shopify卖家任何使用GDPR任命数据� ；；；；；； ；；す俸痛χ贸头Ｊ�
隐私声明
GDPR（尤其是第 12 至 14 条）要求您向您处置惩罚其数据的小我私家提供特定信息，，，，，通常接纳隐私声明或隐私政策的形式 。。。。。。
您可使用 Shopify 的隐私政策天生器来资助您制订隐私政策 。。。。。。您可在“结账”或在线下的设置中找到它 。。。。。。
请思量以下问题：
您的网站上是否有隐私政策，，，，，其中包括您需要凭证规则提供的所有信息 ？？？？？它是否至少包括客户怎样就隐私问题与您联系，，，，，以及客户怎样行使其权力（例如删除或更正（修改或更正）其数据的权力以及会见该数据的权力）的相关信息 ？？？？？
您的隐私政策是否包括 Shopify 怎样将您客户的小我私家数据用于自动的危害和诓骗评分 ？？？？？您（或您的效劳提供商）将客户信息用于自动决议时，，，，，GDPR 要求您披露这些信息 。。。。。。Shopify 使用您客户的小我私家信息，，，，，通过自动决议阻止某些看似有诓骗性子的生意 。。。。。。Shopify 的隐私政策天生器包括此信息 。。。。。。有关此系统的详细信息，，，，，请参阅自动决议 。。。。。。
任命数据� ；；；；；； ；；す�
数据� ；；；；；； ；；す� (DPO) 监视组织网络和处置惩罚小我私家数据的方法 。。。。。。若是公司的焦点运动涉及大规模的在线跟踪，，，，，则 GDPR 要求您任命 DPO 并在隐私政策中提供 DPO 的联系信息 。。。。。。
GDPR 包括 DPO 需要完成的特定使命，，，，，例如，，，，，在您的组织更改其网络和处置惩罚小我私家数据的方法时，，，，，举行数据� ；；；；；； ；；び跋炱拦� 。。。。。。DPO 可以由在 GDPR 和数据� ；；；；；； ；；ひ蠓矫婢哂凶ㄒ抵兜哪诓恐霸钡５保�，，，，但您也可思量与照料或公司相助，，，，，由他们担当外部 DPO 。。。。。。
思量以下问题：
有几多人受到您店面跟踪手艺的影响 ？？？？？这些可能包括行为广告应用，，，，，甚至重定向应用 。。。。。。受影响的人数是否为“大规模”是一项执法决议，，，，，您应凭证您的详细情形咨询状师 。。。。。。
您应自动任命 DPO 吗 ？？？？？纵然执法上不要求您指定 DPO，，，，，若是您在欧洲占有举足轻重的职位，，，，，您可能希望自动这样做以确保您充分� ；；；；；； ；；た突У氖� 。。。。。。
数据处置惩罚协议
作为 GDPR 适用的数据控制方，，，，，第 28 条要求您在通过数据处置惩罚方（如 Shopify）处置惩罚客户数据时，，，，，您应对其可能使用和处置惩罚该数据的方法划定严酷的协议要求 。。。。。。这通常通过数据处置惩罚附录或 (DPA) 完成 。。。。。。
Shopify 已自动将数据处置惩罚协议 (https://www.shopify.com/legal/dpa) 纳入效劳条款，，，，，从而知足第 28 条要求 。。。。。。
关于 Shopify Plus 商家，，，，，他们与 Shopify 之间的关系将由他们的协商条约决议 。。。。。。Shopify Plus 商家可签署数据处置惩罚附录以知足他们的需求 。。。。。。未签署数据处置惩罚附录的 Shopify Plus 商家将受 Shopify 在线数据处置惩罚附录的羁系 。。。。。。
思量以下问题：
您在 Shopify 外部使用的其他数据处置惩罚者是否遵照协议允许� ；；；；；； ；；つ突У氖� ？？？？？许多第三方应用、渠道、支付网关或其他数据处置惩罚者也会自动将数据处置惩罚协议纳入他们的条款中 。。。。。。您是否就这些事宜咨询过这些第三方 ？？？？？
您是具有协商条约的 Shopify Plus 商家吗 ？？？？？若是您想签署数据处置惩罚附录，，，，，请联系 Shopify Plus 客服 。。。。。。他们可以为您提供 Shopify 的模板 DPA 以举行签署 。。。。。。
Shopify商户官网原文详情：
Privacy notice
The GDPR (and particularly Articles 12 to 14) requires that you provide specific information to individuals whose data you are processing, generally in the form of a privacy notice or privacy policy.
You can use Shopify's privacy policy generator to get you started. You can find it in your settings under Checkout or online.
Think about the following question:
Do you have a privacy policy on your site that includes all of the information that you are required to provide under the regulation? At minimum, does it include how customers can get in contact with you about privacy questions and how customers can exercise their rights, for example the rights to erasure (deletion) or rectification (modification or correction) of their data and the right to access it?
Does your privacy policy include how Shopify may use your customers' personal data for automated risk and fraud scoring? The GDPR requires you to disclose when you (or your service providers) use their information in connection with automated decision-making. Shopify uses your customers’ personal information to block certain transactions that appear to be fraudulent through automated decision-making. Shopify's Privacy Policy Generator includes this information. For more information about this system, see Automated decision-making.
Appointing a Data Protection Officer
A Data Protection Officer (DPO) oversees how your organization collects and processes personal data. If your business’s core activities include large scale online tracking, the GDPR requires that you appoint a DPO and provide contact information for the DPO in your Privacy Policy.
The GDPR includes specific tasks that a DPO needs to do, such as conducting data protection impact assessments when your organization changes how it collects and processes personal data. The DPO can be an internal person who has expertise in the GDPR and data protection requirements, but you can also consider working with an consultant or firm to serve as an external DPO.
Think about the following questions:
How many people are affected by tracking technologies on your storefront? These can include behavioral advertising apps, or even retargeting apps. Whether or not the number of people affected is “large scale” is a legal decision, and you should consult with a lawyer depending on your circumstances.
Should you voluntarily appoint a DPO? Even if you are not legally required to appoint a DPO, if your presence in Europe is large enough, you may wish to do so voluntarily to make sure that you adequately protect your customers’ data.
Data processing agreements
As a data controller under the GDPR, Article 28 requires that when you engage a data processor (like Shopify) to process your customers’ data, you impose strict contractual requirements on how they may use and process that data. This is typically done through a Data Processing Addendum, or DPA.
Shopify has automatically incorporated a Data Processing Agreement (https://www.shopify.com/legal/dpa) into its terms of service, which is designed to address the requirements of Article 28.
For Shopify Plus merchants, their negotiated contracts will govern their relationship with Shopify. Plus Merchants can sign a Data Processing Addendum to address their needs. Shopify Plus merchants who do not sign a Data Processing Addendum will be governed by Shopify’s online Data Processing Addendum.
Think about the following questions:
Are other data processors that you work with outside of Shopify contractually committed to protecting your customers’ data? Many third-party apps, channels, payment gateways, or other data processors will also automatically incorporate a Data Processing Agreement into their terms. Have you consulted with each of these third-parties?
Are you a Shopify Plus merchant with a negotiated contract? If you want to sign a Data Processing Addendum, then reach out to Shopify Plus Support. They can provide you with Shopify's template DPA to sign.
文章内容泉源：Shopify商户官方网站