The General Data Protection Regulation (GDPR) is a replacement for the European Union Data Protection Directive which will be enforced on May 25, 2018. The new directives have been passed, as per the new technologies and business advances; a new approach to protection of the personal data has been introduced.
GDPR provides more control to the customers to control their personal data. Customers have the right to request for the deletion of the data. It is mandatory for the store admin to honor the customer request within 30 days. The Prestashop GDPR addon – Data deletion and data anonymization allows the store admin to provide an interface to the customer so that they can request for the deletion of the data under the GDPR directives.
The customer-end interface of the Prestashop GDPR Module –
As per the requirement, the admin has the choice to enable/disable any of these rights.
Installation of Prestashop GDPR Module
After placing your order for the Prestashop GDPR module you can download the zip file of the module. This zip file contains:
1) GDPR.zip (source code of the module)
2) User Manual
In order to install the extension in your Prestashop store follow the below-mentioned steps:
1) Unzip the gdpr.zip file.
2) Copy the entire content, that is, the files and folders of the unzipped folder. Paste the same into the “Modules” folder of your store’s directory. Follow the below-mentioned address path – Root Directory/modules/.
3) The Prestashop GDPR plugin is all set to be installed in the store. Go to the Store Admin and then to ‘Modules and Services’.
4) Click on the “Install” button just next to your module. It would show a pop-up for your confirmation. Click on “Proceed with the installation” option. This step will install the module and show notification – “Module(s) installed successfully”.
5) Once the installation is complete, you will get the access to the admin interface of the module by clicking on the “Configure” button.
Admin Interface of Prestashop GDPR Addon
In the admin section of the Prestashop GDPR Customer rights module following options are available:
1) GDPR Settings
2) GDPR Forgot Request
3) GDPR Anonymous Request
4) GDPR Email Templates
GDPR Settings
The GDPR Settings tab of the Prestashop GDPR Addon allows the store admin to enable the rights of the customer. The Settings tab of the Prestashop GDPR module has the following options:
1) Enable the Plugin:
As per the requirement, admin can Enable/Disable the data deletion and data anonymization option for the customer.
2) Maximum request per day:
The customer can request for the deletion of the data, the admin can set the limit for the requests by each user on daily basis. It will be recommended to set the maximum requests per day to a minimum number to avoid the spam requests.
3) Data anonymization request:
If the setting for the Right to be Anonymous is enabled from the admin panel of the Prestashop GDPR addon – data deletion and data anonymization, then the customer will be able to make a request for data anonymization. As soon as the customer will request for the data anonymization a confirmation email will be sent to the customer. As per the customer’s confirmation, customer details will be anonymized. Admin has the choice to anonymize the personal details of the customer like Name and email-id. The admin has the option to override the changes to the previous orders.
Enable the Data anonymization settings:
If the data anonymization settings are enabled from the admin interface of the Prestashop GDPR module then the customer will be able to request for the data anonymization and in this case, only customer name will be replaced by the random name.
If a customer request for the Data anonymization, then a confirmation email will be sent to the registered email address and the customer will be requested to confirm the request.
Email confirmation:
After requesting for the data anonymization customer will receive an email with a request to confirm the data anonymization request.
Note:
In case you are using the third-party services and sharing the customer data with third-party, then you need to make the required changes as per the procedure followed by the service provider. This GDPR module will anonymize the data which you have stored in your database only. The data anonymization process is just like the data deletion request.
4) Enable to update information in Order:
If a customer requests to make his/her information anonymous then admin can select the option to enable/disable the changes to the previous orders. If this setting is enabled from the admin interface of the Prestashop GDPR addon then the previous order details will be overridden.
5) Enable to generate Fake Email ID:
Admin has the choice to enable the settings to replace the customer’s email id by the system generated email-id. If the customer would like to anonymize his/her email id then they can submit the request for email id anonymization.
If the customer submits the request to anonymize the email id also. Then the customer email id will be replaced by a system generated an email.
The customer can save the system generated email id to access his/her account.
6) Enable right to be Forgotten:
The new GDPR Directives allow the customer to erase their personal data. By using the Prestashop GDPR Addon module by Knowband, the admin can provide an interface to the customers to raise requests for the data deletion.
The data deletion report request interface for the customer will be as below:
After requesting for the Account deletion the customer will be notified that an email with the confirmation request has been sent to the registered email id.
Note:
1) It is recommended to consult with your legal team before enabling this setting. After deleting the customer’s personal data it cannot be retrieved. Admin has the option to enable the delete order setting which has been explained in the next topic.
2) In case you are sharing the customer data with third-party service providers then you need to delete the customer data manually. As of now, this module does not support the feature to delete the data shared with the third-party service providers.
Example: If you are using MailChimp for sending promotional emails then you have to delete the customer details from MailChimp list manually.
9) Enable to Delete Orders:
If a customer has requested for the data deletion request under the GDPR, then the admin has the choice to delete the personal data of the customer along with the previous order details. If this setting is not enabled from the admin interface of the GDPR module then only personal data will be deleted and order information will remain as it is.
Note:
It is recommended to consult with your legal team before enabling the order deletion settings. The order details deleted from the system cannot be retrieved.
8) Enable Store Policy Acceptance:
If a customer would like to raise a request under GDPR rights then admin can add the condition to accept the Privacy Policy link before requesting for the Account Deletion or Data Anonymization. The admin interface of the Prestashop General data Protection Regulation addon allows the store admin to enable the setting so that for each request customer need to accept the terms and policy.
9) Store Policy Page:
Admin can add the URL of the page on which all the Terms and Conditions are listed. The customer can check the Terms and Conditions by clicking the link available with the message at the time of raising the request.
10) Display Header Menu
Display Header Menu option of the Prestashop GDPR compliance addon allows the store admin to display the GDPR option in the header section of the website. By enabling “Display Header Menu” setting of the Prestashop GDPR addon, store admin can allow the guest users to access the GDPR rights.
11) Header Menu Text
Admin can define the text for the Header Menu.
GDPR Forgot Request
The Prestashop GDPR Addon keeps the log of all the data deletion requests. This log is helpful for the admin to verify that the customer details have been deleted or not. Admin can also use this log to remove the customer data from the third-party service providers.
Note:
As soon as a customer request for the deletion of his/her details a confirmation email will be sent to the customer. As per the customer’s confirmation, the details of the customer will be deleted from the system.
The Prestashop GDPR Module allows the admin to exclude the previous orders so that only the personal details of the customer will be deleted but order details will be saved for the future reference. Please use this setting carefully because the data deleted once cannot be retrieved. It is strongly recommended to consult with your legal team to make sure how to use this setting.
The Prestashop GDPR Module only deletes the customer data from the store database. If you share the customer data with the third-party service providers (eg. MailChimp) or store it on the third-party platform (eg. Google Drive) then you need to delete the customer data from these platforms manually.
GDPR Anonymous Request
The Prestashop GDPR Addon keeps the log of the Data Anonymization requests. Admin can use this log to verify the status of the data anonymization requests.
GDPR Email Templates
The Prestashop GDPR Addon by Knowband allows the admin to send following emails to the customer on raising a request under the GDPR.
Confirm Your GDPR Account Deletion Request
Confirm Your GDPR Personal Data Anonymous Request
Customer has confirmed GDPR Request
Confirm Your GDPR Account Deletion Request
Admin can update the Subject line and the email text by using the GDPR Email Template Settings.
