Shopify 的平台可以处置惩罚GDPR 哪些权力请求？？？ ？？？？ ？
处置惩罚 GDPR 数据请求
GDPR 扩展了小我私家会见和控制其小我私家数据的权力。。。。。。。。本页先容：
这些权力的细分。。。。。。。。
怎样使用 Shopify 的平台来处置惩罚针对每项权力的请求。。。。。。。。
针对您收到的各项权力的请求，，，，，，，您可能需要自力于 Shopify 执行哪些操作。。。。。。。。
本页相关主题
相识主体申请会见和便携性请求
处置惩罚主体申请会见和便携性请求
处置惩罚删除请求
相识主体申请会见和便携性请求
在某些情形下，，，，，，，GDPR 为小我私家提供请求公司目今处置惩罚的其小我私家数据的副本的权力。。。。。。。。
因此，，，，，，，GDPR 要求您能够以下列名堂向您的客户提供他们小我私家数据的副本：
常用
易于阅读
便携
这允许客户将他们的数据用于差别的效劳提供商。。。。。。。。Shopify 允许您直接从后台以 CSV 或 Excel 名堂导出大部分数据（例如，，，，，，，订单、款子、产品和客户信息）。。。。。。。。
通常，，，，，，，您应在 30 天内回复请求。。。。。。。。若是请求特殊难以实现，，，，，，，可延伸回复时长。。。。。。。。
处置惩罚主体申请会见和便携性请求
若是您收到会见或便携性请求，，，，，，，您首先需要验证请求者的身份（以便您不会无意中向他人提供您客户的私人信息）。。。。。。。。
办法：
在 Shopify 后台中，，，，，，，点击客户。。。。。。。。
点击想请求其日志的客户的姓名。。。。。。。。
点击请求客户数据。。。。。。。。
备注：只有店主才华提交获取客户数据的请求。。。。。。。。
客户信息将通过电子邮件发送给店主，，，，，，，以提供应提出请求的客户。。。。。。。。
GDPR 第 15 条还要求您提供有关怎样使用您提供的数据的其他配景信息，，，，，，，包括:
处置惩罚客户数据的目的。。。。。。。。
吸收此数据的第三方。。。。。。。。
任何相关的保存期。。。。。。。。
此信息的网络泉源（若是不是直接泉源于客户）。。。。。。。。
数据是否用作任何自动决议的一部分。。。。。。。。
别的，，，，，，，您还需要能够确保：
客户请求更正或擦除信息的权力。。。。。。。。
客户阻挡其信息处置惩罚方法的权力。。。。。。。。
客户向羁系机构投诉的权力。。。。。。。。
备注：有关怎样响应申请会见的详细信息，，，，，，，您可以阅读英国信息专员办公室撰写的这篇文章。。。。。。。。
思量以下问题：
您是否能够应客户要求提供与其数据相关的所有须要配景信息？？？ ？？？？ ？实验通过维护您（或您使用的效劳提供商，，，，，，，如 Shopify）存储的所有客户小我私家数据的映射，，，，，，，提前针对请求举行妄想。。。。。。。。
您是否思量过使用可能有权会见客户小我私家数据的其他效劳提供商？？？ ？？？？ ？这些效劳提供商可能包括第三方应用、渠道和支付网关。。。。。。。。
您是否拥有您使用的且可能存储客户小我私家数据的所有第三方效劳的联系信息？？？ ？？？？ ？
处置惩罚删除请求
GDPR 付与小我私家在某些情形下要求删除小我私家数据或要求公司限制处置惩罚小我私家数据的权力。。。。。。。。
“小我私家数据”指可用于识别小我私家的任何数据，，，，，，，包括：
名称
地点
IP 地点
信用卡号。。。。。。。。
小我私家数据不包括纯粹的财务信息以及无法关联至小我私家的信息，，，，，，，例如：
特定产品的出售次数
您的市肆收入
备注：当您收到切合 GDPR 的请求时，，，，，，，您无需完全透露或删除纯粹的财务信息。。。。。。。。事实上，，，，，，，某些司法统领区的执法可能不允许这样做，，，，，，，由于税收或其他执法缘故原由，，，，，，，您可能需要维护订单纪录。。。。。。。。
若是您收到删除请求（有时称为编校唬�；；；；蛏境�，，，，，应先验证客户的身份。。。。。。。。您还应该确保没有任何理由需要生涯客户的数据（例如，，，，，，，若是客户也是员工）。。。。。。。。
办法：
在 Shopify 后台中，，，，，，，点击客户。。。。。。。。
点击您要为其请求删除的客户的名称。。。。。。。。
点击删除小我私家数据。。。。。。。。
备注：只有店主才华请求删除客户的数据。。。。。。。。
您通事后台请求删除之后，，，，，，，Shopify 会在您发出请求的同时将删除请求提交到您已装置的所有应用，，，，，，，这些应用可能具有该客户数据的会见权限。。。。。。。。
