggio al momento della richiesta.
10) Visualizza il menu di intestazione
L'opzione Display Header Menu del componente aggiuntivo Prestashop GDPR consente all'amministratore del negozio di visualizzare l'opzione GDPR nella sezione dell'intestazione del sito web. Abilitando l'opzione "Display Header Menu" del componente GPRPR Prestashop, l'amministratore del negozio può consentire agli utenti guest di accedere ai diritti GDPR.
11) Testo del menu testata
L'amministratore può definire il testo per il menu intestazione.
GDPR ha dimenticato la richiesta
L'Addon GDPR Prestashop mantiene il registro di tutte le richieste di cancellazione dei dati. Questo registro è utile per l'amministratore per verificare che i dettagli del cliente siano stati eliminati o meno. L'amministratore può anche utilizzare questo registro per rimuovere i dati dei clienti dai fornitori di servizi di terze parti.
Nota:
Non appena un cliente richiede la cancellazione dei suoi dettagli, verrà inviata un'email di conferma al cliente. Come da conferma del cliente, i dettagli del cliente verranno cancellati dal sistema. Il modulo GDPR Prestashop consente all'amministratore di escludere gli ordini precedenti in modo che vengano cancellati solo i dettagli personali del cliente, ma i dettagli dell'ordine verranno salvati per il futuro riferimento. Si prega di utilizzare questa impostazione attentamente perché i dati cancellati una volta non possono essere recuperati. Si consiglia vivamente di consultare il proprio team legale per accertarsi di come utilizzare questa impostazione. Il modulo GDPR Prestashop elimina solo i dati del cliente dal database del negozio. Se condividi i dati dei clienti con i fornitori di servizi di terze parti (ad esempio MailChimp) o li memorizzi sulla piattaforma di terze parti (ad esempio Google Drive), devi eliminare manualmente i dati dei clienti da queste piattaforme.
Richiesta anonima GDPR
L'Addon GDPR Prestashop mantiene il registro delle richieste di anonimizzazione dei dati. L'amministratore può utilizzare questo registro per verificare lo stato delle richieste di anonimato dei dati.
Modelli email GDPR
L'Addon Prestashop GDPR di Knowband consente all'amministratore di inviare le seguenti e-mail al cliente al momento di sollevare una richiesta ai sensi del GDPR.
Conferma la richiesta di cancellazione del tuo account GDPR
Conferma la tua richiesta anonima di dati personali GDPR
Il cliente ha confermato la richiesta GDPR
Conferma la richiesta di cancellazione del tuo account GDPR
L'amministratore può aggiornare la riga dell'oggetto e il testo dell'email utilizzando le impostazioni del modello di email GDPR.
Il formato predefinito del modello di email è il seguente:
Conferma la tua richiesta anonima di dati personali GDPR
L'amministratore può aggiornare la riga dell'oggetto e il testo dell'email utilizzando le impostazioni del modello di email GDPR.
il formato predefinito del modello di email è il seguente:
Il cliente ha confermato la richiesta GDPR
Nota: lo scopo di queste funzionalità è di aiutarvi a soddisfare i requisiti GDPR. L'installazione di questo modulo non garantisce la conformità dei siti commerciali ai nuovi obblighi imposti dal GDPR. È responsabilità dell'utente mettere in atto tutte le misure necessarie per garantire la conformità.
The General Data Protection Regulation (GDPR) is a replacement for the European Union Data Protection Directive which will be enforced on May 25, 2018. The new directives have been passed, as per the new technologies and business advances; a new approach to protection of the personal data has been introduced.
The Prestashop GDPR Module – Right to access and data portability helps the store admin to manage the data access and data portability requests of the customers. By using the Prestashop GDPR Module by Knowband admin can provide an interface to the customers so that they can request for their personal information and if the required customer can also download the data as a CSV file.
To enable the GDPR Rights for the customers, download the zip file of the module from the Downloads section of your Knowband account.
1) GDPR.zip (source code of the module)
2) User Manual
In order to install the extension in your Prestashop store follow the below-mentioned steps:
1) Unzip the gdpr.zip file.
2) Copy the entire content, that is, the files and folders of the unzipped folder. Paste the same into the “Modules” folder of your store’s directory. Follow the below-mentioned address path – Root Directory/modules/.
