GDPR And GOOGLE FONTS, GSTATIC And SPPAGEBUILDER.COM - Question | JoomShaper

GDPR And GOOGLE FONTS, GSTATIC And SPPAGEBUILDER.COM

R

RA_Dury

SP Page Builder 2 years ago

Hello,

we need to get rid of GOOGLE-FONTS GSTATIC and SPPAGEBUILDER.COM integration in the templates as those integrations in the SPPagebuilder Themes are a clear violation of the GDPR. Our DPO wants us to get rid of those webservices / integrations in our website.

We allready disabled all Google-Fonts in the theme.

Can you provide us a solution? Can SPPAgebuilder be used GDPR-compliant?

0
32 Answers
Ofi Khan
Ofi Khan
Accepted Answer
Support Agent 2 years ago #24040

Hello RA_Dury

In SP Page Builder Pro/Lite you have a choice, you don't have to use Google Fonts, you can use the classic font like Arial or Verdana instead. Please follow this documentation

Best regards

0
R
RA_Dury
Accepted Answer
2 years ago #24047

OK, what about the other 2 integrated webservices

GSTATIC

and

SPPAGEBUILDER

?

GSTATIC is not GDPR compliant (we are specialised GDPR consultancy, this is a fact).

SPPAGEBUILDER is based in Dhaka. Therefore it is also not GDPR compliant to integrate sppagebuilder webservice in the template itself. Everything should run in Joomla and the SPPagebuilder-component itself and not open up a data connection to your server every time a page is loaded on our server.

Is it possible to disable those data connections?

If not, SPPAGAEBUILDER is not usable in Europe anymore due to the Schrems II decission of the European Court of Justice.

0
R
RA_Dury
Accepted Answer
2 years ago #24053

You wrote:

In SP Page Builder Pro/Lite you have a choice, you don't have to use Google Fonts, you can use the classic font like Arial or Verdana instead.

The link doesn't provide any information about how to disable "Google Fonts" in SP Page Builder Pro.

Instead the text in the link you provided states:

This represents a legitimate interest within the scope of Article 6 (1) 1 lit. f GDPR. With regard to the transfer of personal data to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. More information about Google Fonts and privacy can be found here.

As already mentioned this is clearly wrong as the privacyshield has been shredded by the ECJ. Thus we need a way to disable the Google fonts / Gstatic Fonts.

How can we achieve this?

0
R
RA_Dury
Accepted Answer
2 years ago #24063

OK, the data connections to the sppagebuilder.com comes from loading some png pictures, like https://sppagebuilder.com/sample-data/images/2018/05/18/hero_icon2.png

That was an easy one.

So if you could provide us a little assistance, how to disable the data connections to fonts.gstatic.com and the other google fonts server ...

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #24067

If I may... I know that German webmasters have hard life. I have friends as well.

The only basic way to disable Google Fonts is NOT USING it anywhere. So you have to check all addons one by one, and disable, for example, Varela Round font. The advanced request cut off lines from component source code. Sorry, beyond support.

If you're afraid of GDPR laywers. Advice: they can only check front-end, not back-end - otherwise it can be recognized as hacking (and this is illegal).

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #24069

BTW

Loading image from our website doesn't violates the GDPR law. Becuase during this process NO personal data are recorded or stored nor cookies loaded. It would be virtually impossible to prove in court than it is different.


We both know that more personal data are collected & stored during basic Google search than by visiting your website. And this is very easy to prove. For this reason, lawyers should sue in court Google, Apple, Facebook first - than a small business owner. You know how it works, strong against the weak, weak against the strong.

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #24072

BTW

Use good GDPR component / plugin and this should reassure you.

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #54904

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #54912

But we have to distinguish between building a website and accessing resources from other sites, because your country does not offer these resources. And then there is period number two when the website is completed, all files are loaded from your serwer (also GF if you know how to do this) and the common citizen has ONLY access to the front-end. Also Laywer cannot see back-end of your Joomla, otherwise it's sort of hacking. Hopefully you can always use font Arial like berlin.eu ;)

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #54914

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #54916

I wanted to add extra thought to this topic.

Yes, thanks for added info.

In big short, question for you: What is the most problematic for German developers?

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #54921

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #54924

What is "funny" we all live in EU. And I checked few offcial capital websites:

  1. Paris (parisinfo.com) use Google fonts and Google Tag Manager - cookie info only
  2. BRUSSELS/Brüssel (brussels.be) - load resourses from https://cdnjs.cloudflare.com, https://maxcdn.bootstrapcdn.com, youtube and google maps - yes, advanced Cookie module at the first load.

So only you guys are screwed?

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #54926

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #54928

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #54939

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #55156

each country can interpret the rules itself

yes, especially if we talk about North Stream 2, right ;p


So you are using my video tutorial, great.

But I think it would be easier to define fonts in custom.css by SPPB classes, not in every single addon.

For example all h1, h2, h3 {font #1} body {font #2} etc.

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55175

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #55181

So your assumptions are correct.

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55183

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55205

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55208

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #55210

Thanks, you didn't have to put so many informations, but it's OK, now I see that fine in DE is huge, that's why all webmaster are so afraid, etc..


but as I know, we don't force webmasters to use Google Fonts, they can use their own font (Arial etc.) and/or load font from local server. So what are your suggestions - how we can help German webmasters?

-1
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55218

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #55220

Thx.

I have only one concern if it's possible to download font from Google using Joomla component. In guides for Wordpress (more tips about it) all have info that webmaster have to download font itself. Maybe there is a way, but as always extra paid Google API is needed. Anyway, I will inwestigate it deeper before sharing idea with our developer.

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55223

0
FA
Florian Auer
Accepted Answer
2 years ago #55275

Hello,

due to the fact that the Munic regional court https://rewis.io/urteile/urteil/lhm-20-01-2022-3-o-1749320/ marks all Google font downloads as illegal where the website only serves the link to the font at Google, i strongly recommand a possibility to select, that the used fonts will be downloaded to the server the site is hosted on and then get delivered from there to the client.

Otherwhise we will have to consider to remove the component shortly from all of our sites.

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #55406

@Florian, all you have to do is just load Google Fonts from your server or switch to Verdana, Arial everywhere. SPPB component is not guilty. It's webmaster decision what elements he(she) want to use. Thanks for the link, it's scary but interesting lecure.

BTW

Do you have iPhone, iPad, iMac? Is it still legal in Germany, becuase your data is stored in the USA cloud. Much more info than just a IP. Are there any court decisions? I am asking out of curiosity.

-1
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55417

0
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55426

0
Paul Frankowski
Paul Frankowski
Accepted Answer
Senior Staff 2 years ago #55454

As soon as you select a font via the page builder, it tries to load the font from Google.

Yes, but people who vist website don't have access to it, it's ONLY for webmasters / page editors who decide to use Google Fonts. So let's do not mix two things. German webmasters should know that touching a Google services is like playing with mines. But I agree there should be ON/OFF option in case of editor is too brave.

foto_7721_2022.jpg

Just 4 Fun.

-1
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
‏‏‎ ‎J‏‏‎‎e‏‎‏‏‎‎n‏‏‎‎s W.‏‏‎
Accepted Answer
2 years ago #55456

0