Privacy & GDPR Options

The Privacy & GDPR Options is used to configure options related to customer privacy, as well as account information related to the European Union General Data Protection Regulation (EU GDPR or GDPR). The GDPR applies to anyone doing business with customers in the European Union. It can be reached through the Configure / Privacy & GDPR Options menu option.

SOLO Server Shared or Dedicated URL customers who subscribe to the GDPR Module are able to use our services to process data regulated by the GDPR. This entails support for GDPR related requests from data subjects (your customers) and regulators.

General Settings

Privacy Policy URL: The URL to the privacy policy on your web site. (e.g. https://your.domain.com/privacy)
Privacy & Terms HTML: HTML markup regarding privacy policy and/or terms and conditions to be displayed on customer registration pages for new customers. When populated, this will be displayed alongside a checkbox on the cart and customer license portal registration page which must be checked in order for the customer to continue. See the sample content and screenshot below.
Enable Offer Checkboxes: If this is checked, checkbox options asking the user to opt-in to offers for products and partners (corresponding to the Notify Product and Notify Partners settings on the customer) will be displayed on the shopping cart registration page and the Customer License Portal customer edit page.
Offers Default Checked: Available when Enable Offer Checkboxes is set. When checked, for new customers, the offer checkboxes will be checked by default. Note that for GDPR compliance, this setting should NOT be enabled.
Offer Product HTML: HTML markup for the label for the Offer Product checkbox displayed on customer registration pages. When specified, this will override the default label of "Notify me of product updates related to my purchase".
Offer Partners HTML: HTML markup for the label for the Offer Partners checkbox displayed on customer registration pages. When specified, this will override the default label of "Notify me of new products and other special offers".

Privacy & Terms HTML Sample Content

HTML

We respect your privacy, and only ask for information that is needed to process your order and manage your license. 
Our customer data is a valuable part of our business, and so we protect it, treat it as confidential, and do not sell it on.
Please check here to agree to <a href="https://www.company.com/privacyandterms/" target="_blank">our website terms and privacy policy</a> and continue.

This will appear on the cart registration page as follows:

GDPR Module / GDPR Settings

The GDPR Module is an opt-in feature on SOLO Server instances hosted by SoftwareKey and is referred to as the GDPR Module, while for SOLO Server Self-Hosted the feature is included as part of the standard feature set and is referred to as GDPR Settings.

Data Processing Addendum

For SOLO Server Shared or Dedicated URL users, upon first reaching the Privacy & GDPR Options page, you will be prompted to review and agree to the Data Processing Addendum (DPA), which is an extension to the standard Terms of Service outlining the obligations between SoftwareKey and your organization regarding the GDPR. To begin the opt-in process:

Click the Review DPA and Request Pricing button, which will open a dialog.
Review the DPA in the dialog (for easier reading, click the View in New Window button to view a larger version).
Check the I fully read, understand, and agree to the DPA above and I accept the additional monthly fee of... checkboxes.
Click the I Agree button.

We will contact you within two business days regarding the next steps for enabling the GDPR Module. Once enabled, the additional fields outlined on this page will become available. You will need to enter information for the following fields:

Privacy Policy URL
Categories of Data Processed
Categories of Data Subjects
EU Representative (if applicable)
Data Protection Officer (DPO) (if applicable)

On occasion, it may be necessary to update the DPA, in which case upon next viewing the page, you will be prompted to re-accept the DPA. You can also review the DPA at any time using the Review DPA button.

Categories of Data Processed and Data Subjects

Categories of Data Processed: A list of all categories of data processed (one per line), such as contact data (e.g. email, address), biographical data (e.g. name), and financial data (when using the shopping cart) is assumed as applicable, including any special categories (e.g. religious or political beliefs, etc...).
Categories of Data Subject: A list all categories of data subjects processed above (one per line), such as customers, prospects, employees, patients, etc.

EU Representative

If your organization has appointed a representative in accordance with Article 27 of the GDPR, contact details for the representative can be entered in this section.

Data Protection Officer (DPO)

If your organization has formally appointed a Data Protection Officer (DPO), the contact details for the DPO can be entered in this section.