Participant Database und dsgvo- Fähigkeiten

Hallo und guten abend Community, setzt von euch jemand die participant dataData ein und hat mir diesem Plugin schon Erfahrungen bzgl der dsgvo-Fähigkeiten gesammelt?

hallo u. guten Tag,

werde mich mit dem Thema auseinandersetzen - denn ich setze die Particpations-DB ein u. will vorab klären wie sich das Plugin mit den im
Zusammenhang mit den DSGVO-Bestimmungen verhält.

Die DSGVO hat seit Einführung ja für sehr viel Diskussionen gesorgt - die Abmahnwellen sind zwar ausgeblieben aber dennoch sollte man die Bedeutung nicht unterschätzen.

zum Glück hat Roland, der Entwickler der Participants-DB eine ausführliche Seite zum Thema DSGVO-Kompatibilität hergestellt auf der viele Informationen bekanntgegeben werden:

https://xnau.com/work/wordpress…pants-database/

Zitat

Complying with the new European General Data Protection Regulation is potentially a big deal for your website. If you have any users from the European Union or European Economic Area (even if they are not in Europe at the time) they and their personal information is protected by the GDPR. This would potentially include any site that offers an open registration form.

[size=14]What is Personal Information?[/SIZE]
I do not know what kinds of information can be considered personal and therefore protected by GDPR, and in many ways this is an open question that will eventually be decided in the courts. To be on the safe side, any information submitted by a user should be considered personal information, including meta values such as an IP address.

[size=18]Key Points of the GDPR that May Affect Participants Database[/SIZE]
Since Participants Database does (in most cases) store personal information, it is subject to the GDPR. Here are what I see are the key points to address:

• clear statement of use – a form that obtains consent to use personal data must include a clear, honest and unambiguous statement of how the data will be used. This can possibly be on a separate page where you have published your privacy statement.
• evidence of consent – you must have a record of the user’s consent to use their personal data. This should probably include a date and an IP address so that you can show that the person submitted their consent on a specific occasion.
• opt-in only – you cannot use an opt-out checkbox or an opt-in checkbox that defaults to being checked. The user must take the step of consenting to the use. This is critical.
• means to see what information is stored – you need to be able to provide to your users, on request, all of the data you have stored for them.
• ability to delete data – you need to provide a way for a user to have all of their personal information deleted from the database.
• server security – you need to take care to protect the security of the data stored on the server. In most cases, this will be up to the hosting provider, but if you are managing your own server, you’ll need to demonstrate that the server has been secured against data breaches. Installing a security plugin is a very good idea.
• notice of data breach – if you do experience a hack or data breach, you are required to let your users know their data may have been compromised.

vgl. https://xnau.com/work/wordpress…pants-database/

Werde mich in das Thema einarbeiten.

VG