The default format of the email template is as below:
Confirm Your GDPR Personal Data Anonymous Request
Admin can update the Subject line and the email text by using the GDPR Email Template Settings.
the default format of the email template is as below:
Customer has confirmed GDPR Request
Note: The purpose of these features is to help you to meet with the GDPR requirements. Installing this module only does not guarantee merchant sites’ compliance with the new obligations imposed by the GDPR. It is your responsibility to put in place all the necessary measures to ensure you comply.
Il regolamento generale sulla protezione dei dati (GDPR) sostituisce la direttiva sulla protezione dei dati dell'Unione europea che verrà applicata a maggio 25, 2018. Le nuove direttive sono state approvate in base alle nuove tecnologie e ai progressi delle imprese; è stato introdotto un nuovo approccio alla protezione dei dati personali. GDPR offre maggiore controllo ai clienti per il controllo dei loro dati personali. I clienti hanno il diritto di richiedere la cancellazione dei dati. È obbligatorio che l'amministratore del negozio rispetti la richiesta del cliente entro 30 giorni. L'addon GDPR di Prestashop Addon Prestashop GDPR – Diritti degli individui, questo modulo consente di gestire i diritti del cliente con facilità. Clicca qui per i dettagli. L'interfaccia customer-end del modulo GPRPR Prestashop –
Secondo il requisito, l'amministratore ha la possibilità di abilitare / disabilitare qualsiasi di questi diritti.
Installazione del modulo GPRPR Prestashop
Dopo aver effettuato l'ordine per il modulo Prestashop GDPR è possibile scaricare il file zip del modulo. Questo file zip contiene: 1) GDPR.zip (codice sorgente del modulo) 2) Manuale dell'utente Per installare l'estensione nel tuo negozio Prestashop, segui i passaggi riportati sotto: 1) Decomprimi il file gdpr.zip. 2) Copia l'intero contenuto, ovvero i file e le cartelle della cartella decompressa. Incolla lo stesso nella cartella "Modules" della directory del tuo negozio. Segui il percorso di indirizzo sotto indicato
Interfaccia di amministrazione di Addash GDPR Prestashop
Nella sezione di amministrazione del modulo diritti cliente Prestashop GDPR sono disponibili le seguenti opzioni: 1) Impostazioni GDPR 2) GDPR Richiesta dimenticata 3) GDPR Richiesta anonima 4) GDPR Modelli e-mail
Impostazioni GDPR
La scheda Impostazioni GDPR del componente aggiuntivo GDPR Prestashop consente all'amministratore del negozio di abilitare i diritti del cliente. La scheda Impostazioni del modulo GPRPR Prestashop ha le seguenti opzioni: 1) Abilita il plugin:
Come da requisiti, l'amministratore può abilitare / disabilitare l'eliminazione dei dati e l'opzione di anonimizzazione dei dati per il cliente.
2) Richiesta massima al giorno:
Il cliente può richiedere la cancellazione dei dati, l'amministratore può impostare il limite per le richieste da parte di ciascun utente su base giornaliera. Si consiglia di impostare le richieste massime giornaliere su un numero minimo per evitare le richieste di spam.
3) Richiesta di anonimizzazione dei dati:
Se l'impostazione per il diritto di essere anonimi è abilitata dal pannello di amministrazione del componente GPRPR Prestashop
Abilita le impostazioni di anonimizzazione dei dati:
Se le impostazioni di anonimizzazione dei dati sono abilitate dall'interfaccia di amministrazione del modulo GDPR Prestashop, il cliente sarà in grado di richiedere l'anonimizzazione dei dati e in questo caso, solo il nome cliente verrà sostituito dal nome casuale.
Se una richiesta del cliente per i datitrasformazione in forma anonima, quindi verrà inviata un'email di conferma all'indirizzo e-mail registrato e al cliente verrà richiesto di confermare la richiesta.
Conferma via email:
Dopo aver richiesto l'anonimizzazione dei dati, il cliente riceverà un'e-mail con una richiesta di conferma della richiesta di anonimizzazione dei dati.
Nota:
Se si utilizzano i servizi di terzi e si condividono i dati dei clienti con terze parti, è necessario apportare le modifiche richieste secondo la procedura seguita dal fornitore di servizi. Questo modulo GDPR renderà anonimi i dati memorizzati solo nel database. Il processo di anonimizzazione dei dati è simile alla richiesta di cancellazione dei dati.
4) Abilitare per aggiornare le informazioni nell'ordine:
Se un cliente richiede di rendere anonime le proprie informazioni, l'amministratore può selezionare l'opzione per abilitare / disabilitare le modifiche agli ordini precedenti. Se questa impostazione è abilitata dall'interfaccia di amministrazione del componente GPRPR Prestashop, i dettagli dell'ordine precedente verranno sovrascritti.
5) Abilita la generazione dell'ID e-mail falso:
L'amministratore ha la possibilità di abilitare le impostazioni per sostituire l'ID e-mail del cliente tramite l'id-email generato dal sistema. Se il cliente desidera rendere anonimo il proprio ID e-mail, può inviare la richiesta di anonimizzazione dell'ID e-mail.
Se il cliente inoltra la richiesta di anonimato anche l'id dell'email. Quindi l'ID e-mail del cliente verrà sostituito da un sistema che ha generato un'e-mail.
Il cliente può salvare l'ID e-mail generato dal sistema per accedere al proprio account.
6) Abilita il diritto ad essere dimenticato:
Le nuove direttive GDPR consentono al cliente di cancellare i propri dati personali. Utilizzando il modulo Addon Prestashop GDPR di Knowband, l'amministratore può fornire un'interfaccia ai clienti per sollevare richieste per la cancellazione dei dati.
L'interfaccia di richiesta del report di cancellazione dei dati per il cliente sarà la seguente:
Dopo aver richiesto l'eliminazione dell'account, al cliente verrà notificato che un'email con la richiesta di conferma è stata inviata all'ID e-mail registrato.
Nota:
1) Si consiglia di consultare il proprio team legale prima di abilitare questa impostazione. Dopo aver cancellato i dati personali del cliente, non può essere recuperato. L'amministratore ha la possibilità di abilitare l'impostazione dell'ordine di cancellazione che è stata spiegata nell'argomento successivo. 2) Nel caso in cui si condividano i dati del cliente con fornitori di servizi di terzi, è necessario eliminare manualmente i dati del cliente. A partire da ora, questo modulo non supporta la funzionalità per eliminare i dati condivisi con i fornitori di servizi di terze parti. Esempio: se si utilizza MailChimp per l'invio di e-mail promozionali, è necessario eliminare manualmente i dettagli del cliente dall'elenco MailChimp.
9) Abilita per eliminare gli ordini:
Se un cliente ha richiesto la richiesta di cancellazione dei dati in base al GDPR, l'amministratore ha la possibilità di eliminare i dati personali del cliente insieme ai precedenti dettagli dell'ordine. Se questa impostazione non è abilitata dall'interfaccia di amministrazione del modulo GDPR, solo i dati personali verranno eliminati e le informazioni sugli ordini rimarranno invariate.
Nota:
Si consiglia di consultare il proprio team legale prima di abilitare le impostazioni di cancellazione degli ordini. I dettagli dell'ordine cancellati dal sistema non possono essere recuperati.
8) Abilita accettazione criteri negozio:
Se un cliente desidera richiedere una richiesta ai sensi dei diritti GDPR, l'amministratore può aggiungere la condizione per accettare il collegamento Informativa sulla privacy prima di richiedere la cancellazione dell'account o l'anonimizzazione dei dati. L'interfaccia di amministrazione del componente aggiuntivo Prestashop di protezione dei dati generali consente all'amministratore del negozio di abilitare l'impostazione in modo che per ogni richiesta il cliente debba accettare i termini e la politica.
