Send to a friend and review notifications not legal in Germany

This topic contains 8 replies, has 4 voices, and was last updated by  Birgit Wilde 6 years, 1 month ago.

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket
  • Author
    Posts
  • #420229

    Birgit Wilde
    Full Member
    Post count: 236

    Hello there,

    I am setting up a geodirectory for the German market. Now I see, that the following two features are not allowed be used like this is Germany:

    1) Send-to-a-friend: When a person A wants to send a listing to a friend B, person A enters the email address of friend B as well as his/her own email address. The notification to friend B (“This site might be interesting for you…”) however, does not come from the email account of person A but from my company’s account. The problem is: Unrequested emails from any company to any private person are illegal in Germany.

    a) Is there a way to arrange it, that the notification comes from the email account of person A (why otherwise should it be necessary for person A to enter his/her email address)?
    b) If not, is it possible to deactivate this particular feature? (I would prefer the first solution).

    2) Review-notification to owner of listings:
    Whenever somebody publishes a review for a listing, the owner of the listing gets an email notification which contains the user name, IP address and email address of the person who wrote the review. This is illegal in Germany due to data security – name, IP-address and email address are private data which must not be forwarded without prior consent of the owner of these data.

    a) How can I adjust the notification so that it only says in general that a review regarding his/her listing has been published (not telling from whom it is coming)?

    I know, this is all very German, still hoping for your support 😉
    Birgit

    #420235

    Guust
    Moderator
    Post count: 29970

    I’ll get one of the developers to have a look at your question after the weekend.
    Thanks

    #420305

    Alex Rollin
    Moderator
    Post count: 27815

    Hello!

    1) Send-to-a-friend: When a person A wants to send a listing to a friend B, person A enters the email address of friend B as well as his/her own email address. The notification to friend B (“This site might be interesting for you…”) however, does not come from the email account of person A but from my company’s account. The problem is: Unrequested emails from any company to any private person are illegal in Germany.

    a) Is there a way to arrange it, that the notification comes from the email account of person A (why otherwise should it be necessary for person A to enter his/her email address)?
    b) If not, is it possible to deactivate this particular feature? (I would prefer the first solution).

    Send to a friend can be disabled in price packages, or with CSS. Let us know if you need more help with that.

    The sending email ‘from’ users is outside of the scope of what GeoDirectory does at this time, and that is primarily because of similar rules about how hosts/servers treat site email (email sent from multiple ‘from’ addresses will create an even higher likelihood that the domain is spam-listed, and the domain points back to the host, reflecting badly on the host itself).

    We will look into this for future versions, though it is much more likely that this particular feature is accomplished by members through a customization that meets the needs for their own particular site requirements, should they want the site itself to ‘send’ the email ‘from’ the visitor.

    There is a simple workaround, though. You can add another email field to the listing. Then the visitor can click on it and send an email from their own email program. https://wpgeodirectory.com/docs/core-place-settings/#email

    This simple workaround is not recommended because it will expose the listing email. This is another reason this functionality is not yet present; it is because in 9/10 implementations, sending ‘from’ the visitor means exposing the listing email to bots and web crawlers that are collecting mailto links.

    2) Review-notification to owner of listings:
    Whenever somebody publishes a review for a listing, the owner of the listing gets an email notification which contains the user name, IP address and email address of the person who wrote the review. This is illegal in Germany due to data security – name, IP-address and email address are private data which must not be forwarded without prior consent of the owner of these data.

    a) How can I adjust the notification so that it only says in general that a review regarding his/her listing has been published (not telling from whom it is coming)?

    Third party plugins can be used to edit the WordPress comments notification emails. Notifications are not sent to listing owners, only the site admin, so sharing IP address with “3rd parties” is not exaclty an issue at this time, though we will keep the regulation in mind for future versions. It is the responsibility of site owners to update their site terms to inform their visitors. However, at this time, GD as a discrete plugin does not share any user information with listing owners that is not directly provided by the visitor themself in the ‘send enquiry’ form. That said, every site owner must cnsider that this same statement does not apply to integrations like Google Analystics and Facebook or other third party integrations.

    It should also be noted that this IP and email functionality is actually part of WordPress, not GD, as GD simply uses WordPress comments for reviews (but adds additional rating information), and that notifications are, by default in WordPress, only sent to site admins, not listing owners.

    Also, here is an article about how to stop using IP Address in comments: http://www.wpbeginner.com/wp-tutorials/how-to-stop-storing-ip-address-in-wordpress-comments/

    If your questions have not been completely address, please write back and let us know more about how we can help.

    #420348

    Stiofan O’Connor
    Site Admin
    Post count: 22956

    Most servers won’t send email from a random email address, hence why they are sent from the website address. are u sure this applies if the action is initiated by a friend?

    GDv2 will change this up a bit, i’m interested to hear others views.

    Stiofan

    #420969

    Birgit Wilde
    Full Member
    Post count: 236

    Hi Alex and Stiofan,

    thank you for your responses and sorry for getting back to you so late.

    1) Regarding the “Send-to-a-friend”-issue: Yes, I have double-checked and the recommendation-email from a friend to a friend IS sent from my company’s account. But why is it necessary for users at all to enter one’s email address when recommending a place, if this adddress is not used at all?
    Anyway, I have disabled this function for all packages – probably the best way to avoid trouble.

    2) Regarding the email to the owner of a place when somebody has submitted a review: Again I have established a new (fake) owner with a new place and an own email address. Then I logged out and visited my site like any normel unlogged visitor. I submitted a review for this new place and the “fake owner” received an email on his email address – indicating name, email address and IP address. Even if I make workdpress not storing any IP addresses in comments, the owner of a place still receives the email address of any person submitting reviews about his place.
    This is a real problem in Germany.

    I really hope you can help me with this review issue, because otherwise I will not be allowed to legally run this project.

    Thank you so much for your expertise and support – you guys are great!

    #421000

    Stiofan O’Connor
    Site Admin
    Post count: 22956

    Hello,

    1. Most likely this feature will be removed/replaced with a easier share feature.

    2. GDv2 will give you much more control over emails and what is sent, though i would imagine this is just something you would have to add to your site T&Cs.

    Stiofan

    #421055

    Birgit Wilde
    Full Member
    Post count: 236

    Thank you, Stiofan. When approx do you think that new version will be available?

    Nice try with the T&C 😊 This is Germany , well – Europe… any such clause in the T&C itself would be illegal.

    I also have tried to find this review notification in the translation files to adapt just the German email. This already worked fine with the “Here is your login data”-notification (transmission of complete login data also impossible over here). But I cannot find the review notification anywhere – not in the theme, not in the core po-file. Do you know where it is?

    #421133

    Alex Rollin
    Moderator
    Post count: 27815

    It is a wordpress comment notification, not produced by GD.

    #421222

    Birgit Wilde
    Full Member
    Post count: 236

    OK, I will see what I can do with that.

    Thank you very much 🙂

Viewing 9 posts - 1 through 9 (of 9 total)

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket