Is Theme X GDPR-compliant?

Support
#1

Hi there,
is the X Theme GDPR-compliant?

Greetings, Miriam

1 Like
#2

Hello Miriam,

Thanks for asking. :slight_smile:

I’m sorry but I could not say something about this because we don’t yet have a memo or news about GDPR. However, I have added this to our issue tracker and so that our developers are notified about this.

Thanks.

1 Like
#3

Hi,

if not, all your European customers will not be able to work with you. Me implied. I need more information than that. It is a legislation by the the European union. I can not be satisfied with that answer.

Greetings, Miriam

#4

Hi Miriam,

My name is Matt and I’m part of our leadership team.

It’s a great question you’ve asked but unfortunately I cannot give you an answer that is definitive in law. At this stage, companies are having to interpret GDPR as best they can but ultimately it will be case law that will likely give the actual regulations some proper context.

Since X is software that enables you to create websites, it’s more about your implementation of it that is of primary concern. It’s probably worth mentioning that data is only passed to third party software when specifically set up to do so by you. For example, if you opt to use Google Fonts on your site, which are readily available using the theme, they are retrieved from Google’s servers when you actually select on of their fonts to use for headings or body copy etc. If you don’t set the theme up to use them, they won’t be called from Google.

The IP address is passed to Google when requesting the fonts. On one hand, you could argue that since an IP address is personal data, you might not be compliant by using Google Fonts, but on the other hand, an IP address alone may well be deemed to be insufficient to personally identify an individual, and therefore be compliant. So like I said before, it’s quite subjective and only case law will clear up these kinds of things one way or another. If this was a genuine concern to you then you could negate this issue by not selecting Google Fonts anywhere from within the theme options. Instead, you could install the font files to be served directly from your server.

As I said before, we cannot give you legal advice. But what I can say is that our own software does not process data that is identifiable to a person. I cannot speak to how plugin authors process data, so that may be something else you wish to consider. But that’s not something exclusive to our products.

I hope that this gives you a little bit more clarity. If you have any specific use cases that you would like to ask about, please go ahead and I’ll do my best to answer.

Thanks!

#6

Hi Matt,

thanks. This is the information I needed, that you do not pass on any information about users.

I appreciate your help.

Sincerely, Miriam

#7

Hi Miriam,

Happy to help. Have a great day!

#8

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.