the hoster of the website is allwoed to store the ip adress if: - the owner of the site has a "avv"

the hoster of the website is allwoed to store the ip adress if: - the owner of the site has a "avv" (dont find the english term, data protection agreement)

Tho1212334OP•6/22/24, 8:39 AM

but he has to anonymize the ip

Tho1212334OP•6/22/24, 8:39 AM

*has a avv agreement with the hoster.

TTho1212334 the hoster of the website is allwoed to store the ip adress if: - the owner of t...

Hello, I’m Allie!•6/22/24, 8:40 AM

So is the AVV/manual opt-in required if the Website doesn't store the IP adress, but just processes it?

Tho1212334OP•6/22/24, 8:41 AM

even the processing of the personal information (ip adress) is forbidden if it is not technical neccessary

TTho1212334 even the processing of the personal information (ip adress) is forbidden if it i...

Hello, I’m Allie!•6/22/24, 8:42 AM

And if it is, it is ok, even without an opt-out?

Tho1212334OP•6/22/24, 8:42 AM

so you can store the ip adress for i.e. intrusion detection and protection. but you have to implement measures to protect the data and publish them

Tho1212334OP•6/22/24, 8:42 AM

and there is a limit of 7 days i think

Tho1212334OP•6/22/24, 8:43 AM

but most privacy statements include a condition to allow free use of the ip adress. BUT if i want to do this i have to show the privacy statement BEFORE i collect the data. Same with 3-Party calls like challenges.cloudflare.com

TTho1212334 but most privacy statements include a condition to allow free use of the ip adre...

Hello, I’m Allie!•6/22/24, 8:46 AM

Yeah, I'm just wondering how that works for a firewall for example. If I am not allowed to use your IP address(blocking via Firewall) before showing you a Privacy Statement, then all anyone would need to take down my website would be to DDoS my Privacy Statement

Tho1212334OP•6/22/24, 8:49 AM

as far as i understand that is no problem because the processing of the ip trough the firewall is technicaly neccessary. If you use a blacklist on your firewall the content of the blacklist is not affected by the dpr because it is technically neccessary to save this ip adresses for a longer time. the ip adress of the visitor has to be deleted after a given limit (7 days i think, maybe 30) if there is no problem with it. (it is allowed to keep the address longer if the visitor seems to "attack" the page)

Tho1212334OP•6/22/24, 8:50 AM

but i have to operate the firewall on-prem, in a eu country or i need to have a privacy-agreement with the operator of the firewall.

TTho1212334 as far as i understand that is no problem because the processing of the ip troug...

Hello, I’m Allie!•6/22/24, 8:52 AM

So if I were to build a service that used IP, along with other signals from the browser, to prevent more sophisticated kinds of attacks before showing the user a privacy agreement, would that be ok, assuming that the privacy agreement would be available after they pass those checks?

Tho1212334OP•6/22/24, 9:03 AM

as far as i understand legitimate intersest is the same as technicaly neccessary

Tho1212334OP•6/22/24, 9:03 AM

if i operate a bank i need to collect the personal data of my visitors

Tho1212334OP•6/22/24, 9:04 AM

it is not easy to answer the question of HardlyWorkin'

Tho1212334OP•6/22/24, 9:08 AM

it is not only the availability of the privacy agreement to the visitor. if i am not asking the visitor for consent before transfering the data certain things must apply. if the 3party is outside the EU and not in a special "framework" (like the us privacy framework) it is not possible to transfer the data withouth the active and informed consent of the visitor. if the 3party is in such a framework (like cloudflare is in the us pricacy framework) the owner of the site has to sign a data processing agreement with the 3party. He also has to ensure and monitor if the 3party is following the "technical measures" to ensure the protetion of the data by the law. This is not possible for 90% of the website owners

Tho1212334OP•6/22/24, 9:09 AM

-sorry for the bad english-

Tho1212334OP•6/22/24, 9:15 AM

at leo: cloudflare is allowed to process my data if i give a informed consent. opening xy.tld and beeing "redirected" to challenges.cloudflare.com i am not able to give (or deny) my consent. this could be legal if the owner of the site has an agreement with cloudflare and is monitoring the quality of the data protection at cloudflare. in my situation i am not able to rely on these agreements but have to block all 3d-party calls withouth consent (with the consent beeing managed by us).

