To use Chatbase Livechat GDPR compliant you have to follow these instructions:

Legal Basis

Due to the fact that the integration of Chatbase Chat is not necessary for the operation of the website, the integration requires consent.

Data Transfer

Data is transmitted to the independent controller CHATBASE.CO INC. This information must be included in the privacy policy.

Privacy Statement for the Service Chatbase Chat

If the chat function of our website is activated, additional personal data will be processed. Processed data categories: technical connection data of the server access (IP address, date, time, requested page, browser information)data about your inquiry or contactcontact information like Name and e-mail address. Purpose of processing: analysis of user behavior, Supporting website visitors with technical or content-related questions and content optimization. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: to the data controller CHATBASE.CO INC, 4700 Keele Street, 215 Bergeron Centre of Engineering Excellence, Toronto, ON, M3J 1P3, Canada (https://www.chatbase.co/). The legal basis for the data transfer to CHATBASE.CO INC is Your consent according to Art. 6 (1) a GDPR. This may also mean a transfer of personal data to a country outside the European Union. The data is transmitted to Canada on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2001) 4539. The privacy policy of CHATBASE.CO INC: https://www.chatbase.co/privacy.

Additional Information

In addition to the above information, the data protection information must also contain the mandatory information from Art. 13 or 14 GDPR: Name and contact details of the controller, if necessary the contact details of the data protection officer, the purposes for which the personal data are to be processed, the legitimate interests, if the processing is based on Article 6 (1) f GDPR, the duration of the processing, information on the rights of the data subjects including the right to lodge a complaint with a supervisory authority, the possibility of simply revoking consent given, and information as to whether the Provision of the data is required by law or contract or what the possible consequences of non-provision would be. In the event that the data is used for automated decision-making, including profiling, meaningful information about the logic involved and the scope and impact on the data subject must be provided. The processing of the data must also be documented in the list of processing activities in accordance with Art. 30 GDPR. The information required for this can already be found in the privacy statement, which can be created from the previous information.