GDPR Issue (critical): Phone & Email on Shipping Label

  • Resolved picadera

    (@picadera)


    7 years, 9 months ago

    Hey!

    Overall a great plugin. But by default you add the email and phone number to the shipping labels. This is not compliant with GDPR rules as it is not needed to fulfill shipping orders.

    To be honest, I think this is quite critical and you should fix it asap as it puts all your customers at risk.

    Best,
    Philipp

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter picadera

    (@picadera)

    7 years, 9 months ago

    Can you provide a solution to fix this ?

    Plugin Author Progressus

    (@shadim)

    7 years, 9 months ago

    Hello,

    If you would like to remove shipping “phone” and “email”, you can add these two pieces of code to your child theme functions.php file:

    https://gist.github.com/shadimanna/d1c32e93dad8008dddd9151b69e0994c
    https://gist.github.com/shadimanna/a7bc62eb3dc50145fcd331023c022cf5

    Please let us know if this fixes the issue.

    Plugin Author utzfu

    (@utzfu)

    7 years, 9 months ago

    Hey Philipp,

    thanks for the note on GDPR and thanks @shadi for the fix. Just one quick comment: Many countries do require a contact possibility to the recipient of a shipment (most often Phone, often email and in other cases also your personal ID or even Passport pictures) – this depends fully on the country your customer wants its shipments to be sent to. In case you are – in general – not providing those information, shipments might get stuck in customs!

    What is GDPR stating on usages of Names and address data? There is personal data (as e.g. the Name and Address) on a label and those are also required from a delivery perspective – please do not consider removing those too 🙂

    Thread Starter picadera

    (@picadera)

    7 years, 9 months ago

    Hey @utzfu and @shadim

    Many thanks for the very quick response. I implemented the fix and it seems to work.

    Regarding GDPR: It states that no personal data should be transmitted or be made publicly available – unless it is needed for business reasons. However, in Germany the DHL never ever uses email or phone to fulfill a delivery. Address and name are enough. So in theory an online-shop could be made liable for unnecessarily transmitting that information to the DHL.

    It’s a long shot but it’s better to be safe than sorry. German lawyers do like to issue legal warnings (which usually cost 1000 – 3000 Euros) to online shops.

    • This reply was modified 7 years, 9 months ago by picadera. Reason: forgot to mark it as solved
Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘GDPR Issue (critical): Phone & Email on Shipping Label’ is closed to new replies.