Re:GDPR penalty for passing on of IP address to Google by us...
by Xylakant on Sunday January 30, 2022 @12:22PM
(#30139009)
The GDPR does not require consent for everything. It allows processing data that’s required to provide the desired functionality and payment processors would be covered (IANAL, to take with a grain of salt) You’d still need to mention that in the pages privacy policy, but other than that you should be fine, as long as you have the proper paperwork in place (DPA,…) and the payment processor is themselves GDPR compliant.
[ Parent
| on HN ]