JoomShopping: user data still remains after user has confirmed the removal

driver6661

Hi,
I found an important issue in JoomShopping plugin.
I use JoomShopping and AcyMailing as 3rd party extensions and installed their plugins for GDPR component.

After a user had confirmed the removal by clicking on the URL they got via email, the core user data and AcyMailing data are removed, but... I still see user's orders and shipping address.
This data should be removed too.
Please fix this issue.

Thanks.

saguaros

driver6661

Hi,

I'm afraid that the orders can't be removed because they are required for the invoice of the providers.

driver6661

saguaros all invoices can be found in payment gateway service (PayPal, Stripe, 2Checkout and etc.)

According to GDPR regulation, the right to be forgotten means full removal of user data.

Could you, please, add a new option to plugin settings allowing to control this feature? In such way the site administrator will decide should invoices / shipping address be removed or remains...

paulus1031

As I read the GDPR this information would need to be kept for tax purposes both in potential money owed as tax / value added tax and as accounting obligations to national accounting / tax authorities

You would also be obliged to provide a client / customer with their purchasing history

GDPR does have clauses which cover this

Cheers
Paul

driver6661

paulus1031
According to GDPR, "the right to be forgotten" means full removal of privacy data even from backups (which is crazy!).
The site administrator can store invoices locally on the HDD as .PDF files or can get them all in payment service like PayPal, Stripe.
Anyway, could you, please, make an option to allow site administator to decide should invoices be deleted from JoomShopping or still remain?

Thank you.

paulus1031

https://gdpr-info.eu/art-17-gdpr/

I did mention this briefly to my accountant as GDPR is impacting businessesin lots of different ways

He did say it would be madness from a tax / legal view point to delete invoices

Users do also have the right to request information and it would not be possible if invoices were deleted.

I'm not sure if your tax law is the same in this country but documentation does have to be kept for years

paulus1031

With your question - you are asking to delete the data stored on the website from this component
Prior to this deletion you would export data to a hdd?

With exporting the data you would need to secure the data - you would have to take many steps to secure this data

I don't think this is a feature many users would use and in some situations could be really dangerous I'm afraid

Cheers
Paul