一旦您在后台中请求删除，，，，，，，将有 10 天的缓冲期，，，，，，，在此时代您可作废请求，，，，，，，避免您不小心提出了请求。。。。。。。。若要作废待处置惩罚的删除请求，，，，，，，请联系 Shopify 支持，，，，，，，并提供您的市肆信息和相关的客户 ID。。。。。。。。
当您请求删除时，，，，，，，Shopify 将仅编辑小我私家信息（例如姓名和地点）。。。。。。。。您的匿名订单信息将坚持稳固，，，，，，，以防您需要这些信息用于会计用途。。。。。。。。删除相关的小我私家数据后，，，，，，，我们将连忙向您发送一封确认电子邮件。。。。。。。。
默认情形下，，，，，，，若是客户在已往的 6 个月（180 天）内下过订单，，，，，，，Shopify 将不会删除小我私家数据，，，，，，，以防泛起退款的情形。。。。。。。。若是您在该时间规模内提交删除请求，，，，，，，则请求将处于待处置惩罚状态，，，，，，，Shopify 会在合理的时间后对其执行操作。。。。。。。。您不需要再次提交请求。。。。。。。。
若是您想跳过此延迟时间（不思量退款危害），，，，，，，请联系 Shopify 支持。。。。。。。。
思量以下问题：
您将所有客户数据都存储在自己的小我私家盘算机上照旧通过硬拷贝存储？？？ ？？？？ ？
您是否可能需要联系第三方（例如渠道或支付网关）以请求他们删除客户小我私家信息？？？ ？？？？ ？
是否有任何外地划定（如税法）可能要求纵然在客户要求删除其小我私家信息的情形下，，，，，，，您仍需保存这些信息？？？ ？？？？ ？请思量咨询外地的数据保存要求资深状师来资助回覆这一问题。。。。。。。。
下载 Shopify 的 GDPR 白皮书
有关 Shopify 怎样遵守 GDPR 并确保您在使用 Shopify 时能够遵守 GDPR 的详细信息，，，，，，，请下载 Shopify 的 GDPR 白皮书文档（英文版）。。。。。。。。
Shopify商户官网原文详情：
Processing GDPR data requests
The GDPR expands on an individual's right to access and control their personal data. This page includes:
A breakdown of those rights.
How you can use Shopify’s platform to address requests for each right.
What you may need to do independently from Shopify if you receive a request for each right.
On this page
Understand subject access and portability requests
Process subject access and portability requests
Process erasure requests
Understand subject access and portability requests
The GDPR gives individuals the right, in certain circumstances, to request a copy of their personal data being processed by a company.
The GDPR therefore requires that you be able to provide your customers with a copy of their personal data in a format that is:
Common
Easily readable
Portable
This allows customers to use their data with a different service provider. Shopify allows you to export most data in CSV or Excel formats right from your admin (for example, order, payout, products, and customer information).
