X-Cart: shopping cart software

X-Cart forums (https://forum.x-cart.com/index.php)
-   News and Announcements (https://forum.x-cart.com/forumdisplay.php?f=28)
-   -   Gdpr - upcoming law for European merchants (https://forum.x-cart.com/showthread.php?t=75544)

xim 05-10-2018 01:52 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by kevinrm
This module has further issues which are being addressed. For one, the click box for new account creation in the pop-up is not clickable. They are working on it but this module is not really ready for live stores at the time of this writing, at least if you wish to allow new customer accounts to be created.


Could you please share the step-by-step instruction about the issue to make it clear (and what is the issue, actually).

kevinrm 05-10-2018 03:45 AM

Re: Gdpr - upcoming law for European merchants
 
Using Crisp White skin with latest GDPR enabled...

1) Go to the upper corner and click "sign in / sign up" and a pop-up will show

2) Click the "Create New Account" link and a new pop-up will show.

3) Try to click on the "I consent to the collection and processing of my personal data" checkbox - it's won't check and you thus cannot create a new customer account.

aim 05-10-2018 04:56 AM

Re: Gdpr - upcoming law for European merchants
 
Hello,

Quote:

Originally Posted by simetria
Ildar, is the integration to a 4.6.1 install the same or close as for a 4.6.6?

-S


An adaption is required anyway for your version.

Quote:

Originally Posted by elmirage001
Does anyone know what XC version the function "geoip_continent_code_by_name" exists?


It is provided by this PHP extenstion
https://php.net/manual/en/geoip.installation.php


Thank you.

aim 05-10-2018 05:08 AM

Re: Gdpr - upcoming law for European merchants
 
Hello,

I have uploaded eu-gdpr-4.5.5.tgz module.

https://secure.x-cart.com/customer.php?area=filearea&target=files_explorer&f older_id=388826

Thank you.

xim 05-10-2018 07:52 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by kevinrm
Using Crisp White skin with latest GDPR enabled...

1) Go to the upper corner and click "sign in / sign up" and a pop-up will show

2) Click the "Create New Account" link and a new pop-up will show.

3) Try to click on the "I consent to the collection and processing of my personal data" checkbox - it's won't check and you thus cannot create a new customer account.


thank you. we will update the add-on in 1-2 days.

elmirage001 05-10-2018 09:29 AM

Re: Gdpr - upcoming law for European merchants
 
Found an issue with 4.6.6

1. Use the Contact Us page to send a message.

2. Then try to Register and the [ ] I give my consent to the processing of "my personal data" box is already checked.

The pre checking of boxes is not allowed.

Triple A Racing 05-10-2018 05:19 PM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by xim
thank you. we will update the add-on in 1-2 days.

......any news on the other item from XC yet? i.e. the ETA of XC 5.3.5.* and all its associated modules being released at Merchant wave?
That includes the XC secure cookie fix, which will also be relevant to anyone who is concerned about GDPR etc :wink:

xim 05-10-2018 11:52 PM

Re: Gdpr - upcoming law for European merchants
 
@Triple A Racing

still in testing.

Triple A Racing 05-11-2018 12:07 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by xim
still in testing

Okay & thanks for the update. Realistically, because it's only two weeks away now, we guess that any XC Store owners that are genuinely concerned about being GDPR compliant from day one, should probably work on implementing that within XC 5.3.4.7 and its associated modules. It would appear that the time that's left, to upgrade to XC 5.3.5.* and then test / adjust / re-test the new setup / features / bug fixes etc probably won't be sufficient for most otherwise. Never say never :D/ but it seems like common sense to us...

aim 05-11-2018 01:45 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by elmirage001
Found an issue with 4.6.6

1. Use the Contact Us page to send a message.

2. Then try to Register and the [ ] I give my consent to the processing of "my personal data" box is already checked.

The pre checking of boxes is not allowed.


It has been fixed for all the modules.

Thank you for the report.

elmirage001 05-11-2018 07:51 AM

Re: Gdpr - upcoming law for European merchants
 
Anybody not thinking of installing should read all of chapter 8 - https://gdpr-info.eu/chapter-8/

kevinrm 05-12-2018 02:02 AM

Re: Gdpr - upcoming law for European merchants
 
1 Attachment(s)
Just when I thought this was fixed….

When I enable this module with Crisp White, credit cards no longer work and there is this error at checkout - no wonder there have been no orders for the last 6 hours. I tried it with AMEX and MC. As soon as I turn the module off, it works.

kevinrm 05-12-2018 02:04 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by elmirage001
Anybody not thinking of installing should read all of chapter 8 - https://gdpr-info.eu/chapter-8/


I'm personally sick of being preached at by Europeans that I had better comply with this law that they unilaterally imposed on the rest of the whole world. I live in Japan, come and get me.

