Add setting to require consent for notifications

Ensure GDPR compliance by default (Article 25 GDPR – privacy by design
and by default). Under GDPR, consent must be freely given, specific,
informed and unambiguous [1]. We were subscribing users without
explicity consent, which goes against the "No pre-ticked boxes"
principle.

For compatibility with existing installations, we're using a setting,
disabled by default. Once we release version 2.4.0 we will enable it by
default, which won't affect existing installations but only new ones.

[1] https://gdprinfo.eu/best-gdpr-newsletter-consent-examples-a-complete-guide-to-compliant-email-marketing
This commit is contained in:
Johann
2025-09-16 21:25:35 +02:00
committed by Javi Martín
parent 208dc01d3b
commit e7f2210380
8 changed files with 54 additions and 10 deletions

View File

@@ -140,6 +140,9 @@ en:
sdg_description: Enable Sustainable Development Goals sections in the administration menu and in the Global Settings.
cookies_consent: Cookies consent banner
cookies_consent_description: Enable the cookies consent banner to inform users about the cookies the application uses.
gdpr:
require_consent_for_notifications: Explicit consent for notifications
require_consent_for_notifications_description: Require explicit user consent in order to send them newsletters and similar information as required by the General Data Protection Regulation (GDPR).
remote_census:
general:
endpoint: "Endpoint"

View File

@@ -140,6 +140,9 @@ es:
sdg_description: Habilitar secciones relacionadas con Objetivos de Desarrollo Sostenible en el menú de administración y en la sección de Configuración Global.
cookies_consent: Banner de consentimiento de cookies
cookies_consent_description: Activa el banner de consentimiento de cookies para informar a los usuarios sobre las cookies que utiliza la aplicación.
gdpr:
require_consent_for_notifications: Consentimiento explícito para notificaciones
require_consent_for_notifications_description: Requerir que los usuarios tengan que dar consentimiento explícito para enviarles boletines e información similar tal y como describe Reglamento General de Protección de Datos (RGPD).
remote_census:
general:
endpoint: "Endpoint"