Tho1212334OP•6/22/24, 9:16 AM

so we are "exaggerate" the requirements of the dpr for our customers.

Tho1212334OP•6/22/24, 9:18 AM

i am running out of time, i ask the law-guys next week. i am not a lawyer myself so the preceding statements are my personal interpration

thank you guys for your time.

Tho1212334OP•6/22/24, 9:20 AM

you are right i did not thought about that.

Tho1212334OP•6/22/24, 9:20 AM

*think

Tho1212334OP•6/22/24, 9:21 AM

is every site "protected" by cloudflare hosted by cloudflare?

Tho1212334OP•6/22/24, 9:21 AM

sorry i have to leave now... damn

Erisa•6/22/24, 9:32 AM

what does the rule look like? maybe the expression is incorrect

Syst3m•6/22/24, 10:47 AM

Hi guys, I hope someone will answer this stupid question maybe :D. I use cloudflare for dns management for my domain. Everything works well except that I am not able to create a www redirect. Anything I tried will just not work when I do www.domain.com on my browser or anywhere else. Could some advise me what to do? I already tried to search the interent for my problem but without any luck.

Syst3m•6/22/24, 10:53 AM

Is there a deployment time that I need to wait? Or should this be instantly?

RyanKnack•6/22/24, 10:53 AM

it should be instant

Syst3m•6/22/24, 10:57 AM

hmm, my rule description is the following

www.mello.ro/*
Forwarding URL (Status Code: 301 - Permanent Redirect, Url: https://mello.ro/$1)

and it seems is not redirecting but instead I get "www.mello.ro’s DNS address could not be found. Diagnosing the problem.
DNS_PROBE_POSSIBLE"

Original message was deleted

Hello, I’m Allie!•6/22/24, 11:00 AM

I would go with a Redirect Rule in this case

Hello, I’m Allie!•6/22/24, 11:00 AM

While the deprecation of Page Rules has been pushed back, iirc it is still planned for some time in the future, and Redirect Rules would be able to do this job just as well

Syst3m•6/22/24, 12:37 PM

Somehow both ways are not working.. I guess I need to look more into this

SSyst3m Somehow both ways are not working.. I guess I need to look more into this

Hello, I’m Allie!•6/22/24, 12:50 PM

Do you have a DNS record for www.mello.rowww.mello.ro?

Hello, I’m Allie!•6/22/24, 12:50 PM

I would recomend an AAAAAAAA record pointing to

100::

100::

Syst3m•6/22/24, 12:53 PM

The AAAA record should be used in combination with other rules or just by itself?

here is what I added.
AAAA- www - 100:: - Proxied - Auto

I tried it even just by itself and still no luck. I don't understand why is it not working because from my experience a simple CNAME would do the trick

SSyst3m The AAAA record should be used in combination with other rules or just by itself...

Hello, I’m Allie!•6/22/24, 1:03 PM

You need both an AAAA record and a Redirect Rule

Syst3m•6/22/24, 1:21 PM

I would have never guessed this but it worked! Thanks a lot!

Kinu•6/22/24, 3:28 PM

Does cloudflare hotlinking protection hinder images being scraped by known bots like google?

Kinu•6/22/24, 3:30 PM

Alright that is actually ideal, thank you.

Buddha•6/22/24, 3:50 PM

Hi my name is brahim i ´m 16 years old Why about you

TheFURY-187•6/22/24, 5:53 PM

Hello I came here looking for help from support team why cloudflare is not working at the moment I have been waiting all night for it to accept my email but the captcha stayed loading never showed up

Advany•6/22/24, 6:09 PM

yeah, cloudflare dashboard is also looping here!

Advany•6/22/24, 6:10 PM

Keeps looping and then I get rate limited lol

advaith•6/23/24, 4:58 AM

hm ive been trying to transfer a domain to cf for hours and it hasnt been working

advaith•6/23/24, 4:58 AM

cf says client transfer prohibited even if the domain is unlocked

advaith•6/23/24, 4:58 AM

however, if i leave the domain unlocked for like an hour and then lock it, then cf thinks its unlocked

the hoster of the website is allwoed to store the ip adress if: - the owner of the site has a "avv"

Similar Threads

Similar Threads

Similar Threads