3) The Prestashop GDPR plugin is all set to be installed in the store. Go to the Store Admin and then to ‘Modules and Services’.
4) Click on the “Install” button just next to your module. It would show a pop-up for your confirmation. Click on “Proceed with the installation” option. This step will install the module and show notification – “Module(s) installed successfully”.
5) Once the installation is complete, you will get the access to the admin interface of the module by clicking on the “Configure” button.
1.2.0 Front-end interface of the Prestashop GDPR Module:
Customers will be able to access the GDPR rights by navigating to the My account section. Here, a separate tab GDPR will be visible to the customers. By using the GDPR tab customers can access their GDPR rights – Right to access and Right to data portability.
On clicking the GDPR tab the customer will be redirected to the GDPR tools page, from here customer can request for their personal data and also download their personal details like personal information, addresses and orders.
The Prestashop GDPR Module – Right of access and data portability, allows the store admin to enable the GDPR settings for the guest users so that guest users can also request for the details of their personal data. If the GDPR rights are enabled for the guest user then it will appear in the header section. Please refer to the attached screenshot.
1.3.0 Admin Interface of Prestashop GDPR Addon – Right to access and data portability:
The admin section of the Prestashop GDPR addon has the following options:
1) GDPR Settings
2) GDPR Data Portability
3) GDPR Personal Data Request
4) GDPR Email Templates
1.3.1 GDPR Settings:
The GDPR Settings tab of the Prestashop GDPR Addon – Rights to access and data portability has the following options. Please refer to the attached screenshot below:
a)Enable the Plugin:
Admin can enable the customer rights by using the Enable the plugin toggle button.
b) Maximum request per day:
Admin has the options to set the max limit for the Personal data request.
c) Enable Right of access to personal data:
The right of access to personal data allows the customers to request for the personal data. Admin has the option to display the report immediately or admin can enable the setting to send the GDPR Personal data report over email.
d) Send Personal report via email:
If this setting is enabled then the Personal data report will be sent via the email. Steps for the request for the personal data are listed below:
Step-1:
Request for the GDPR Personal Data report – Prestashop GDPR Addon
Step: 2
Confirm the GDPR Request.
Step: 3
As soon as the customer will confirm the GDPR Personal Data Request, an email with the customer details will be sent to the customer.
If the Send Personal Report via Email setting is disabled then the personal data report will be displayed immediately. Please refer to the attached screenshot.
e) Enable Right to Data Portability:
Right to data portability allows the customers to download their personal information which they have provided to the data controller.
The Prestashop GDPR addon – Right to access and data portability allows the store admin to provide an interface to the customers so that they can easily download their data like personal details, addresses and orders.
In case the customer is logged in then he/she can directly download the report. For the guest users, it is mandatory to verify the data download request only after successful verification the guest user will be able to download the data.
Personal Information Report example:
f) Enable Store Policy Acceptance:
If a customer would like to raise a request under GDPR rights then admin can add the condition to accept the Terms and Conditions before requesting for the GDPR request for the Personal Data. The admin interface of the Prestashop GDPR addon allows the store admin to enable the setting so that for each request customer need to accept the terms and policy.
g) Store Policy Page:
Admin can add the URL of the page on which all the Terms and Conditions are listed.
h) Services/ Other locations where you store customer data:
Admin can list all the third-party service providers’ details to share the details with the customer.
i) Physical locations of servers where you host your website and other data:
Admin can define the physical server location of the server where the data has been stored.
j) Display Header Menu:
If the admin would like to enable the GDPR rights for the guest users then admin can enable the Display Header Menu setting. Admin has the choice to update the text for the GDPR rights, this text will be visible in the header section of the website and customers can access their rights by using this interface.
k) Header Menu Text:
Admin can define the text for the Header Menu.
1.3.2 GDPR Data Portability
The Prestashop GDPR Module – Right to access and data portability, keeps the log of all the GDPR data portability requests processed.
1.3.3 GDPR Personal Data Report Request
The Prestashop GDPR Addon – Right to access and data portability, keeps a log of all the personal data requests processed.
1.3.4 GDPR Email Templates
The Prestashop GDPR Addon by Knowband allows the admin to send following emails to the customer on raising a request under the GDPR.
