Processing
Processing is the operations you perform on customers' personal data that you must inform the customer about and possibly ask for consent. The GDPR privacy regulation requires that the customer be presented with a notice for each processing. In the admin under Settings > Privacy > Processing you can define which processing you perform and, if they are based on the data subject's consent, you can indicate whether consent is mandatory.
Processing can concern:
- Customers: data that the customer enters when registering on the site. These are the data you will then find in the customer record in the admin. Processing on customers is shown to the customer on the site registration page and in the reserved area where the customer can change their billing address.
- Orders: billing and shipping addresses of an order. Processing on orders is shown to the customer when they provide their billing and shipping addresses to complete an order. It is also shown on the order print page that the customer can access in their reserved area.
- Quotes: billing and shipping addresses of a quote. Processing on quotes is shown to the customer when they make a quote request. It is also shown on the quote print page that the customer can access in their reserved area.
Show processing on the site
For processing and consent requests to be shown to customers on the site, your template must be prepared. Unless you are using one of the latest templates already prepared, you can follow the instructions on how to update a template to the 2018 GDPR version.
The following table lists the information that can be configured for a processing:
| Title | Processing title. Examples: "Order management", "I consent to receive offers and news by email". |
| Description | Processing description. Examples: "The data provided will be processed solely to manage the order...", "You will receive one email per week with our offers and news...". |
| Details page | Site page with all details about the processing. It could also be the privacy notice page. You can create a dedicated page in the admin under Website > Pages. |
| Legal basis | Legal basis on which the processing is based. The legal basis must then be reported in the privacy notice as required by the GDPR privacy regulation. If the legal basis is Consent then you will be able to indicate whether consent is mandatory. |
| Consent is mandatory | Indicates whether the customer must give consent in order to proceed with site registration, an order, or a quote request. This item is shown only if the legal basis is based on consent. |
| Show only to unregistered customers | Indicates whether the processing should be shown only to unregistered customers. This item is available only for processing on orders and quotes. |
The title, description, and text present on the details page together represent the processing notice that must be presented to the customer at the time of collecting their personal data as required by the regulation.
Add a processing
- Go to the Settings section.
- Go to the Privacy subsection.
- Click New next to Customers, Orders or Quotes depending on whether the processing concerns customer record data, orders, or quotes.
- Fill in the fields as desired.
- Click Add.
Show or hide a processing
- Go to the Settings section.
- Go to the Privacy subsection.
- For the processing to show or hide on the site, click the control in the top right.
Delete a processing
Warning
Deleting a processing will also delete all consents that were granted or granted and then removed for this processing. To keep consents, instead of deleting the processing you can stop showing it on the site.
- Go to the Settings section.
- Go to the Privacy subsection.
- Click × next to the processing to delete.