GDPR/DSGVO conformity

[Collie-IT]

If I will use leaflet map on a German site, the user must diside if he will speak with the tile server.

I think it is posible to include in the

class.map-shortcode.php

A option like

if(!array_key_exists("showMap", $_GET) && $_GET["showMap"] != 1){ global $wp;

		return "<div class=\"allowMap\" > <a class=\"showlink\" href=\"".home_url( $wp->request )."?showMap=1\"> Karte anzeigen*</a></div>
		<div class=\"infotext\" ><span>*Sie sind einverstanden, dass eine Verbindung zu Openstreetmap aufgebaut wird. Weitere Informationen erhalten Sie unter <a href=\"/datenschutz/\"> Datenschutz</a></span></div>";
	}else{
		 return $this->getDiv($height, $width) . $this->wrap_script($script, 'WPLeafletMapShortcode');
	}

and in the css section something like

.allowMap{ width:100%; display: flex; align-items: center; justify-content: center; color:white !important; height:500px;

}

.infotext{ width:100%; height:50px; display: flex; align-items: center; justify-content: center; top: -15rem; position: relative;

}

.showlink{ padding: 2rem; background: #45acae; color: white!important; border-radius: 5rem; font-size: 2rem; font-weight: bold; }

Thanks for Support.

[sunkiddo]

Hi, thanks for the tip. But I'm wondering - there some cookie banners that prevent these maps from showing up without consent already from the start? What is the difference to this solution? Did you integrate the tile server on your own server? I'm showing the leafletmap with my gpx files on almost every blogpost, however, the cookie banner has too little space to say it all. So I'm looking for a solution with better usability.

[Collie-IT]

The problem is that most cookie-banner are not equiped for leaflet-maps or don't support the openstreedmap settings. This solution is for inside the leaflet-map box. So that the leaflet-maps don't have to releay on cookie-banner (that may not work.) The Tile-Server is external as normal, but the user was ask. If I could dream/or have the time I would make options in the optionpage for the diffrent points.

[bozdoz]

Could you explain how this is related to GDPR?

[Collie-IT]

Because a request of tiles from the tile server builds a connection to the tile server. To process the request the IP address is required and the tiles where send to the IP. This is a data processing according to GDPR. You need an allowness or an mandate for this.

[bozdoz]

Maybe just add the disclaimer here: https://wiki.osmfoundation.org/wiki/Services_and_tile_users_privacy_FAQ

Also: This GDPR stuff is madness.

[Collie-IT]

The disclamer is not enough because the user must accept or give allowness befor a connection is made.

[sunkiddo]

it would be really great if there's a way to solve or integrate the leafletmaps gdpr (EU/DE) conform in the standard cookie banners without the hacks. I'm using a complianz cookie banner, but am having problems to allow the layers to show, thus why I'm looking at other solutions.

[hupe13]

Maybe this helps: https://github.com/hupe13/extensions-leaflet-map-dsgvo

[olpo24]

Maybe this helps: https://github.com/hupe13/extensions-leaflet-map-dsgvo

Thank you for this, this works fine!