Customer has requested for GDPR
Your GDPR Personal Data Report
Confirm Your GDPR Personal Data Portability Request
Customer has confirmed GDPR Request
Note: The purpose of these features is to help you to meet the GDPR requirements. Installing this module only does not guarantee merchant sites’ compliance with the new obligations imposed by the GDPR. It is your responsibility to put in place all the necessary measures to ensure you comply.
Il regolamento generale sulla protezione dei dati (GDPR) sostituisce la direttiva sulla protezione dei dati dell'Unione europea che verrà applicata a maggio 25, 2018. Le nuove direttive sono state approvate in base alle nuove tecnologie e ai progressi delle imprese; è stato introdotto un nuovo approccio alla protezione dei dati personali. Il modulo GPRPR Prestashop Prestashop GDPR Module che aiuta l'amministratore del negozio a fornire più diritti ai clienti come indicato nelle direttive GDPR. per favore clicca qui per controllare i dettagli.
Installazione 1.1.0 del modulo GPRPR Prestashop:
Per abilitare i diritti GDPR per i clienti, scaricare il file zip del modulo dalla sezione Download del proprio account Knowband. 1) GDPR.zip (codice sorgente del modulo) 2) Manuale dell'utente Per installare l'estensione nel tuo negozio Prestashop, segui i passaggi indicati sotto: 1) Decomprimi il file gdpr.zip. 2) Copia l'intero contenuto, ovvero i file e le cartelle della cartella decompressa. Incolla lo stesso nella cartella "Modules" della directory del tuo negozio. Segui il percorso di indirizzo sotto indicato
1.2.0
I clienti saranno in grado di accedere ai diritti GDPR navigando alla sezione Il mio account. Qui, una scheda separata GDPR sarà visibile ai clienti. Utilizzando la scheda GDPR i clienti possono accedere ai loro diritti GDPR
Facendo clic sulla scheda GDPR il cliente verrà reindirizzato alla pagina degli strumenti GDPR, da qui il cliente può richiedere i propri dati personali e anche scaricare i propri dati personali come informazioni personali, indirizzi e ordini.
Il modulo GPRPR Prestashop
1.3.0Interfaccia di amministrazione di Addash GDPR Prestashop
La sezione di amministrazione del componente aggiuntivo Prestashop GDPR ha le seguenti opzioni: 1) Impostazioni GDPR 2) Portabilità dati GDPR 3) Richiesta dati personali GDPR 4) Modelli email GDPR
1.3.1Impostazioni GDPR:
La scheda Impostazioni GDPR del componente aggiuntivo Prestashop GDPR
a)?Abilita il plugin:
L'amministratore può abilitare i diritti del cliente utilizzando il pulsante di attivazione Abilita il plugin.
b)?Maximum request per day:
L'amministratore ha le opzioni per impostare il limite massimo per la richiesta di dati personali.
c)?Enable Right of access to personal data:
Il diritto di accesso ai dati personali consente ai clienti di richiedere i dati personali. L'amministratore ha la possibilità di visualizzare immediatamente il rapporto o l'amministratore può abilitare l'impostazione per inviare il rapporto dati GDPR sui dati personali via e-mail.
d)?Send Personal report via email:
Se questa impostazione è abilitata, il rapporto sui dati personali verrà inviato tramite l'e-mail. I passaggi per la richiesta dei dati personali sono elencati di seguito:
Step-1:
Richiesta del rapporto Dati personali GDPR
Passaggio: 2
Conferma la richiesta GDPR.
Passaggio: 3
Non appena il cliente confermerà la richiesta di dati personali GDPR, verrà inviata al cliente un'e-mail con i dettagli del cliente.
Se l'opzione Invia rapporto personale via e-mail è disabilitata, il rapporto dei dati personali verrà visualizzato immediatamente. Si prega di fare riferimento allo screenshot allegato.
e)?Enable Right to Data Portability:
Il diritto alla portabilità dei dati consente ai clienti di scaricare le informazioni personali che hanno fornito al titolare del trattamento. L'addon GDPR di Prestashop
Esempio di rapporto di informazioni personali:
f) Abilita accettazione politica negozio:
Se un cliente desidera richiedere una richiesta ai sensi dei diritti GDPR, l'amministratore può aggiungere la condizione per accettare i Termini e condizioni prima di richiedere la richiesta GDPR per i Dati personali. L'interfaccia di amministrazione del componente aggiuntivo Prestashop GDPR consente all'amministratore del negozio di abilitare l'impostazione in modo che per ogni richiesta il cliente debba accettare i termini e la politica.