9) Pagina politica negozio:
L'amministratore può aggiungere l'URL della pagina in cui sono elencati tutti i Termini e condizioni. Il cliente può verificare i Termini e condizioni facendo clic sul collegamento disponibile con il messaggio al momento della richiesta.
10) Visualizza il menu di intestazione
L'opzione Display Header Menu del componente aggiuntivo Prestashop GDPR consente all'amministratore del negozio di visualizzare l'opzione GDPR nella sezione dell'intestazione del sito web. Abilitando l'opzione "Display Header Menu" del componente GPRPR Prestashop, l'amministratore del negozio può consentire agli utenti guest di accedere ai diritti GDPR.
11) Testo del menu testata
L'amministratore può definire il testo per il menu intestazione.
GDPR ha dimenticato la richiesta
L'Addon GDPR Prestashop mantiene il registro di tutte le richieste di cancellazione dei dati. Questo registro è utile per l'amministratore per verificare che i dettagli del cliente siano stati eliminati o meno. L'amministratore può anche utilizzare questo registro per rimuovere i dati dei clienti dai fornitori di servizi di terze parti.
Nota:
Non appena un cliente richiede la cancellazione dei suoi dettagli, verrà inviata un'email di conferma al cliente. Come da conferma del cliente, i dettagli del cliente verranno cancellati dal sistema. Il modulo GDPR Prestashop consente all'amministratore di escludere gli ordini precedenti in modo che vengano cancellati solo i dettagli personali del cliente, ma i dettagli dell'ordine verranno salvati per il futuro riferimento. Si prega di utilizzare questa impostazione attentamente perché i dati cancellati una volta non possono essere recuperati. Si consiglia vivamente di consultare il proprio team legale per accertarsi di come utilizzare questa impostazione. Il modulo GDPR Prestashop elimina solo i dati del cliente dal database del negozio. Se condividi i dati dei clienti con i fornitori di servizi di terze parti (ad esempio MailChimp) o li memorizzi sulla piattaforma di terze parti (ad esempio Google Drive), devi eliminare manualmente i dati dei clienti da queste piattaforme.
Richiesta anonima GDPR
L'Addon GDPR Prestashop mantiene il registro delle richieste di anonimizzazione dei dati. L'amministratore può utilizzare questo registro per verificare lo stato delle richieste di anonimato dei dati.
Modelli email GDPR
L'Addon Prestashop GDPR di Knowband consente all'amministratore di inviare le seguenti e-mail al cliente al momento di sollevare una richiesta ai sensi del GDPR.
Conferma la richiesta di cancellazione del tuo account GDPR
Conferma la tua richiesta anonima di dati personali GDPR
Il cliente ha confermato la richiesta GDPR
Conferma la richiesta di cancellazione del tuo account GDPR
L'amministratore può aggiornare la riga dell'oggetto e il testo dell'email utilizzando le impostazioni del modello di email GDPR.
Il formato predefinito del modello di email è il seguente:
Conferma la tua richiesta anonima di dati personali GDPR
L'amministratore può aggiornare la riga dell'oggetto e il testo dell'email utilizzando le impostazioni del modello di email GDPR.
il formato predefinito del modello di email è il seguente:
Il cliente ha confermato la richiesta GDPR
Nota: lo scopo di queste funzionalità è di aiutarvi a soddisfare i requisiti GDPR. L'installazione di questo modulo non garantisce la conformità dei siti commerciali ai nuovi obblighi imposti dal GDPR. È responsabilità dell'utente mettere in atto tutte le misure necessarie per garantire la conformità.
The General Data Protection Regulation (GDPR) is a replacement for the European Union Data Protection Directive which will be enforced on May 25, 2018. The new directives have been passed, as per the new technologies and business advances; a new approach to protection of the personal data has been introduced.
The Prestashop GDPR Module – Right to access and data portability helps the store admin to manage the data access and data portability requests of the customers. By using the Prestashop GDPR Module by Knowband admin can provide an interface to the customers so that they can request for their personal information and if the required customer can also download the data as a CSV file.
To enable the GDPR Rights for the customers, download the zip file of the module from the Downloads section of your Knowband account.
1) GDPR.zip (source code of the module)
2) User Manual
In order to install the extension in your Prestashop store follow the below-mentioned steps:
1) Unzip the gdpr.zip file.
2) Copy the entire content, that is, the files and folders of the unzipped folder. Paste the same into the “Modules” folder of your store’s directory. Follow the below-mentioned address path – Root Directory/modules/.
3) The Prestashop GDPR plugin is all set to be installed in the store. Go to the Store Admin and then to ‘Modules and Services’.
4) Click on the “Install” button just next to your module. It would show a pop-up for your confirmation. Click on “Proceed with the installation” option. This step will install the module and show notification – “Module(s) installed successfully”.
5) Once the installation is complete, you will get the access to the admin interface of the module by clicking on the “Configure” button.
1.2.0 Front-end interface of the Prestashop GDPR Module:
Customers will be able to access the GDPR rights by navigating to the My account section. Here, a separate tab GDPR will be visible to the customers. By using the GDPR tab customers can access their GDPR rights – Right to access and Right to data portability.
On clicking the GDPR tab the customer will be redirected to the GDPR tools page, from here customer can request for their personal data and also download their personal details like personal information, addresses and orders.
The Prestashop GDPR Module – Right of access and data portability, allows the store admin to enable the GDPR settings for the guest users so that guest users can also request for the details of their personal data. If the GDPR rights are enabled for the guest user then it will appear in the header section. Please refer to the attached screenshot.
1.3.0 Admin Interface of Prestashop GDPR Addon – Right to access and data portability:
The admin section of the Prestashop GDPR addon has the following options:
1) GDPR Settings
2) GDPR Data Portability
3) GDPR Personal Data Request
4) GDPR Email Templates
1.3.1 GDPR Settings:
The GDPR Settings tab of the Prestashop GDPR Addon – Rights to access and data portability has the following options. Please refer to the attached screenshot below:
a)Enable the Plugin:
Admin can enable the customer rights by using the Enable the plugin toggle button.
b) Maximum request per day:
Admin has the options to set the max limit for the Personal data request.
c) Enable Right of access to personal data:
The right of access to personal data allows the customers to request for the personal data. Admin has the option to display the report immediately or admin can enable the setting to send the GDPR Personal data report over email.
d) Send Personal report via email:
If this setting is enabled then the Personal data report will be sent via the email. Steps for the request for the personal data are listed below:
Step-1:
Request for the GDPR Personal Data report – Prestashop GDPR Addon
Step: 2
Confirm the GDPR Request.
Step: 3
As soon as the customer will confirm the GDPR Personal Data Request, an email with the customer details will be sent to the customer.
If the Send Personal Report via Email setting is disabled then the personal data report will be displayed immediately. Please refer to the attached screenshot.
e) Enable Right to Data Portability:
Right to data portability allows the customers to download their personal information which they have provided to the data controller.
The Prestashop GDPR addon – Right to access and data portability allows the store admin to provide an interface to the customers so that they can easily download their data like personal details, addresses and orders.
In case the customer is logged in then he/she can directly download the report. For the guest users, it is mandatory to verify the data download request only after successful verification the guest user will be able to download the data.