Generally, you should respond to a request within 30 days. Extensions are allowed if the request is exceptionally difficult to fulfill.
Process subject access and portability requests
If you receive an access or portability request, then you will first need to verify the identity of the requester (so that you do not inadvertently provide someone else your customer’s private personal information).
Steps:
From your Shopify admin, click Customers.
Click the name of the customer you want to request a log for.
Click Request customer data.
Note
Only the store owner can submit a request for customer data.
The customer's information will be emailed to the store owner to provide to the requesting customer.
Article 15 of the GDPR will also require you to provide additional context around how you use the data you are providing, including:
The purposes for which the customer’s data was processed.
The third-parties that received this data.
Any relevant retention periods.
Where the information was collected from (if not directly from the customer).
Whether or not the data was used as part of any automated decision-making.
Additionally, you need to be able to ensure:
The customer’s right to request information be corrected or erased.
The customer’s right to object to how their information was processed.
The customer’s right to complain to a regulator.
Note
For more information about how to respond to access requests, you can read this post by the UK Information Commissioner’s Office.
Think about the following questions:
Are you able to provide all of the required context around a customer's data if they ask for it? Try to plan for a request in advance by maintaining a map of all of the personal data you (or the service providers you use, like Shopify) store about your customers.
Have you considered other service providers that you might use who may have access to your customers’ personal data? These could include third-party apps, channels, and payment gateways.
Do you have contact information for all of the third-party services you use that might store your customers’ personal data?
Process erasure requests
The GDPR gives individuals the right, in certain circumstances, to ask that their personal data be erased, or that a company restrict the processing of their personal data.
"Personal data" means any data that can be used to identify an individual, including:
Name
Address
IP address
Credit card number.
Personal data does not include information that is purely financial and cannot be linked to an individual, such as:
How many times a specific product has sold
How much revenue your store has made
Note
You do not need to disclose or erase purely financial information when you receive a request under the GDPR. In fact, you may not legally be allowed to do so in certain jurisdictions, where you may be required to maintain order records for tax or other legal reasons.
If you receive a request for erasure (sometimes called redaction or deletion), then you should first verify the customer’s identity. You should also make sure there is no reason you need to keep the customer's data (for example, if the customer is also an employee).
Steps:
From your Shopify admin, click Customers.
Click the name of the customer you want to request an erasure for.
Click Erase personal data.
Note
Only the store owner can request that a customer's data be removed.
After you request an erasure through your admin, Shopify will transmit your erasure request to all apps you have installed at the time you make the request that might have access to that customer’s data.
Once you request an erasure within your admin, a 10 day buffer period will begin during which you can cancel the request in case you made the request accidentally. To cancel a pending erasure request, contact Shopify Support, and include your store information and the relevant customer ID.
When you request an erasure, Shopify will only redact personal information (such as name and address). Your anonymized order information will remain intact in case you need it for accounting purposes. Once the relevant personal data has been erased, we will send you a confirmation email.
By default, Shopify will not erase personal data if the customer has made an order in the last 6 months (180 days), in case a chargeback occurs. If a request for erasure is submitted in that time frame, then it will sit pending, and Shopify will action it once the appropriate time has passed. You do not need to submit another request.
If you would like to override this time delay (regardless of the risk of chargeback), contact Shopify Support.
Think about the following questions:
Are you storing any customer data on your own personal computers or in hard copy?
Are there other third parties, such as channels or payment gateways that you may need to contact to request they erase a customer's personal information?
Are there any local requirements, such as tax laws, that might require you to retain your customers’ personal information even if they request deletion? Consider consulting with a local lawyer familiar with data retention requirements to help answer this question.
Download Shopify's GDPR whitepaper
For more information about how Shopify complies with the GDPR, and to make sure that you will be in a position to comply in relation to your use of Shopify, download Shopify's GDPR whitepaper document (in English).
文章内容泉源：Shopify商户官方网站