g) Pagina politica del negozio:
L'amministratore può aggiungere l'URL della pagina in cui sono elencati tutti i Termini e condizioni.
h) Servizi / Altre posizioni in cui si memorizzano i dati dei clienti:
L'amministratore può elencare tutti i dettagli dei fornitori di servizi di terze parti per condividere i dettagli con il cliente.
i) Posizioni fisiche dei server in cui si ospita il sito Web e altri dati:
L'amministratore può definire la posizione fisica del server del server in cui sono stati memorizzati i dati.
j) Visualizza menu intestazione:
Se l'amministratore desidera abilitare i diritti GDPR per gli utenti guest, l'amministratore può abilitare l'impostazione Menu Display Header. L'amministratore ha la possibilità di aggiornare il testo per i diritti GDPR, questo testo sarà visibile nella sezione intestazione del sito Web e i clienti potranno accedere ai loro diritti utilizzando questa interfaccia.
k) Testo del menu testata:
L'amministratore può definire il testo per il menu intestazione.
1.3.2Portabilità dei dati GDPR
Il modulo GPRPR Prestashop
1.3.3Richiesta report dati personali GDPR
L'Addon GDPR Prestashop
1.3.4 GDPR Email Templates
L'Addon Prestashop GDPR di Knowband consente all'amministratore di inviare le seguenti e-mail al cliente al momento di sollevare una richiesta ai sensi del GDPR.
Il cliente ha richiesto GDPR
Il tuo rapporto sui dati personali GDPR
Conferma la tua richiesta di portabilità dei dati personali GDPR
Il cliente ha confermato la richiesta GDPR
Nota: lo scopo di queste funzionalità è di aiutarvi a soddisfare i requisiti GDPR. L'installazione di questo modulo non garantisce la conformità dei siti commerciali ai nuovi obblighi imposti dal GDPR. È responsabilità dell'utente mettere in atto tutte le misure necessarie per garantire la conformità.
The General Data Protection Regulation is not a revolution but it represents a big change for retailers. ~ Giovanni Buttarelli
One of the best things about eCommerce is that it allows even a small enterprise to expand their reach beyond the borders. The recent boost in the industry has definitely brought the entire globe at the fingertip of the e-sellers. However, trading across the border comes with its own complexity. The General Data Protection Regulation of European Union is the latest concern of the industry.
It is mandatory for all the eCommerce that collects or processes the data of EU citizen to comply with the new law. Even if the company is not a part of the EU, but deals into the personal details of the EU citizens is required to adapt to the GDPR. Is the concept of GDPR bugging you? Then, let us start with the basics of the same.
What is GDPR?
GDPR is the new data privacy law of European Union. The law can impact the ways by which the companies collect the personal data of the customers and handle them. GDPR will come into force throughout the European Union on May 25, 2018. GDPR will replace existing data protection laws. The introduction of the regulation will bring about significant changes and will have a wide impact on the organizations worldwide that collects and uses customer’s data.
In case, any company fails to comply with the legislation, it will be fined 4% of turnover or 20 Million Euro, whichever amount is higher. In case of data breaches, the company should report it within 72 hours. Such company can demonstrate their security and data privacy procedures at a moment’s notice.
In short, GDPR gives more rights to the customers on their personal data. People will now get the right to access, correct, delete, and restrict the processing of their data.
What are rights offered to the customers under GDPR?
Listed below are some of the rights that the customers will get once this law comes into force.
The right of access to personal data – The customers can retrieve their personal details that the eCommerce store has by sending a request for the same.
Right to erasure – The customers get an option to have their data anonymized/deleted from the database of the eCommerce site.
Right to data portability – This right facilitates the customers to export their account data in a CSV format and get the same transferred to another data processor.
Email Opt-ins in Form – A lot of companies use a pre-checked ‘Policy acceptance’ box in order to gain the consent of the users. As the customer registers or checks out from the site with the pre-checked box, the site gets the permission use their personal details. The silent or soft opt-in will not be acceptable for GDPR consent after the commencement of the law. Your website forms should ask the customers to check the boxes and provide you the permission.
