social login and GDPR – my opinion after GDPR update release

Hi,
thank you for your reply.
I undertand that Woodmart simply “passes” data to WC, but the problem is still there. I think – I read a lot about it in last weeks – that a site that uses your social login as is, without asking consent to write personal data in DB, is violating GDPR. So, the real question is: who must do the job to add a consent? You say: not us, you have to code it by yourself or ask WC or I don’t know. Ok, this is an answer and I respect it. Maybe you should add a warning in theme’s docs about it. Woodmart is a so accurate theme and you have such a good support that I’m a little surprised that adding a simple checkbox option to social login could be a problem.
Best regards

The position and the validation?
If I’m not wrong your social login is implemented in LOGIN part, that is outside every GDPR WC and WP updates, and not in the registration part. But it does – or better, it allows to do – something more than simply loggin’ in. Super Socializer plugin (that wisely added in last realease the specific consent checkbox to the social login button, even if their plugin does not store any private data, but it simply makes possible to obtain them), puts the social login button in REGISTER part. But maybe there was problems with WC VALIDATION and they created a specific validation checkbox: no checkbox flagged? -> No social login allowed. Wow.
And they have a smart option: you can force that only already registered users can login with social profiles.
I know, your theme does a lot of stuff and does it in a excellent way. SSocializer plugin does only that thing (or few) and it’s easier to go deeper ( I suggest to have a look at this page http://support.heateor.com/gdpr-and-our-plugins/ ).

Moreover, your message: “Your personal data will be used to support your experience throughout this website, to manage access to your account, and for other purposes described in our…”. IMHO, if it is absolutely forbidden by GDPR to use checkbox already checked – a simple warning message is like a pre-checked checkbox? Maybe could – and GDPR requires explicit consents and to track the given consents, I can’t really understand the utility of you registration addon message.

“So logically, it is applied to our social login as well”. I distrust logic when law is in battlefield. And technically the WC checkboxes do not validate your social login button.

Everybody accepts varying degrees of risk and maybe I’m absolutely wrong. In doubt, I disable your social login and enable a different one. Everybody happy. 🙂

Thank you for your attention,
regards

So do you mean that if the WooCommerce doesn’t have a checkbox but simply put a message that they store your data they are not GDPR compliant?
You say it is enough? I don’t know.
“Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.”
How can you demonstrate that a guy read your message if there is not a validation?
A checkbox is required now for every email form, do you think is not required for a registration form where users put more personal data?
The law is clear
https://gdpr-info.eu/art-6-gdpr/
https://gdpr-info.eu/art-7-gdpr/
A good guide
https://businessbloomer.com/how-to-make-a-woocommerce-website-gdpr-compliant-12-steps/

If you are not using any extra plugins and themes except WooCommerce it will be not compliant with this law?
I don’t know, can you demonstrate that the data subject has consented to processing of his or her personal data?

Ok, I understand.
I hope in that case you will adopt a kind of “super socializer” solution for your theme. It is the only one that fits your theme’s accuracy and quality.

Have a nice day.
G