shopify使用GDPR时数据泄露和国际数据转移的相关先容
数据泄露通知
若是 GDPR 适用于您并且您遇到数据泄露，，，，，则您可能需要通知受影响的用户或特定的羁系机构。。。。。。。。
要特殊注重的是，，，，，GDPR 要求在爆发很可能对小我私家权力和自由爆发倒运影响的数据泄露时发出通知。。。。。。。。
若是泄露的信息切合以下特征，，，，，则可能需要这样做：
包括付款详细信息。。。。。。。。
可能会被用于泄露尴尬信息或小我私家信息。。。。。。。。
可能会被用于会见小我私家的账户或效劳。。。。。。。。
在适用的情形下，，，，，您需要在发明违规行为后 72 小时内尽快发出通知。。。。。。。。
思量以下问题：
您是否曾咨询过状师以确定在遇到数据泄露时您需要针对哪些所网络和处置惩罚的信息提供相关通知？？？？？？？ ？
您是否有针对您营业的数据泄露响应妄想，，，，，从而为此类事务做好准备？？？？？？？ ？
包括付款详细信息。。。。。。。。
可能会被用于泄露尴尬信息或小我私家信息。。。。。。。。
可能会被用于会见小我私家的账户或效劳。。。。。。。。
GDPR 对使用第三方供应商和效劳提供商来处置惩罚其用户的小我私家数据的所有公司提出了要求。。。。。。。。
Shopify 使用多个分支处置惩罚机构来处置惩罚客户的数据。。。。。。。。有关 Shopify 的分支处置惩罚机构的更多信息，，，，，请参阅 Shopify 的分支处置惩罚机构。。。。。。。。
请思量以下问题：
您是否审查过您使用的供应商和效劳提供商（包括 Shopify）的隐私保�；；；；；；；げ椒ィ�，，从而确保您对他们怎样保�；；；；；；；つ突У男∥宜郊沂莞杏χ�？？？？？？？ ？
第三方应用
GDPR 要求您接纳一些与您和您的第三方效劳提供商网络和使用小我私家数据相关的一定办法。。。。。。。。其中包括 Shopify，，，，，以及您可能用于 Shopify 市肆的第三方应用。。。。。。。。
Shopify 已接纳步伐，，，，，让您更容易相识您装置的应用可以会见哪些小我私家数据。。。。。。。。
办法：
在 Shopify 后台中，，，，，点击应用。。。。。。。。
在要审查其权限的应用上点击审查详细信息。。。。。。。。
在应用市肆的装置屏幕上装置应用之前，，，，，您还可以审查应用权限。。。。。。。。
别的，，，，，针对每个应用，，，，，应用市肆中尚有一个链接到隐私政策的部分，，，，，更详细地诠释了应用开发者正在网络什么数据，，，，，以及他们将怎样使用这些数据。。。。。。。。
Shopify 希望使您尽可能轻松地评估您选择装置的应用的数据实践，，，，，但您需要确保使用的是切合 GDPR 的第三方应用。。。。。。。。
请思量以下问题：
基于您的所在、您客户的所在、您应用开发职员的所在以及每个应用的实现情形，，，，，您是否使用的是切合 GDPR 的第三方应用？？？？？？？ ？若是您对特定应用的数据实践是否涉及其他思量事项或是否能使您切合 GDPR 保存疑问，，，，，请咨询状师。。。。。。。。
国际数据转移
除非小我私家数据获得充分保�；；；；；；；ぃ�，，不然 GDPR 榨取将欧洲职员的小我私家数据输出到欧洲外部。。。。。。。。
Shopify 凭证 GDPR 的要求保�；；；；；；；ば∥宜郊沂荩�，，在数据转移至美国和加拿大并在这些地方举行处置惩罚的历程中，，，，，对其举行保�；；；；；；；�。。。。。。。。
Shopify 已对自身的数据流举行了设置，，，，，从而知足商家的这些需求。。。。。。。。如 Shopify 隐私政策中所述，，，，，所有欧洲的小我私家数据最初均吸收自商家，，，，，并由 Shopify 位于爱尔兰的子公司 Shopify International Ltd. 在爱尔兰举行处置惩罚。。。。。。。。Shopify 随后将凭证 GDPR 的划定传输此类数据。。。。。。。。
有关 Shopify 怎样凭证 GDPR 标准和信息清静最佳做法吸收和处置惩罚来自欧洲经济区 (EEA) 和英国的小我私家数据的详细信息，，，，，请参阅 Shopify 的 GDPR 白皮书（英文版）。。。。。。。。
请思量以下问题：
您是否确保您向其转移数据的其他方将在遵守 GDPR 的情形下跨国际领土转移该数据？？？？？？？ ？要实现此目的，，，，，您可以审查第三方应用、渠道、支付网关或其他供应商的隐私政策，，，，，相识其是否说明晰将怎样保�；；；；；；；づ访耸�。。。。。。。。
下载 Shopify 的 GDPR 白皮书
有关 Shopify 怎样遵守 GDPR 并确保您在使用 Shopify 时能够遵守 GDPR 的详细信息，，，，，请下载 Shopify 的 GDPR 白皮书文档（英文版）。。。。。。。。
Shopify商户官网原文详情：
Data breach notification
If the GDPR applies to you and you experience a data breach, then you might be required to notify affected users or specific regulatory bodies.