Personal Information Report example:
f) Enable Store Policy Acceptance:
If a customer would like to raise a request under GDPR rights then admin can add the condition to accept the Terms and Conditions before requesting for the GDPR request for the Personal Data. The admin interface of the Prestashop GDPR addon allows the store admin to enable the setting so that for each request customer need to accept the terms and policy.
g) Store Policy Page:
Admin can add the URL of the page on which all the Terms and Conditions are listed.
h) Services/ Other locations where you store customer data:
Admin can list all the third-party service providers’ details to share the details with the customer.
i) Physical locations of servers where you host your website and other data:
Admin can define the physical server location of the server where the data has been stored.
j) Display Header Menu:
If the admin would like to enable the GDPR rights for the guest users then admin can enable the Display Header Menu setting. Admin has the choice to update the text for the GDPR rights, this text will be visible in the header section of the website and customers can access their rights by using this interface.
k) Header Menu Text:
Admin can define the text for the Header Menu.
1.3.2 GDPR Data Portability
The Prestashop GDPR Module – Right to access and data portability, keeps the log of all the GDPR data portability requests processed.
1.3.3 GDPR Personal Data Report Request
The Prestashop GDPR Addon – Right to access and data portability, keeps a log of all the personal data requests processed.
1.3.4 GDPR Email Templates
The Prestashop GDPR Addon by Knowband allows the admin to send following emails to the customer on raising a request under the GDPR.
Customer has requested for GDPR
Your GDPR Personal Data Report
Confirm Your GDPR Personal Data Portability Request
Customer has confirmed GDPR Request
Note: The purpose of these features is to help you to meet the GDPR requirements. Installing this module only does not guarantee merchant sites’ compliance with the new obligations imposed by the GDPR. It is your responsibility to put in place all the necessary measures to ensure you comply.
Il regolamento generale sulla protezione dei dati (GDPR) sostituisce la direttiva sulla protezione dei dati dell'Unione europea che verrà applicata a maggio 25, 2018. Le nuove direttive sono state approvate in base alle nuove tecnologie e ai progressi delle imprese; è stato introdotto un nuovo approccio alla protezione dei dati personali. Il modulo GPRPR Prestashop Prestashop GDPR Module che aiuta l'amministratore del negozio a fornire più diritti ai clienti come indicato nelle direttive GDPR. per favore clicca qui per controllare i dettagli.
Installazione 1.1.0 del modulo GPRPR Prestashop:
Per abilitare i diritti GDPR per i clienti, scaricare il file zip del modulo dalla sezione Download del proprio account Knowband. 1) GDPR.zip (codice sorgente del modulo) 2) Manuale dell'utente Per installare l'estensione nel tuo negozio Prestashop, segui i passaggi indicati sotto: 1) Decomprimi il file gdpr.zip. 2) Copia l'intero contenuto, ovvero i file e le cartelle della cartella decompressa. Incolla lo stesso nella cartella "Modules" della directory del tuo negozio. Segui il percorso di indirizzo sotto indicato
1.2.0
I clienti saranno in grado di accedere ai diritti GDPR navigando alla sezione Il mio account. Qui, una scheda separata GDPR sarà visibile ai clienti. Utilizzando la scheda GDPR i clienti possono accedere ai loro diritti GDPR
Facendo clic sulla scheda GDPR il cliente verrà reindirizzato alla pagina degli strumenti GDPR, da qui il cliente può richiedere i propri dati personali e anche scaricare i propri dati personali come informazioni personali, indirizzi e ordini.
Il modulo GPRPR Prestashop
1.3.0Interfaccia di amministrazione di Addash GDPR Prestashop
La sezione di amministrazione del componente aggiuntivo Prestashop GDPR ha le seguenti opzioni: 1) Impostazioni GDPR 2) Portabilità dati GDPR 3) Richiesta dati personali GDPR 4) Modelli email GDPR
1.3.1Impostazioni GDPR:
La scheda Impostazioni GDPR del componente aggiuntivo Prestashop GDPR
a)?Abilita il plugin:
L'amministratore può abilitare i diritti del cliente utilizzando il pulsante di attivazione Abilita il plugin.
b)?Maximum request per day:
L'amministratore ha le opzioni per impostare il limite massimo per la richiesta di dati personali.
c)?Enable Right of access to personal data:
Il diritto di accesso ai dati personali consente ai clienti di richiedere i dati personali. L'amministratore ha la possibilità di visualizzare immediatamente il rapporto o l'amministratore può abilitare l'impostazione per inviare il rapporto dati GDPR sui dati personali via e-mail.
d)?Send Personal report via email:
Se questa impostazione è abilitata, il rapporto sui dati personali verrà inviato tramite l'e-mail. I passaggi per la richiesta dei dati personali sono elencati di seguito:
Step-1:
Richiesta del rapporto Dati personali GDPR
Passaggio: 2
Conferma la richiesta GDPR.
Passaggio: 3
Non appena il cliente confermerà la richiesta di dati personali GDPR, verrà inviata al cliente un'e-mail con i dettagli del cliente.
Se l'opzione Invia rapporto personale via e-mail è disabilitata, il rapporto dei dati personali verrà visualizzato immediatamente. Si prega di fare riferimento allo screenshot allegato.
e)?Enable Right to Data Portability:
Il diritto alla portabilità dei dati consente ai clienti di scaricare le informazioni personali che hanno fornito al titolare del trattamento. L'addon GDPR di Prestashop
Esempio di rapporto di informazioni personali:
f) Abilita accettazione politica negozio:
Se un cliente desidera richiedere una richiesta ai sensi dei diritti GDPR, l'amministratore può aggiungere la condizione per accettare i Termini e condizioni prima di richiedere la richiesta GDPR per i Dati personali. L'interfaccia di amministrazione del componente aggiuntivo Prestashop GDPR consente all'amministratore del negozio di abilitare l'impostazione in modo che per ogni richiesta il cliente debba accettare i termini e la politica.
g) Pagina politica del negozio:
L'amministratore può aggiungere l'URL della pagina in cui sono elencati tutti i Termini e condizioni.
h) Servizi / Altre posizioni in cui si memorizzano i dati dei clienti:
L'amministratore può elencare tutti i dettagli dei fornitori di servizi di terze parti per condividere i dettagli con il cliente.
i) Posizioni fisiche dei server in cui si ospita il sito Web e altri dati:
L'amministratore può definire la posizione fisica del server del server in cui sono stati memorizzati i dati.
j) Visualizza menu intestazione:
Se l'amministratore desidera abilitare i diritti GDPR per gli utenti guest, l'amministratore può abilitare l'impostazione Menu Display Header. L'amministratore ha la possibilità di aggiornare il testo per i diritti GDPR, questo testo sarà visibile nella sezione intestazione del sito Web e i clienti potranno accedere ai loro diritti utilizzando questa interfaccia.
k) Testo del menu testata:
L'amministratore può definire il testo per il menu intestazione.
1.3.2Portabilità dei dati GDPR
Il modulo GPRPR Prestashop
1.3.3Richiesta report dati personali GDPR
L'Addon GDPR Prestashop
1.3.4 GDPR Email Templates
L'Addon Prestashop GDPR di Knowband consente all'amministratore di inviare le seguenti e-mail al cliente al momento di sollevare una richiesta ai sensi del GDPR.
Il cliente ha richiesto GDPR
Il tuo rapporto sui dati personali GDPR
Conferma la tua richiesta di portabilità dei dati personali GDPR
Il cliente ha confermato la richiesta GDPR
Nota: lo scopo di queste funzionalità è di aiutarvi a soddisfare i requisiti GDPR. L'installazione di questo modulo non garantisce la conformità dei siti commerciali ai nuovi obblighi imposti dal GDPR. È responsabilità dell'utente mettere in atto tutte le misure necessarie per garantire la conformità.