Right to restrict processing – This option allows the customers to restrict the site from using their personal detail anymore for any purpose.
Right to be Informed – The companies need to inform the customers what are planning to do with the data at the time of collecting their information. The details of ‘where that data will be processed’, ‘how long you plan to hold on to the data’ and ‘the details of their rights under the GDPR’ and other related details should be clearly written in simple language. In short (under Article 13), you need to specify the source and purpose of collecting the customer’s personal data.
Right of Data Rectification – (Under Article 16) The customers can request the rectification of their data if required. You need to know everywhere in the organization where the personal data of an individual is saved, so that, it can be updated if requested by the customer. You should stay of aware of the third-parties that are sharing the information. If the rectification request is initiated by the customer, then, you’ll have to inform the third-parties the rectify the same.
Right to Object – In case, the customer objectifies, the company should immediately stop the direct marketing. A person should not be marketed to is a non-trivial undertaking. Hence, it can be probably achieved by a centralized CRM or by creating a single master list of objectors that all systems can refer to.
Rights relating to automated decision-making and profiling – (Article 22) The processes that use profiling must also allow manual override.
GDPR makes it the responsibility of the site to protect the data of the customers. The organization has to make sure that the store visitors, as well as the customers, can exercise all the rights they have. In order to do this, the eCommerce sites are required to provide a dedicated GDPR account page to the customer. For the Prestashop eCommerce store owners, Knowband offers an easy means to incorporate such a page on their site.
How can Prestashop GDPR plugin help you?
Prestashop GDPR addon allows the store admin to add a webpage on their site that allows the customers to access all their rights. With the help of Prestashop GDPR extension, the customers can request a report of their personal report, ask the admin to rectify or delete the data or limit the access of the details for the site.
The features offered by Prestashop GDPR individual right plugin are mentioned-below:
Right to Access Data: The Prestashop GDPR extension optimizes the eCommerce site and offers a feature to the site’s customers to access the data saved. The customers can request the site to provide the details of their personal information that is saved in the database of the site.
Right to Data Portability: The customers can even request the site to take the data saved with your Prestashop site elsewhere.
Right to be Forgotten: With Prestashop GDPR module, the customers can request the site to delete their personal details from the database.
Right to Rectification: The Prestashop GDPR addon even allows the customers to update the data if necessary.
Right to Restrict Processing (Coming Soon): This feature allows them to restrict the processing of the data. If the customer denies, the site will not be allowed to process the personal data of the customer.
Having discussed the basics of GDPR and the ways Prestashop GDPR extension helps you, it is now time to discuss the impact it can have on the eCommerce industry.
Impact of GDPR on eCommerce industry
GDPR can turn out to be a real game-changer for the eCommerce industry. The online shopping sites collect a wide range of personal data.
Territory Scope
The GDPR applies to every company that processes personal data. Even if the organization that is established outside the European Union, but is indulged in any sort of trading with any individual in the EU, then, it will have to comply with the data protection law. Prestashop GDPR plugin allows you to incorporate you the basic features offered to the customers regardless of your location.
Legal Basis for processing the data
The eCommerce companies regardless of the place from where they operate will have to identify a legal ground for using the data. Valid consent of the customers is required before they process their personal details. As mentioned above, the pre-ticked opt-ins will no longer be acceptable. Hence, the store owners are required to change the UI accordingly.
Transparency in data collection and handling
Under the GDPR, the companies are required to keep the entire process transparent. The eCommerce companies are required to specify the source from where they have obtained the personal details of the customers. Information must be provided about the third-parties with whom the data is being shared. Not just this, the eCommerce companies will have to provide data privacy notices at the time the data are being obtained.
Customer Right
The General Data Protection Regulation empowers the customers of the online shopping sites to have a better control on their personal details. Under the new rule, the customers can ask for their details that the company has. The customers can even ask the site to delete the information or restrict them from using the same. The eCommerce companies have to adapt their site for all these rights. Prestashop GDPR module is one of the ways that can help these companies to stay in sync with the new rules.
Final Say
Prestashop GDPR is one of the ways for the Prestashop store owners to optimize their sites accordingly. It is high time that the companies to kick off their GDPR compliance that deals in the EU or are planning for the same.
