search

mhirdes / go_maps_ext

Google Maps Extension for TYPO3
MIT License
21 stars 31 forks source link

Not GDPR compliant #97

Closed ProWebs closed 2 years ago

ProWebs commented 2 years ago

The plugin allows google maps to reload google fonts from google server.

This means that the plugin is no longer legally compliant and the websites that use the plugin can be warned.

mhirdes commented 2 years ago

Thanks for your comment. First time that I hear that. Is it a problem when Google uses a Google Service? The User have to agree to load the map from Google, right?

The solution would be to explain that the map and the font is loaded from Google or what else?

tamm78 commented 2 years ago

Hello, our company has now received a warning from a law firm in this regard. We have taken a closer look at the problem. It is true that you can configure the map so that it is only loaded after the tracking has been approved (optin). However, the problem is that regardless of this decision, the extension embeds Google Fonts in the head of the page (Roboto + Google Sans). The privacy violation already takes place before the consent and thus the extension is not GDPR compliant. Can you integrate the Google Fonts so that they are only loaded with the map and not before? Thank you!

ProWebs commented 2 years ago

Its not a problem if google use googles services if your are on google, but if you are on another website and this site provides google your personal ip without your agreement its a big problem.

It would be great if there is a configuration for disable loading google fonts from google server or to replace them with local fonts.

mhirdes commented 2 years ago

We don't load any Google Fonts. You can search in this repository for Roboto or Google Sans and you'll not find anything. Please check your website. If you want we can take a look together. Therefore write me on slack. But I guess you mention an issue here that doese not belong to this extension.

ProWebs commented 2 years ago

You especally not but google maps does.

ProWebs commented 2 years ago

Take a look here: Unbenannt

https://www.digitale-fotografien.com/anfahrt

I don't know if there a api solution to solve it from your extension.

mhirdes commented 2 years ago

I still don't get it. May you can contact me on slack, call me +49 341 / 35 00 25 33 or write me a mail.

But before the map is loaded, you have to ask the user. Therefore you can set the settings.preview.enabled. Then the JS is loaded, when the user confirms. And if the user confirms to load a Google Map, then he uses already a Service from Google.

mhirdes commented 1 year ago

@ProWebs if you have still troubles with go_maps_ext please contact me. All in all you can easily configure the extension to load the map only after the user confirms. Also we don't load any Google Fonts.

ProWebs commented 1 year ago

Is there a manuel for "loading the maps only after user confirmation"? You don't load google fonts but google maps do it.

ProWebs commented 1 year ago

You also had a solution for made for one of your customers using the same extension. But i don't see any option to activate it. https://www.zp-schulung.de/anfahrt/

Maybe you will update the extension with this feature in future or add a tutorial for setup it.

mhirdes commented 1 year ago

1.) see https://github.com/mhirdes/go_maps_ext/issues/78

It is not possible to provide a one click solution out of the box, that works with every consent management tool.

We use our own developed consent tool, because in our opinion, to use an external is also not very GDPR compliant. Because when the tool is loaded the user also provides his IP address.

This consent tool is not developed to be published right now.

2.) Again, to load a font is ok, when also the map is loaded from Google. Important is, that the user confirms it. Google Font and Google Maps belongs both to Google.

3.) Again, May you can contact me on slack, call me +49 341 / 35 00 25 33 or write me a mail.