The General Data Protection Regulation (GDPR) is a replacement for the European Union Data Protection Directive which will be enforced on May 25, 2018. The new directives have been passed, as per the new technologies and business advances; a new approach to protection of the personal data has been introduced.
1.1 New Data Protection Rights under GDPR
1) Transparent information, communication, and modalities for the exercise of the rights of the data subject
2) Information to be provided where personal data are collected from the data subject
3) The right of access by the data subject
4) Right to rectification
5) Right to erasure (‘right to be forgotten’)
6) Right to restriction of processing
7) Notification obligation regarding rectification or erasure of personal data or restriction of processing
8) Right to data portability
9) Right to object
10) Automated individual decision-making, including profiling
Under GDPR it is mandatory for the store owners to provide with thorough information about how the personal data of the customers will be processed. This information can be mentioned on the Privacy Policy page. The information given on the Privacy page should be concise, transparent, intelligible, and easily accessible, in clear and plain language, free of charge.
1.2 How Prestashop GDPR module by Knowband helps the sellers to comply with GDPR?
The PrestaShop GDPR Module by Knowband helps the sellers to comply with the GDPR directives without putting any extra efforts. By installing the GDPR module admin can display the GDPR Tools option on the account details page at the front-end of the customer. The GDPR module handles the following requests:
1) Cookies Consent Bar
2) Right of access to the personal data
3) Right to data portability
4) Right to be anonymous
5) Right to be forgotten
6) Right to data rectification
7) Right to restriction of processing (coming soon)
8) Rights related to the automated decision making
Additional features offered by Prestashop GDPR Module:
Cookie consent bar: Admin can display the cookie consent bar on the website. The Cookie option also blocks the cookies used by the third party modules.
Checkboxes for the user consent on the registration and contact form: The Prestashop GDPR Addon allows the store admin to display the additional checkboxes on the Registration and Contact form.
Data download from the admin: Admin can download the personal data of the customer in CSV format so that it can be shared with the customer.
Data Deletion option: Admin can delete the customer data from the back-office.
GDPR Request Log: The Prestashop GDPR Module keeps the log of GDPR requests, as a proof of the processing of the requests.
GDPR request retention period: Admin can set the retention period for the GDPR requests received. After the set duration, the GDPR request data will be deleted.
Email templates: Prestashop GDPR Module offers so many email templates that help to automate the process.
Guest User: Guest users can also request for their personal details with ease.
Geo Location Targeting: The online merchant can set IP address and select country/regions for showing specific GDPR functionalities like cookie consent bar, user consent check-box, GDPR links in my account page and GDPR header menu link.
Customer Interface of the Prestashop GDPR Module
A logged in customer can access the GDPR rights from My Account section. Here a separate tab, GDPR will be visible to the user by accessing this GDPR tan the logged in user can access the GDPR rights. Please refer to the attached screenshot:
On clicking the GDPR tab a new page will get opened. Here all the GDPR rights of the customer (enabled by the admin) will be listed and customer can access any of these rights with ease.
As per the requirement, the admin has the choice to enable/disable any of these rights.
2.0 Installation of Prestashop GDPR Module
After placing your order for the Prestashop GDPR module you can download the zip file of the module. This zip file contains:
1) GDPR.zip (source code of the module)
2) User Manual
In order to install the extension in your Prestashop store follow the below-mentioned steps:
1) Unzip the gdpr.zip file.
2) Copy the entire content, that is, the files and folders of the unzipped folder. Paste the same into the “Modules” folder of your store’s directory. Follow the below-mentioned address path – Root Directory/modules/.
3) The Prestashop GDPR plugin is all set to be installed in the store. Go to the Store Admin and then to ‘Modules and Services’.
4) Click on the “Install” button just next to your module. It would show a pop-up for your confirmation. Click on “Proceed with the installation” option. This step will install the module and show notification – “Module(s) installed successfully”.
3.0 Admin Interface of Prestashop GDPR Addon
In the admin section of the Prestashop GDPR Customer rights module following options are available:
1) GDPR Settings
2) EU Cookie Law
3) User Consent
4) GDPR Data Portability
5) GDPR Forgot Request
6) GDPR Anonymous Request
7) GDPR Rectification Request
8) GDPR Personal Data Request
9) GDPR Automated Decision Making
10) GDPR Email Templates
11) GDPR Geo Targeting
12) GDPR Crons
3.1 GDPR Settings
The GDPR Settings tab of the Prestashop GDPR Customer Rights module allows the store admin to enable/disable the customer’s rights. As per the settings enabled by the admin, the customer will be able to access the rights from his/her account. Please refer to the attached screenshot below:
The Settings tab of the GDPR module has following options:
3.1.1 Enable the Plugin
As per the requirement, admin can Enable/Disable the Prestashop GDPR Compliance Plugin. If the setting of the Enable the Plugin is yes, only then this module will work.
3.1.2 Maximum request per day
Customers have the right to request the personal data. Admin can set the limit for the requests on daily basis. It will be recommended to set the maximum requests per day to a minimum number to avoid the spam requests.
3.1.3 Enable Right of access to personal data
The right of access to personal data allows the customers to check their personal details which they have shared with the data controller.
If this setting is enabled from the admin interface of the Prestashop GDPR addon only then customers will be able to able to check their personal details by logging into their account. The screenshot of customer end has been attached below:
Step-1:
Request for the GDPR Personal Data report – Prestashop GDPR Addon
As soon as the customer request for the GDPR personal data report, the customer will be notified that an email with the confirmation link has been sent to the entered email address.
Step: 2
Confirm the GDPR Request.
Step: 3
As soon as the customer will confirm the GDPR Personal Data Request, an email with the customer details will be sent to the customer.
3.1.4 Enable Right to Data Portability
Right to data portability allows the customer to download his/her personal data so that he/she can share this data with other data controller with ease.
If this setting is enabled from the admin interface of the Prestashop GDPR Module only then the customer will be able to download their personal data in CSV format. As of now, the Prestashop GDPR Module allows the customers to download their personal data like – Account information, Address details, Order details. The screenshot of the interface at the customer end has been attached below:
Personal Information Report:
3.1.5 Enable Right to be Anonymous
If the setting for the Right to be Anonymous is enabled from the admin panel of the Prestashop GDPR addon then the customer will be able to make a request for data anonymization. As soon as the customer will request for the data anonymization a confirmation email will be sent to the customer. If the customer confirms the data anonymization request, as per the settings enabled by the admin personal details like Name, Email Id will be replaced by random details. To process the data anonymization request the Prestashop admin has the following option:
• Enable Right to be Anonymous: If this setting is enabled from the admin then the customer will be able to request for the data anonymization but in this case, only the name of the customer will be anonymized.
As soon as a customer registers the Data anonymization request customer will be notified to confirm the data anonymization request over email.
Email confirmation:
On request for the data anonymization customer will receive the email at the entered email address with a request to confirm the data anonymization request.
Note:
In case you are using the third-party services and sharing the customer data with third-party, then you need to make the required changes as per the procedure followed by the service provider. This GDPR module will anonymize the data which you have stored in your database only.
3.1.6 Enable to update information in Order
If customer requests to make his/her information anonymous then admin can select the option to enable/disable the changes to the previous orders. If this setting is enabled from the admin interface of the Prestashop GDPR addon then the previous order details will also be replaced.
