By Sebastian Fischbach on Saturday, 02 May 2020
Posted in General Issues
Replies 9
Likes 0
Views 1.1K
Votes 0
Dear Stackideas team,

I'm trying to make my website GDPR compliant. From my understanding of your documentation, the user should be able to export all his comments from the Komento Dashboard. I already read Komento Documentation: GDPR and this posting. My questions are:
1) Where can I respectively my users find the "Komento Dashboard"? I don't see it anywhere accessible from the frontend?
2) I would prefer to do the data export myself. As I'm using the Joomla Privacy features, I'd like to reply to a GDPR information request with a single e-mail including both the exported data from Joomla (user account data, user's articles) and from Komento. Is there a way for me to do the export for a certain user from the backend so I can include the resulting file in my e-mail? Or even better: are there plans to integrate with the Joomla privacy component? From my point of view, this is the only way to go when it comes to collecting user data from different extensions by different developers.
3) How do I handle deletion requests? It might not be sufficient to tell a user to delete all of their (maybe thousands) comments manually on their own when they can't even remember which articles they have commented on. However, the backend doesn't seem to allow filtering or sorting by user in the "Comments" section.

Thanks and best regards,
Sebastian Fischbach
Hey there,

I am really sorry for the delay of this reply as it is a weekend for us here.


1) Where can I respectively my users find the "Komento Dashboard"? I don't see it anywhere accessible from the frontend?

You have to manually create a menu item from backend (screenshot : https://monosnap.com/file/Rw1swlGbqxSxxAMxheqa6w4VNCBRIu )


2) I would prefer to do the data export myself. As I'm using the Joomla Privacy features, I'd like to reply to a GDPR information request with a single e-mail including both the exported data from Joomla (user account data, user's articles) and from Komento. Is there a way for me to do the export for a certain user from the backend so I can include the resulting file in my e-mail? Or even better: are there plans to integrate with the Joomla privacy component? From my point of view, this is the only way to go when it comes to collecting user data from different extensions by different developers.

This is the current behavior :

1. User can request to download his data from Komento.

2. You need to setup cronjob on your server and set to 3 or 5 minute.


http://yoursite.com/index.php?option=com_komento&crondata=1


3. it will automatically collect all the data from the user under Komento component, once the system archive as a zip complete, it will send a notification to the user, so they can download it from the Komento dashboard.

Admin also can download it from backend if archive it completed, you can check my attached screenshot below.

Currently we do not have plan to integrate with privacy component, is there any other 3rd party component did this integration?


3) How do I handle deletion requests? It might not be sufficient to tell a user to delete all of their (maybe thousands) comments manually on their own when they can't even remember which articles they have commented on. However, the backend doesn't seem to allow filtering or sorting by user in the "Comments" section.

Do you mean when the user request to delete his account completely on the site or he just want to delete all his comment data on the site?
·
Saturday, 02 May 2020 11:58
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks for your reply! And no worries, I could have waited until after the weekend, but still I appreciate your effort.
Currently we do not have plan to integrate with privacy component, is there any other 3rd party component did this integration?
I'm not sure, I only use one other component that collects user data and it does not integrate with it. On Joomlashack they state:
We're going to integrate with the solutions provided by Joomla 3.9. Not all our extensions collect data, so many won't need to be updated. But extensions such as JCal Pro, jInbound, OSDownloads and others will get updated. For Shack Forms, we've already created GDPR features. We'll be moving it to Joomla 3.9's GDPR data reporting.

Anyway, if you don't plan to integrate it would still be helpful if the admin could initiate the data collection for a user from the backend to include the archive manually into the e-mail with the rest of Joomla's collected data.

Do you mean when the user request to delete his account completely on the site or he just want to delete all his comment data on the site?
Well, for the first option I would simply delete the Joomla user account (What happens to the comments then? Are they deleted entirely? Is the user data still saved somewhere within Komento?) and for the second I've noticed it's possible for the user to do it from the dashboard.

Best Regards,
Sebastian
·
Sunday, 03 May 2020 21:06
·
0 Likes
·
0 Votes
·
0 Comments
·
I'm not sure, I only use one other component that collects user data and it does not integrate with it. On Joomlashack they state:

Currently we haven't explore it whether possible to integrate with this Joomla privacy component yet because from the start Joomla implement this that time, they do not allow 3rd party component to integrate with this, this is why we do it separately for each of our product.


Anyway, if you don't plan to integrate it would still be helpful if the admin could initiate the data collection for a user from the backend to include the archive manually into the e-mail with the rest of Joomla's collected data.

Yes, as long as user request to download data from Komento component and once the system archive all the data from this user, you can download it from backend as well.


Well, for the first option I would simply delete the Joomla user account (What happens to the comments then? Are they deleted entirely? Is the user data still saved somewhere within Komento?) and for the second I've noticed it's possible for the user to do it from the dashboard.

Yes, user can able to delete their own comment from the Komento dashboard as long as you have give them permission to delete from backend > komento > ACL .

