Privacy (GDPR / DSGVO)

Introduction

This page provides you some useful tips how to handle privacy settings for your visitors with powermail. Please note that this page is just a help but not a legal binding declaration.

Cookies

Powermail does not store a cookie per default on the visitors browser since version 6.0. Nevertheless there are two reasons why powermail is forced to store a cookie because of its settings:

  • Marketing Static Template is added: If you are collecting information about page funnel or other useful information about your visitor, powermail needs to store a TYPO3 frontend cookie.
  • Session check - spam prevention: If you turn on a session check via TypoScript, a TYPO3 frontend cookie will be used.

Note: Session check is turned off by default with powermail. In older versions the session check is turned on by default and must be disabled via configuration:

plugin.tx_powermail.settings.setup.spamshield.methods.4._enable = 0

or disable all spamshield methods:

plugin.tx_powermail.settings.setup.spamshield._enable = 0

IP-Address

Powermail does not store the IP-address of the visitor by default since version 6.0. If you want to store this information (to provide some anti-spam or anti-hack-methods) you have to turn this feature on in the extension manager settings.

Note: If you update your TYPO3, the configuration to save the IP-address may be already stored and must be turned off.

Note: If you enable "Marketing" information, the IP Adress is collected and is send via http to ip-api.com. Please refer https://ip-api.com/docs/legal for further information.

The service IP-API can be disabled via: plugin.tx_powermail.settings.settings.setup.marketing.determineCountry = 0 (default setting is off)

Disable storing of mails in database

If you don't need to store mails in the database, you can simply turn it off with a bit of TypoScript:

plugin.tx_powermail.settings.db.enable = 0

If you use the OptIn Feature the mail is stored in the database until the user confirms it. If it is not confirmed you can delete it with a cleanup task after a defined period with the cleanuptask.

Deleting of old mails

See the Scheduler section in the manual to see how you can remove old mails from the database.

Notes

Please consider to not ask your website visitors for more information then you need for the request to meet the requirements of the GDPR.

The GDPR also requires that you only store data with personal information as long as is necessary for the purpose for which it was obtained. This only applies to records containing personal data (which is already the case if you obtained email address or name).