Triple A Racing 05-12-2018 03:31 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by kevinrm
Just when I thought this was fixed…..

Now you understand our desire in Post #15 for this to ONLY be available within a module and not as part of the Core... :mrgreen:

This does still have other effects though e.g. we're on the 3rd Crisp White Skin Module update in the last 7 working days, all of which, are related to the GDPR Module that you're using on your live site. No wonder that XC 5.3.5.* is taking it's time to be tested and released :wink: Have to say we'd much rather XC test everything properly than rush things along, if this is the end result...

DanUK 05-13-2018 10:38 PM

Re: Gdpr - upcoming law for European merchants
 
Aplogies for double posting but it is relevant here (I think!) and not sure cookes and GDPR has been covered.

This is an interesting one:

https://www.itgovernance.eu/blog/en/how-the-gdpr-affects-cookie-policies

as this implies you need to ask for consent BEFORE any cookies are set, and then ability to opt out of cookie collection! How does one achieve that?

and then you have this more recent one:

https://eugdprcompliant.com/cookies-consent-gdpr/

I've seen the ability to switch selected cookies on or off on a website before but does it require cutting edge technology to achieve this on an x-cart installation with third party cookies like Google analytics, affiliate tracking etc? Like this:

www.tuin.co.uk


(watch what happens it the top left hand side, it only lasts a few sexconds but gives you access to the cookie control on the website)

Triple A Racing 05-13-2018 11:08 PM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by DanUK

That's currently a 404 error only
Quote:

Originally Posted by DanUK

This one is easy reading but... it's only an opinion and the author is not the enforcer of GDPR. She says "On the long term, we are positive that these changes will be beneficial for everyone" She probably meant IN the long term but regardless, beneficial in what way? That key explanation is neatly avoided :wink:
Quote:

Originally Posted by DanUK

That's a very slow to load site, but yeah a good illustration of your point. We can only say we will not be doing the same as this example does :mrgreen:

DanUK 05-13-2018 11:22 PM

Re: Gdpr - upcoming law for European merchants
 
Opps, sorry, I have corrected the link! Yes, there are a lot of self proclaimed experts in something that is still not set in stone and open to intepretation...I don't know who to believe :)

kevinrm 05-13-2018 11:33 PM

Re: Gdpr - upcoming law for European merchants
 
They always start these things with easy rules but the rules never get easier as time goes by, only more bureaucratic and complex which is why I resist it as much as possible. What a headache...

aim 05-14-2018 12:16 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by DanUK


Hello,

By the way,

you have to replace the values highlighted in yellow with your company information.
https://www.tuin.co.uk/Gdpr-statement.html

Thank you.

DanUK 05-14-2018 12:53 AM

Re: Gdpr - upcoming law for European merchants
 
I get a 403 on that..is it the correct domain?

aim 05-14-2018 04:16 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by DanUK
I get a 403 on that..is it the correct domain?


It seems you use the same links for the
I accept the ..... and "Privacy statement"
and
I give my consent to the processing of "my personal data"
texts on the page
https://www.tuin.co.uk/register.php

93 code means that the static page https://www.tuin.co.uk/Gdpr-statement.html is disabled in the admin area.

Thank you.

DanUK 05-14-2018 04:35 AM

Re: Gdpr - upcoming law for European merchants
 
That is not my website, lol!

DanUK 05-14-2018 04:46 AM

Re: Gdpr - upcoming law for European merchants
 
I feel a bit stupid as the module (which I had not enabled) in our version of X-Cart called EU Cookie Law apears to give the cookie control I was asking about..however, I am not sure how it works with 3rd party cookies from other modules that have been intergrated into the cart outside the stock software...

aim 05-14-2018 05:05 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by DanUK
That is not my website, lol!


I didn't checked the site's owner, sorry for bothering you. I have passed the info to our support dep.

Quote:

Originally Posted by DanUK
I feel a bit stupid as the module (which I had not enabled) in our version of X-Cart called EU Cookie Law apears to give the cookie control I was asking about..however, I am not sure how it works with 3rd party cookies from other modules that have been intergrated into the cart outside the stock software...


https://www.x-cart.com/blog/gdpr.html
The GDPR-friendly addon is based on the EU cookie law addon which used to be available as core functionality.