3.1.7 Enable to generate Fake Email ID
If a customer raises a request for the data anonymization then admin can select the option to replace the email id of the customer by fake email id. Please refer to the attached screenshot:
If the customer submits the request to anonymize the email id also. Then the customer email id will be replaced by a system generated email-id.
The customer can use the system generated email id for accessing the account.
3.1.8 Enable right to be Forgotten
As per the new GDPR Directives customer has the right to be forgotten. If this setting is enabled from the admin interface of the Prestashop GDPR Compliance Module then the customer can request for the deletion of his/her data by accessing his/her account. After receiving the request of the customer a confirmation email will be sent to the customer and as per customer’s approval, entire details of the customer will be deleted from the database.
The forgotten request interface for the customer will be as below:
Customer will be notified that an email with the confirmation request has been sent to the registered email id.
To handle the data deletion option admin has the following options from the back-office:
Enable right to be forgotten: Admin can enable the Right for the customers. If enabled only then customers will be able to request for the data deletion.
Action to be taken for orders: In order to process the data deletion requests, the admin has the options to select the action for the previous orders. Admin can select the options like Delete orders, Random data fill or No Action for orders. If the Delete Order option has been selected then the order will be deleted, in case of random fill the personal details of the customer will be replaced by the random data but the order and product details will remain as it is. This will help the admin to maintain the statistics of the orders and product sale. In case of No Action, the previous order details will remain as it is.
Time to process request deletion: Admin can set the option to delete the customer data immediately or after some time. The Prestashop GDPR Addon allows the delete the customer data after a fix time interval and admin can setup the cron to automate the process.
In order to complete the data deletion request go to the Data Forgot tab of the Prestashop GDPR Addon module and click on the “Process Forgot Request”.
Admin can also set up the cron job to automate the process.
Note:
1) It is recommended to consult with your legal team before enabling data deletion settings. After deleting the customer’s personal data it cannot be retrieved. Admin has the option to enable the delete order setting which has been explained in the next topic.
2) In case you are sharing the customer data with third-party service providers then you need to delete the customer data manually. As of now, this module does not support the feature to delete the data shared with the third-party service providers.
Example: If you are using MailChimp for sending promotional emails then you have to delete the customer details from MailChimp list manually.
3.1.9 Enable the right to data rectification
A customer has the right to update the incorrect personal data. The Prestashop GDPR Customer Rights Module allows the store admin to let the customer modify the personal data like personal details, address etc.
3.1.10 Enable Right to Restriction of Processing
This feature will be updated soon.
3.1.11 Enable Rights in relation to automated decision making and profiling
If this setting is enabled from the admin panel of the Prestashop GDPR compliance module then store admin will be able to list the services which make a decision by automated means. If a customer requests for the services which make a decision by automated means then the customer will get an email to confirm the request. As soon as the user will confirm the request, the user will be redirected to a new link. Here all the services with the automated decision making will be listed and the user can select the one which he/she would like to continue.
3.1.12 Enable Store Policy Acceptance
If a customer would like to raise a request under GDPR rights then admin can add the condition to accept the Terms and Conditions before requesting for the GDPR request for the Personal Data, Account Deletion or Data Anonymization.
3.1.13 Store Policy Page
Admin can add the URL of the page on which all the Terms and Conditions are listed. The customer can check the Terms and Conditions by clicking the link available with the message at the time of raising the request.
3.1.14 Services/ Other locations where you store customer data
If you use the third-party services and share the customer data with them, then list down all the third-party service providers here. This information will be sent to the customer if he/she request for the Personal Data.
3.1.15 Physical locations of servers where you host your website and other data
You can mention the server location here, where you store the customer data.
3.1.16 Purge Request Day
This option allows the store admin to set the retention period for the GDPR requests. As per the number of days entered by the store admin the GDPR request data will be deleted from the database. Cron setup is available for automating the process.
3.1.17 Display Header Menu
Display Header Menu option of the Prestashop GDPR compliance addon allows the store admin to display the GDPR option in the header section of the website. By enabling “Display Header Menu” setting of the Prestashop GDPR addon, store admin can allow the guest users to access the GDPR rights.
3.1.18 Header Menu Text
Admin can define the text for the Header Menu.
3.1.19 Admin Email Address
The online store admin can enter his email address for getting GDPR related e-mail notifications. Prestashop GDPR Module provided an option to add admin email in the General setting tab to receive/send the mail using that email address instead of default shop email address.
3.2 Cookie Consent Bar
It is mandatory for the online store owners to display the message that website uses the cookies (if you use cookies for the better customer experience) with the option to accept or discard the cookie acceptance. The Prestashop GDPR Module allows the store admin to display the Cookie Consent Bar at the front end with the option to accept the cookie or discard the message. Admin can easily customize the appearance settings as well as the message on the cookie bar.
The Cookie Consent Bar tab has following settings:
In the new version of the Prestashop GDPR Module, the option to block cookies from the third party module has been added the new admin interface of the module has the option to setup the Cookie Bar Settings and Cookie Blocker option. Please refer to the attached screenshot:
3.2.1 Cookie Bar Settings
The cookie bar setting tab has the 2 options Configuration and Appearance.
3.2.1.1 Configuration
Admin has following options to set-up the Cookie Consent Bar.
Enable the Cookies Consent Bar: The Admin can enable or disable the cookie message on the website.
Cookie Name: In this section define the name of the cookie to get the user consent. Please do not use the space to the cookie name.
Cookie Lifetime: Cookie Lifetime allows the store admin to set up the cookie duration that how long the cookie will be stored on the user’s device.
Terms and Condition of use: The admin can list the cookies details on a Cookie Policy page and add the link to the page on the message displayed to the user.
Display Close Button: Admin has the option to remove the Close button from the Cookie Consent Bar.
3.2.1.2 Appearance Settings
Admin can easily control the following options for the Cookie Consent Bar.
Notification Position: Admin can select the position of the Cookie Notice on the Bottom of the page or Top.
Effect when hiding the notification: Admin can select the options like Fade, Hide or Slide from the drop-down list.
Notification Message: Admin can easily update the notification message as per the requirement.
Background Color: Admin can customize the background color of the cookie bar.
Background Opacity: Admin can set the opacity of the cookie consent bar.
Notification Message Font Color: Admin can set the notification message font color.
Background Color of Accept Button: Admin can set the background color for the Accept Button.
Font Color of Accept Button: Admin can set the font color of the Accept button.
Background Color of More Information Button: The background color of more information button can be changed to match it with the website theme.
Font Color of More Information Button: Admin can select the font color to match with the website theme.
3.2.2 Cookie Blocker
The Cookie Blocker interface will consist of the Details of the Cookies. Admin will have the option to add the Module category. For example, Strictly Necessary Cookies – Admin can map all the third party modules under this category which are required for the proper functioning of the features of the website. To map the modules under the category admin need to click the drop down option as highlighted in the screenshot below.
How to map the modules with the Module Category?
In order to map the third party modules which use the cookies admin need to click the drop down option and then click on the Add Modules. This will open a new page with the option to select the modules. Please refer to the screenshot.
Now find the module which you would like to map with the Module Category and click on the Module Name. On clicking the Module name option to enter details regarding the Cookie will appear. Please refer to the attached screenshot:
Admin can add the multiple module categories and map the modules to these categories with ease. At the front-end, if the user clicks on the Cookie Settings option then he will be able to activate the cookies of his choice. Please refer to the attached screenshot:
Note: Strictly Necessary Cookies will be enabled by default. All other module cookies can be controlled by the customer.