But if you delete user account from backend, about they comment will still exist on the site, but we do have a setting for transfer all his comment ownership to your site owner if you have set your site owner user id from this setting "Owner For Orphan Items" (screenshot : https://monosnap.com/file/25FXZUyoQ6UCXgUQSdMqzIJlmJKrF1 ).
·
Monday, 04 May 2020 11:41
·
0 Likes
·
0 Votes
·
0 Comments
·
Yes, as long as user request to download data from Komento component and once the system archive all the data from this user, you can download it from backend as well.
I understand, but that's not what I mean. I would like to create the archive without the user having to request it. Let's say a website uses a comment component, a newsletter component, a gallery component with user upload and a polling component from different developers. Including the data stored by Joomla natively the user would have to use five different forms/mechanisms to exercise his right of access and data portability (articles 15 and 20 GDPR). That's not very customer friendly.

But if you delete user account from backend, about they comment will still exist on the site, but we do have a setting for transfer all his comment ownership to your site owner if you have set your site owner user id from this setting "Owner For Orphan Items" (screenshot : https://monosnap.com/file/25FXZUyoQ6UCXgUQSdMqzIJlmJKrF1 ).
It's not transparent to other users what has happened then, it just looks like the comments were written by me or "Administrator" or whatever I call it. From my point of view, the ideal and transparent solution needs the following:

  • ability for the administrator to delete all comments of a user as well as all likings, attachments and so on of that user - in general: to delete all actions said user has done in Komento (as required by GDPR!)
  • a way to show "here was a comment but it has been removed", "user deleted" in the frontend so that other users understand the context of remaining comments (or can try to guess). That's much better than simply removing them (no context at all, there might be comments with answers without the corresponding question) or keeping them under a different user name (not GDPR compliant as personal information might be included in the comment itself like the user's name at the greeting at the end of the comment)


Best regards,
Sebastian
·
Monday, 04 May 2020 19:29
·
0 Likes
·
0 Votes
·
0 Comments
·
I am sorry for the delayed of this reply,

I understand, but that's not what I mean. I would like to create the archive without the user having to request it. Let's say a website uses a comment component, a newsletter component, a gallery component with user upload and a polling component from different developers. Including the data stored by Joomla natively the user would have to use five different forms/mechanisms to exercise his right of access and data portability (articles 15 and 20 GDPR). That's not very customer friendly.

Currently we do not have allow admin to download the user data from backend, but you can manually work edit the data from database for now, you can check my attached screenshot below. (modify the `userid` value which you would like to download)

And if you do not want to notify the user who can download their data on frontend, you can comment out this line of code under this file on your site : JoomlaFolder/administrator/components/com_komento/includes/gdpr/gdpr.php (Check my attached screenshot below)

It's not transparent to other users what has happened then, it just looks like the comments were written by me or "Administrator" or whatever I call it. From my point of view, the ideal and transparent solution needs the following:

- ability for the administrator to delete all comments of a user as well as all likings, attachments and so on of that user - in general: to delete all actions said user has done in Komento (as required by GDPR!)

I will log this into our issue tracker to allow admin to search specific user id from the comment listing page from backend, so admin can able to view this specific user comment from backend.


a way to show "here was a comment but it has been removed", "user deleted" in the frontend so that other users understand the context of remaining comments (or can try to guess). That's much better than simply removing them (no context at all, there might be comments with answers without the corresponding question) or keeping them under a different user name (not GDPR compliant as personal information might be included in the comment itself like the user's name at the greeting at the end of the comment)

So what you suggested is only show this label text "User deleted" as user's name and show another context in the comment "e.g. here was a comment but it has been removed"?
·
Tuesday, 05 May 2020 19:00
·
0 Likes
·
0 Votes
·
0 Comments
·
Currently we do not have allow admin to download the user data from backend, but you can manually work edit the data from database for now, you can check my attached screenshot below. (modify the `userid` value which you would like to download)

And if you do not want to notify the user who can download their data on frontend, you can comment out this line of code under this file on your site : JoomlaFolder/administrator/components/com_komento/includes/gdpr/gdpr.php (Check my attached screenshot below)
Thanks, both helpful. Still I would appreciate If you could incorporate a way to do this from the normal Komento backend in future versions.

I will log this into our issue tracker to allow admin to search specific user id from the comment listing page from backend, so admin can able to view this specific user comment from backend.
That's great!

So what you suggested is only show this label text "User deleted" as user's name and show another context in the comment "e.g. here was a comment but it has been removed"?
Yes, exactly. Maybe text and "User deleted" could be in grey color as well to convey an "inactive" state.

Best regards and thanks again for your support,
Sebastian
·
Saturday, 09 May 2020 20:11
·
0 Likes
·
0 Votes
·
0 Comments
·
You're most welcome, I will brought all these to the team and see if we can do something about this in the future version.
·
Tuesday, 12 May 2020 13:51
·
0 Likes
·
0 Votes
·
0 Comments
·
Changelog Version 3.1.4
Admin can now search for comments created by specific user using the search filter of id: xxx
New users view at the back-end to allow admin to manually archive data for GDPR

I'm really impressed how quickly you did this.
·
Wednesday, 20 May 2020 17:51
·
0 Likes
·
0 Votes
·
0 Comments
·
We try our best to fix all the issue as what customer reported the bug into the latest version.

Yes, exactly. Maybe text and "User deleted" could be in grey color as well to convey an "inactive" state.

But this one I need more time to discuss with our team regarding this, so this will not include into the current latest version yet.
·
Wednesday, 20 May 2020 18:24
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post