GDPR Technical Implementation

The General Data Protection Regulation (GDPR) sets data protection and privacy guidelines for handling the personal data of individuals within the European Union (EU). As such, it applies not only to all organizations established in the EU that handle personal data but also to any non-EU established organization that processes personal data of individuals who are in the EU. The GDPR came into force on 25 May 2018.

Learn more about GDPR Compliance in our related article.

Implementation Example

In Insites, you gather and update data through Liquid forms. Here's an example of a user sign-up form for clients:

app/forms/client_sign_up.liquid

You can use the same form with slight modifications to gather and update data. To let a user update their data, pass to , for example {% include_form 'onboarding', id: context.current_user.id %}.

Example

This is some example code of a simple opt-in newsletter subscription form implemented in Insites.

Table

app/schema/newsletter.yml

Page

app/views/pages/newsletter/join.liquid

Form

app/forms/newsletter/join.liquid

Thank You Page

app/views/pages/newsletter/thankyou.liquid

Graph query to get newsletters for an email address

Query returning newsletters for a particular user requires email as an argument.

app/graphql/newsletter/get.graphql