3rd-party cookies are related to "Other" cookies.

"Other" cookies are all the cookies that are not listed in the $config['EU_Cookie_Law']['functional_cookies'] and $config['EU_Cookie_Law']['strictly_necessary_cookies'] variables. For example, __utma, __utmb, __utmc (Google Analytics).


https://help.x-cart.com/index.php/X-Cart:EU_Cookie_Law#X-Cart_cookies

Thank you.

Triple A Racing 05-14-2018 07:24 PM

Re: Gdpr - upcoming law for European merchants
 
XC 5.3.5.3 and many associated modules have now been released via Merchant wave. The upgrade process ran fine for us with no problems, but now we'll need to dev store test everything, including all of our own modifications etc before taking this live.

FWIW. If you are still planning to run the XC GDPR Module on your store, at the time of making this post, we double checked and it still says "...Compatible: 4.5.x - 4.7.x, 5.3.4.x Don’t see your version? Contact us..." So XC will either update the module and / or correct this text validation soon, but if you're keen to use this module, upgrade to 5.3.5.3 and use everything live , you may need to choose which comes first.... until XC tell us more... :D/

kevinrm 05-15-2018 05:22 AM

Re: Gdpr - upcoming law for European merchants
 
GDPR module kills our checkout on 5.3.4.7 and we have to keep it off. We got a ticket in and they're working on it. No matter what version you use, make sure you can actually checkout when this thing is enabled.

elmirage001 05-15-2018 07:41 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by aim
It has been fixed for all the modules.

Thank you for the report.


4.6.6 version fix works great! Thank you so much!


Paul

aim 05-15-2018 08:13 PM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by elmirage001
4.6.6 version fix works great! Thank you so much!


Paul


Hello Paul,

Glad to hear it.

Thank you for your feedback.

snowboard 05-16-2018 02:37 AM

Re: Gdpr - upcoming law for European merchants
 
Hi all,

I have put this as a question for feature request, though am not sure if others can anwswer this for me.

I noticed that with Geolocation addon, you can set the Cookie popup to appear in EU countries only.

However, I am wanting to be able to set whether the checkbox that appears on the checkout page near the payment button regarding consent to personal data being collected, being shown only in EU countries?

On the settings for GDPR the countries seems to be referring only to the Cookie popup?

Thanks!

kevinrm 05-17-2018 01:28 AM

Re: Gdpr - upcoming law for European merchants
 
Yeah, that would be VERY nice!

Triple A Racing 05-17-2018 02:08 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by snowboard
..I am wanting to be able to set whether the checkbox that appears on the checkout page near the payment button regarding consent to personal data being collected, being shown only in EU countries?.

It's a good question... especially as the XC Module demo pics currently show an (example) order being delivered to Los Angeles, USA (...that well known NON-GDPR region :wink: ) Yet the checkbox you mention is right there on display...

It might be too do with the old chestnut of #VPN though possibly? e.g. What use is Geolocation if customers use #VPN and their IP appears to be in Fiji NOT France thus obviating the initial country verification stage of the GDPR module? Not sure if the final verification and therefore the checkbox you mentioned, is based on the selected delivery address country (in which case, it's still not fully suitable yet as the XC demo pic proves) or, if that verification is also IP based, in which case it is still appears to be potentially flawed...

snowboard 05-19-2018 05:28 AM

Re: Gdpr - upcoming law for European merchants
 
Good to hear the comments.

So basically we need to show it if IP address is EU, or if shipping address is EU, or if Billing address is EU...?

Triple A Racing 05-21-2018 05:35 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by snowboard
....we need to show it if IP address is EU, or if shipping address is EU, or if Billing address is EU...?

That's probably a Non-X-Cart question we think? X-Cart are providing an optional module, that may or may not be useful, depending on other factors. i.e. as a store owner, you have to decide yourself, as to "who, what, where, when, why, how" etc with regard to GDPR and your own level of interpretation / compliance with it (or not). That's how we see it currently...:wink:

Tim Soles 05-22-2018 03:08 AM

Re: Gdpr - upcoming law for European merchants
 
We are currently testing the GDPR module in 4.7.9 using the Ideal Responsive skin, but we are not getting the Newsletter tick boxes at the bottom of the registration page.

The screenshot on the x-cart blog announcement shows a Newsletter Heading at the bottom of the page followed by 4 tick boxes.

