To use Google Rating (Elfsight) GDPR compliant you have to follow these instructions:

Legal Basis

Since the use of Google Rating (Elfsight) can potentially transfer data to a third country without an adequacy decision, processing requires the user's consent (Art. 49(1) a GDPR), whereby the risks of data transfer must be pointed out so that the user can make a well-informed decision.

Data Transfer

Data is transmitted to the independent controller Elfsight, LLC. This information must be included in the privacy policy. Data is transmitted to the independent controller Google LLC. This information must be included in the privacy policy.

Privacy Statement for the Service Google Rating (Elfsight)

Personal data is processed when ratings are submitted on our website. technical connection data of the server access (IP address, date, time, requested page, browser information)data for creating usage statisticsdata about the approximate location of the device. Delivery and provision of the website. Your consent according to Art. 6 (1) a GDPR. Elfsight, LLC, 0015, Yerevan, Paronyana str., 19/3, 201, Armenia (https://elfsight.com). Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, United States of America. Elfsight, LLC Your consent according to Art. 6 (1) a GDPRGoogle LLC Your consent according to Art. 6 (1) a GDPR. The data is transmitted on the basis of your consent in accordance with Art. 6 Para. 1 lit a in conjunction with Art. 49 Para. 1 lit a GDPR. The data is transmitted on the basis of your consent in accordance with Art. 6 Para. 1 lit a in conjunction with Art. 49 Para. 1 lit a GDPR. You were informed before you gave your consent that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against it. Elfsight, LLC: https://elfsight.com/privacy-policy/. is variable and ends when the processing purpose no longer applies.

Additional Information

In addition to the above information, the data protection information must also contain the mandatory information from Art. 13 or 14 GDPR: Name and contact details of the controller, if necessary the contact details of the data protection officer, the purposes for which the personal data are to be processed, the legitimate interests, if the processing is based on Article 6 (1) f GDPR, the duration of the processing, information on the rights of the data subjects including the right to lodge a complaint with a supervisory authority, the possibility of simply revoking consent given, and information as to whether the Provision of the data is required by law or contract or what the possible consequences of non-provision would be. In the event that the data is used for automated decision-making, including profiling, meaningful information about the logic involved and the scope and impact on the data subject must be provided. The processing of the data must also be documented in the list of processing activities in accordance with Art. 30 GDPR. The information required for this can already be found in the privacy statement, which can be created from the previous information.