3.3 User Consent
The user consent option allows the store admin to display the checkboxes on the Signup and Contact form. In order to add the checkboxes on the Registration and Contact form admin need to click on the User consent option. Please refer to the attached screenshot:
Clicking on the User Consent option will open a new window with the option to add the checkboxes on the Registration and Contact form. Please refer to the attached screenshot:
In order to add a new checkbox admin need to click on the + icon as highlighted in the screenshot above. Clicking on the + icon will open a new form to fill the details. Please refer to the attached screenshot:
Title: This is for the internal use. The title of the consent box will appear in the back-office details.
Content: The text entered here will be displayed to the user at the front-end.
Form Type: Admin can select the Registration Form or the Contact form to display the additional information.
Consent URL: Admin can add the link to the Privacy Page or Terms and Conditions page.
Required: Admin has the choice to make the field a mandatory filed.
At the front-end the checkbox will appear like below:
The Prestashop GDPR Addon by Knowband also records the user consent. To verify the customer consent admin need to navigate to the Customers section. Please refer to the attached screenshot:
3.4 GDPR Data Portability
In the GDPR data portability section of Prestashop GDPR Module, admin can check the status of the data portability requests raised by the customers. Customers can download the personal data like Personal Info, Addresses and Orders in the CSV format. Admin can check the reports of the downloaded data in this section.
New Feature:
The new version of the Prestashop GDPR Module allows the store admin to download the customer data from the back-office. This feature will help the store admin to share the customer data if data has been requested from some other communication channel like email instead of using the website. To download the customer data follow steps mentioned below:
Go to the GDPR Data Portability Tab
Click on the Download Customer Data option as highlighted in the screenshot
On clicking the Download Customer Data a new tab will open. Please refer to the attached screenshot.
On searching for the customer details by Customer Name or Customer email-id the details of the customer with the options to download the details of the customer will appear. Please refer to the attached screenshot:
From here admin can download the customer details. The downloaded data will be in CSV format.
3.5 GDPR Forgot Request
According to the right to be forgotten of GDPR, the customer can request for the deletion of his/her personal details. All the requests registered under “Right to Forgotten” will be listed under the GDPR Forgot Request tab. As per the settings enabled/disabled for the order deletion, order details will be stored or deleted. Admin can easily check the status of the GDPR Forgot requests from the admin interface of the Prestashop GDPR module under the “GDPR Forgot Request” tab.
Note:
As soon as a customer request for the deletion of his/her details a confirmation email will be sent to the customer. As per the customer’s confirmation, the details of the customer will be deleted from the system.
The Prestashop GDPR Module only deletes the customer data from the store database. If you share the customer data with the third-party service providers (eg. MailChimp) or store it on the third-party platform (eg. Google Drive) then you need to delete the customer data from these platforms manually.
New Feature:
The new version of the Prestashop GDPR Module allows the store admin to delete the customer data from the back-office. This feature will help the store admin to delete the customer data if the data deletion request has been generated from some other communication channel like email instead of using the website. To delete the customer data follow the steps mentioned below:
Go to the GDPR Forgot Request Tab
Click on the Delete Customer’s Data option as highlighted in the screenshot
On clicking the Delete Customer’s Data a new tab will open. Please refer to the attached screenshot.
Admin needs to enter the customer name or the email id to find the customer details. The details will appear like.
From here, admin can check the customer details and also select the option to delete the customer data. Admin can also notify the customer regarding the data deletion through email. As per the settings enabled from the General Settings for the data deletion requests order details will be handled in a similar manner.
Note:
1) If any third party module uses the Prestashop hooks (as per the guidelines of the Prestashop to make the Prestashop modules GDPR Compliant) then the Prestashop GDPR Module by Knowband will allow the store admin to delete the customer data from that module as well.
2) As of now, the Prestashop GDPR Compliance Module by Knowband does not keep the record of the data deletion requests processed from the back-office.
3.6 GDPR Anonymous Request
If the customer would like to make his/her information anonymous so that no one can identify the user from the personal details then the customer can request to anonymize the data. In this case, the customer personal data will be replaced by fake details and as per the settings enabled under the GDPR Settings tab of the Prestashop GDPR Compliance Module; a fake email id can also be generated. If the customer wishes he/she can continue to use the services by using the fake email id to access his account details. Admin can check the details of the Data Anonymous Request under the GDPR Anonymous Request tab of the Prestashop GDPR Compliance Module.
3.7 GDPR Rectification Request
The customer has the right to modify the inaccurate information. The Prestashop GDPR Module allows the customer to modify the details like Personal Information, Address, and Password etc. Admin can check the status of the status of the modification made by the customers under the GDPR Rectification Request.
3.8 GDPR Personal Data Report Request
As per the GDPR Rights customer can request for the details of the personal data which has been collected by the store admin along with the details that how the personal data has been used and which other services are using the data of the customer. At the front-end customer gets an interface to request for the personal data under the My Account section. As soon as the user request for the Personal Data an email for the confirmation will be sent to the user to the registered email address. As per the confirmation from the user personal data details will be sent to the user. Admin can check the status and details of the Personal Data Request status under the GDPR Personal Data Report Request.
Note:
As of now the Prestashop GDPR Module by Knowband allows the store admin to share the details like Personal Information, Address Details, Newsletter Subscription, D.O.B, Shopping Cart Contents, Order Details, Admin can also list all the third-party service providers details and the physical location of the server along with the details of the hosting company.
3.9 GDPR Email Templates
The GDPR Module by Knowband allows the admin to sending following emails to the customer on raising a request under the GDPR.
Confirm Your GDPR Account Deletion Request
Confirm Your GDPR Personal Data Anonymous Request
Customer has requested for GDPR
Your GDPR Personal Data Report
Customer has confirmed GDPR Request
Confirm Your GDPR Decision Making Request
Confirm Your GDPR Personal Data Portability Request
3.9.1 Confirm Your GDPR Account Deletion Request
Admin can update the Subject line and the email text by using the GDPR Email Template Settings.
The default format of the email template is as below:
3.9.2 Confirm Your GDPR Personal Data Anonymous Request
Admin can update the Subject line and the email text by using the GDPR Email Template Settings.
The default format of the email template is as below:
3.9.3 Customer has requested for GDPR
This Email template is used to send a confirmation mail to the customer when a customer has requested for Personal Data Report.
The email at the customer end will be like below:
3.9.4 Your GDPR Personal Data Report
This email template will be used to send the Personal Data of the customer requested under the GDPR Right to the access to the Personal Data.
At the customer end the email design will be as below:
3.9.5 Customer has confirmed GDPR Request
3.9.6 Confirm Your GDPR Decision Making Request
This email template will be used to request the customer for the confirmation of the automated decision-making requests.
Email at the Customer end.
3.10 GDPR GEO Targeting
The online store admin can also select any IP address and country/region for showing selected GDPR functionalities. Thus the admin can hide the GDPR functionalities from the countries where these rules are not compulsory.
3.10.1 GEO Targeting using IP address
Enable/Disable: The store owner can easily activate this functionality.
Enter the IP address: The online store admin can enter the IP address here. The store admin can enter multiple IP addresses by separating them using this |(pipe) character.
Select the GDPR functionality to display: Admin can select the functionalities ie cookie consent bar, user consent check-box, GDPR links in my account page and GDPR header menu link. The selected IP address will be able to view the chosen functionalities.
3.10.2 GEO Targeting using Country
Enable/Disable: The online store owner can enable or disable the functionality easily.