We can see that this is achieved from Content, News Management, News Lists and whilst we can get this working using the Fast Lane Checkout, the Newsletter tick boxes do not show on the registration page using the One Page Ajax checkout.

Have we missed something, or is this not working as intended on the One Page Ajax checkout?

aim 05-22-2018 11:49 PM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by Tim Soles
We are currently testing the GDPR module in 4.7.9 using the Ideal Responsive skin, but we are not getting the Newsletter tick boxes at the bottom of the registration page.

The screenshot on the x-cart blog announcement shows a Newsletter Heading at the bottom of the page followed by 4 tick boxes.

We can see that this is achieved from Content, News Management, News Lists and whilst we can get this working using the Fast Lane Checkout, the Newsletter tick boxes do not show on the registration page using the One Page Ajax checkout.

Have we missed something, or is this not working as intended on the One Page Ajax checkout?


Hello,

This is the expected behaviour.

Mailchimp module is recommended instead of News Management.

Thank you.

elmirage001 05-23-2018 05:58 AM

Re: Gdpr - upcoming law for European merchants
 
Quote:

Originally Posted by Tim Soles
We are currently testing the GDPR module in 4.7.9 using the Ideal Responsive skin, but we are not getting the Newsletter tick boxes at the bottom of the registration page.

The screenshot on the x-cart blog announcement shows a Newsletter Heading at the bottom of the page followed by 4 tick boxes.

We can see that this is achieved from Content, News Management, News Lists and whilst we can get this working using the Fast Lane Checkout, the Newsletter tick boxes do not show on the registration page using the One Page Ajax checkout.

Have we missed something, or is this not working as intended on the One Page Ajax checkout?



We are using News Management and modified it to require the user to login to be able to subscribe.

In News_Management/customer/news_archive.tpl

Code:

{if $login ne ""}

    <form action="news.php" name="subscribeform" method="post">
    .
    .
    .
    </form>

{else}


  <p><b>Please <a  href="login.php">Login</a> or <a  href="register.php">Register</a> to subscribe to our newsletter.</b></p>

{/if}


cflsystems 05-25-2018 10:11 AM

Re: Gdpr - upcoming law for European merchants
 
Since its first release for XC5 this module had maybe 5 revisions.
Every time I go to my test site I am prompted to install an upgrade of the module. Not one time there was a changelog what the new release is about or what bugs/improvements/fixes is covering.
In fact there is no changelog for the module at all.

As a matter of fact so do other QT modules - either completely missing changelog or not having one some release.

Now considering this is a QT module, it is the QT controlled marketplace and QT sets the rules the lack of changelog to explain what is different from previous version is somewhat disturbing.

Lately I have the feeling the quality control in QT software has gone way down. Not sure if this is due to not so popular XC5 platform or drop of sales or what?

Please - include changelog. Otherwise versioning, restrictions, rules, etc are useless if the one that enforces them is not following them.

kevinrm 05-25-2018 06:29 PM

Re: Gdpr - upcoming law for European merchants
 
I can say that this very last version fixed cart checkout - customers were met with an error popup when GDPR was enabled prior to that. This module is finally working, at least for us anyway...

elmirage001 05-28-2018 01:26 PM

Re: Gdpr - upcoming law for European merchants
 
Hello Everyone,

Before we get one... How do we process a "Right To Be Forgotten" request?

Thanks!

Paul

cflsystems 05-28-2018 04:34 PM

Re: Gdpr - upcoming law for European merchants
 
Advice them to:
1. Delete FB from your phone and stop using it all together.
2. Delete Twitter from your phone and stop using it all together.
3. Use tor browser or this is also good - https://duckduckgo.com/
4. Stop using Amazon on your phone.
5. Always log out and close all apps/programs when not in use.
6. Same applies to all other so called free services like LetGo, Whatsup, Skype, etc.
7. Turn off any location service on your phone.
8. Trash all home assistant devices you have - echo, google, etc.
9. Anything that has the word "smart" in its name or description is a potential tracking device.

There is no free lunch period. You either pay cash for it or with your personal/financial data or both.
They want to be forgotten - then they need to live in the 80s era when TV was TV and phone was a phone to make and receive calls not to track every move you make and every thought you have.

With that said as far as XC is concerned you can simply delete their account and orders and customer info is gone.
But if you use GA, FB, etc to track revenue, purchases, clicks, you need to do whatever needs to done from there....


All times are GMT -8. The time now is 05:23 AM.

Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.