fakturama icon indicating copy to clipboard operation
fakturama copied to clipboard

GDPR compliance

Open lcmen opened this issue 6 years ago • 6 comments

@qoobaa any experience with that?

I believe we need to modify a few things here and there (i.e. additional info on the page, explicit confirmation, etc.) to make the app compliant with new regulations.

lcmen avatar May 31 '18 21:05 lcmen

Yeah, it'd be nice to handle it somehow, but I haven't had a chance to dig into the topic yet. As far as I know, most of the data stored in Firebase is publicly available (like company details, tax numbers, addresses, etc.), unless someone issues invoices for a non-company buyer.

I'll try to find someone who's more informed in this topic and ask, rather than figuring it out on our own, since it may be quite time consuming and boring.

qoobaa avatar May 31 '18 21:05 qoobaa

I'll try to find someone who's more informed in this topic and ask, rather than figuring it out on our own, since it may be quite time consuming and boring.

That would be great.

lcmen avatar Jun 01 '18 18:06 lcmen

I'm pretty sure we're mostly GDPR compliant. Fakturama allows to "be forgotten" since the beginning (there's a red "delete all data" button"). We'd need to add a page informing users that all data we collect is used ONLY to issue invoices, and we do not process it anyhow. There's also a need to have a "data administrator" that people can contact. I'd just create an email address like [email protected], so people can contact us when they e.g. loose credentials and want to delete the data.

qoobaa avatar Jun 19 '18 07:06 qoobaa

The address set up.

qoobaa avatar Jun 19 '18 07:06 qoobaa

Sounds good. @qoobaa have you seen any good templates for data processing which we can use?

lcmen avatar Jun 29 '18 21:06 lcmen

Not yet, I'm swamped with work recently. I'll try to do some research when I have more time.

qoobaa avatar Jul 01 '18 18:07 qoobaa