Documentation of Consent

  • Hi,

    thank you for your work to implement Double Opt-In. For GDPR compliance we also need the possibility of documenting that we have received a consent for this E-Mail address, and what exactly the user is consenting to. German courts seem to be really strict about this.

    Please add the following functionality to this plugin (or to CF 7):
    – Storing the DOI confirmation E-Mail that was sent & the time when it was sent (maybe in flamingo?)
    – On confirmation, storing the IP adress & the time when it was confirmed (can this be added as extra fields to the Flamingo E-Mail?)

    For more information about GDPR-compliant DOI mails, see:

    https://certified-senders.org/wp-content/uploads/2017/07/CSA_the_perfect_DOI_email.pdf

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Takayuki Miyoshi

    (@takayukister)

    It is impossible for a contact form plugin to present evidence of email delivery. What can do it is the SMTP server you use. Check the email logs.

    – On confirmation, storing the IP adress & the time when it was confirmed

    Note that user’s IP address is their personal data. You can’t store personal data without the data subject’s clear consent.

    Thread Starter Benjamin Pick

    (@benjamin4)

    Email delivery: That is true. However storing the DOI is not so much for proof that it was sent, but rather *what* was sent (so that it can be verified what was consented to at the time of consent).

    As “proof” the timestamps of when DOI E-Mail was requested & when it was confirmed might be enough (there are different opinions about it on the web). Storing the IP address would be based on “this is necessary to proof who gave this consent” but arguably, accessing the DOI E-Mail should be proof enough.

    I still think Flamingo would be the best place to store the sent DOI E-Mails (maybe as a seperate channel) & the 2 timestamps so that the date is readily available if needed (you could even export it via csv). On shared hosting you won’t be able to access the E-Mail logs.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Documentation of Consent’ is closed to new replies.