GDPR penalty for passing on of IP address to Google by using Google Fonts

Re:GDPR penalty for passing on of IP address to Google by us... by kall on Sunday January 30, 2022 @08:12AM (#30136881)

You may not serve a website to german visitors from GCP at all, certainly not without getting consent first.

[ Parent | on HN ]

Re:GDPR penalty for passing on of IP address to Google by us... by quyse on Sunday January 30, 2022 @08:23AM (#30136956)

Does it mean Google, AWS, DigitalOcean, Cloudflare, Akamai, and everybody else (except Hetzner) are now outlawed in Germany? Because, as I said, I cannot ask for consent before serving the initial HTML, unless someone develops a magical IP-less protocol for delivering consent. I'm not sure if even Hetzner server is OK, it's still a third party even if Germany-based.

[ Parent | on HN ]

Re:GDPR penalty for passing on of IP address to Google by us... by kall on Sunday January 30, 2022 @11:03AM (#30138307)

If we take another ruling [0] seriously, Hetzner is dicy only because they recently added a US datacenter. For the others, yeah.

You could rent colo, go with a friendly neighborhood hoster like uberspace or with something like Telekom Cloud (lol).

[0] https://www.taylorwessing.com/en/insights-and-events/insight...

[ Parent | on HN ]

Re:GDPR penalty for passing on of IP address to Google by us... by perlgeek on Sunday January 30, 2022 @11:22AM (#30138473)

I'm pretty sure this is not correct.

There is a technical necessity for your hosting provider to see the user's IP.

The GDPR does not require consent for passing on private information when there is a technical or legal necessity, as well as a number of other preconditions.

[ Parent | on HN ]