In particular, the GDPR requires notice where a data breach is likely to cause a high risk of adversely affecting individuals’ rights and freedoms.
This is likely to be the case if the breached information:
Includes payment details.
Could be used to reveal embarrassing or personal information.
Could be used to access an individual’s accounts or services.
Where applicable, you're required to provide notice as quickly as 72 hours after you become aware of the breach.
Think about the following questions:
Have you spoken with a lawyer to determine what information you collect and process might require you to provide notice if you experience a data breach?
Do you have a data breach response plan for your business so you are prepared for such an incident?
Includes payment details.
Could be used to reveal embarrassing or personal information.
Could be used to access an individual’s accounts or services.
The GDPR imposes requirements on any company that uses third-party vendors and service providers to process the personal data of its users.
Shopify uses a number of subprocessors to process your customers’ data. For more information about Shopify's subprocessors, see Shopify's subprocessors.
Think about the following question:
Have you reviewed the privacy practices of the vendors and service providers that you use, including Shopify, to make sure that you are comfortable with how they protect your customers’ personal data?
Third-party apps
The GDPR requires that you take a number of affirmative steps relating to your and your third-party service providers’ collection and use of personal data. This includes Shopify, but also any third-party apps that you might use in connection with your Shopify store.
Shopify has taken action to make it easier for you to understand what personal data the apps you install have access to.
Steps:
From your Shopify admin, click Apps.
Click View details on the app you want to review permissions for.
You can also review app permissions before you install an app on the install screen in the app store.
Additionally, there is a section of the app store for each app to link to a privacy policy that explains in more detail exactly what data app developers are collecting and how they are using it.
While Shopify wants to make it as easy as possible for you to assess the data practices of the apps you choose to install, it is up to you to ensure that you are using third-party apps in a way that complies with the GDPR.
Think about the following question:
Based on your location, your customers' locations, your app developers' locations, and your implementation of each app, are you using third-party apps in a way that complies with the GDPR? Consult with a lawyer if you have questions about whether a particular app’s data practices may require additional consideration or work on your part to ensure compliance with the GDPR.
International data transfers
The GDPR prohibits exporting the personal data of Europeans outside of Europe unless that information will be adequately protected.
Shopify protects personal data according to the requirements of the GDPR as it is transferred to and processed in the United States and Canada.
Shopify has set up its data flows to take care of these requirements for merchants. As described in Shopify's Privacy Policy, all European personal data is initially received from merchants and processed in Ireland by Shopify's Irish affiliate Shopify International Ltd. Shopify then transfers that data onward in compliance with the GDPR.
For more information about how personal data from the European Economic Area (EEA) and United Kingdom is received and processed by Shopify according to GDPR standards and information security best practices, see Shopify’s GDPR whitepaper (in English).
Think about the following question:
Have you ensured that other parties you transfer data to will transfer that data across international borders in a way that complies with the GDPR? You can do this by looking at the privacy policies of your third-party apps, channels, payment gateways, or other vendors, and seeing if they explain how they protect European data.
Download Shopify's GDPR whitepaper
For more information about how Shopify complies with the GDPR, and to make sure that you will be in a position to comply in relation to your use of Shopify, download Shopify's GDPR whitepaper document (in English).
文章内容泉源：Shopify商户官方网站