Select Country/Region: Admin can select the country from the drop-down list. Admin can select only region or countries.
Select the GDPR functionality to display: Admin can select the functionalities ie cookie consent bar, user consent check-box, GDPR links in my account page and GDPR header menu link. The selected functionalities will display in those specific countries.
3.11 GDPR CRONS
In order to help the store admin to automate the Data deletion and Purge Request, cron settings are available in the Prestashop GDPR Module. Please refer to the attached screenshot.
Admin can complete the data deletion and Purge Requests by Clicking the “Forgot Request” and “Purge Requests” button or set up the cron to automate the process.
Note: The purpose of these features is to help you to meet the GDPR requirements. Installing this module only does not guarantee merchant sites’ compliance with the new obligations imposed by the GDPR. It is your responsibility to put in place all the necessary measures to ensure you comply.
Thus with the help of this Prestashop GDPR plugin, the admin can easily handle the GDPR requests and allows the customers to update, delete, download their individual details. The General Data Protection Regulation module offers a user-friendly interface and effortless working. The GDPR module for Prestashop addon is highly customizable. There are email templates available for sending the e-mail. There is a choice to opt-in for cookies.
For more information about this Prestashop addon please visit:
The General Data Protection Regulation is not a revolution but it represents a big change for retailers. ~ Giovanni Buttarelli
One of the best things about eCommerce is that it allows even a small enterprise to expand their reach beyond the borders. The recent boost in the industry has definitely brought the entire globe at the fingertip of the e-sellers. However, trading across the border comes with its own complexity. The General Data Protection Regulation of European Union is the latest concern of the industry.
It is mandatory for all the eCommerce that collects or processes the data of EU citizen to comply with the new law. Even if the company is not a part of the EU, but deals into the personal details of the EU citizens is required to adapt to the GDPR. Is the concept of GDPR bugging you? Then, let us start with the basics of the same.
What is GDPR?
GDPR is the new data privacy law of European Union. The law can impact the ways by which the companies collect the personal data of the customers and handle them. GDPR will come into force throughout the European Union on May 25, 2018. GDPR will replace existing data protection laws. The introduction of the regulation will bring about significant changes and will have a wide impact on the organizations worldwide that collects and uses customer’s data.
In case, any company fails to comply with the legislation, it will be fined 4% of turnover or 20 Million Euro, whichever amount is higher. In case of data breaches, the company should report it within 72 hours. Such company can demonstrate their security and data privacy procedures at a moment’s notice.
In short, GDPR gives more rights to the customers on their personal data. People will now get the right to access, correct, delete, and restrict the processing of their data.
What are rights offered to the customers under GDPR?
Listed below are some of the rights that the customers will get once this law comes into force.
The right of access to personal data – The customers can retrieve their personal details that the eCommerce store has by sending a request for the same.
Right to erasure – The customers get an option to have their data anonymized/deleted from the database of the eCommerce site.
Right to data portability – This right facilitates the customers to export their account data in a CSV format and get the same transferred to another data processor.
Email Opt-ins in Form – A lot of companies use a pre-checked ‘Policy acceptance’ box in order to gain the consent of the users. As the customer registers or checks out from the site with the pre-checked box, the site gets the permission use their personal details. The silent or soft opt-in will not be acceptable for GDPR consent after the commencement of the law. Your website forms should ask the customers to check the boxes and provide you the permission.
Right to restrict processing – This option allows the customers to restrict the site from using their personal detail anymore for any purpose.
Right to be Informed – The companies need to inform the customers what are planning to do with the data at the time of collecting their information. The details of ‘where that data will be processed’, ‘how long you plan to hold on to the data’ and ‘the details of their rights under the GDPR’ and other related details should be clearly written in simple language. In short (under Article 13), you need to specify the source and purpose of collecting the customer’s personal data.
Right of Data Rectification – (Under Article 16) The customers can request the rectification of their data if required. You need to know everywhere in the organization where the personal data of an individual is saved, so that, it can be updated if requested by the customer. You should stay of aware of the third-parties that are sharing the information. If the rectification request is initiated by the customer, then, you’ll have to inform the third-parties the rectify the same.
Right to Object – In case, the customer objectifies, the company should immediately stop the direct marketing. A person should not be marketed to is a non-trivial undertaking. Hence, it can be probably achieved by a centralized CRM or by creating a single master list of objectors that all systems can refer to.
Rights relating to automated decision-making and profiling – (Article 22) The processes that use profiling must also allow manual override.
GDPR makes it the responsibility of the site to protect the data of the customers. The organization has to make sure that the store visitors, as well as the customers, can exercise all the rights they have. In order to do this, the eCommerce sites are required to provide a dedicated GDPR account page to the customer. For the Prestashop eCommerce store owners, Knowband offers an easy means to incorporate such a page on their site.
How can Prestashop GDPR plugin help you?
Prestashop GDPR addon allows the store admin to add a webpage on their site that allows the customers to access all their rights. With the help of Prestashop GDPR extension, the customers can request a report of their personal report, ask the admin to rectify or delete the data or limit the access of the details for the site.
The features offered by Prestashop GDPR individual right plugin are mentioned-below:
Right to Access Data: The Prestashop GDPR extension optimizes the eCommerce site and offers a feature to the site’s customers to access the data saved. The customers can request the site to provide the details of their personal information that is saved in the database of the site.
Right to Data Portability: The customers can even request the site to take the data saved with your Prestashop site elsewhere.
Right to be Forgotten: With Prestashop GDPR module, the customers can request the site to delete their personal details from the database.
Right to Rectification: The Prestashop GDPR addon even allows the customers to update the data if necessary.
Right to Restrict Processing (Coming Soon): This feature allows them to restrict the processing of the data. If the customer denies, the site will not be allowed to process the personal data of the customer.
Having discussed the basics of GDPR and the ways Prestashop GDPR extension helps you, it is now time to discuss the impact it can have on the eCommerce industry.
Impact of GDPR on eCommerce industry
GDPR can turn out to be a real game-changer for the eCommerce industry. The online shopping sites collect a wide range of personal data.
Territory Scope
The GDPR applies to every company that processes personal data. Even if the organization that is established outside the European Union, but is indulged in any sort of trading with any individual in the EU, then, it will have to comply with the data protection law. Prestashop GDPR plugin allows you to incorporate you the basic features offered to the customers regardless of your location.
Legal Basis for processing the data
The eCommerce companies regardless of the place from where they operate will have to identify a legal ground for using the data. Valid consent of the customers is required before they process their personal details. As mentioned above, the pre-ticked opt-ins will no longer be acceptable. Hence, the store owners are required to change the UI accordingly.
Transparency in data collection and handling
Under the GDPR, the companies are required to keep the entire process transparent. The eCommerce companies are required to specify the source from where they have obtained the personal details of the customers. Information must be provided about the third-parties with whom the data is being shared. Not just this, the eCommerce companies will have to provide data privacy notices at the time the data are being obtained.
Customer Right
The General Data Protection Regulation empowers the customers of the online shopping sites to have a better control on their personal details. Under the new rule, the customers can ask for their details that the company has. The customers can even ask the site to delete the information or restrict them from using the same. The eCommerce companies have to adapt their site for all these rights. Prestashop GDPR module is one of the ways that can help these companies to stay in sync with the new rules.
Final Say
Prestashop GDPR is one of the ways for the Prestashop store owners to optimize their sites accordingly. It is high time that the companies to kick off their GDPR compliance that deals in the EU or are planning for the same.
