GDPR and BO modules

[spinelle]

Hi,

If we have a module that is only on BO, how are we suppose to ask authorization from customer for the GDPR?

For exemple, we have a module that transform customer address in latitude/longitude data. So we have personal data, but no contact with the customer to ask there authorization. They don't know we collect those data, it's only for the administrator of the shop.

Any idea, on how to be GDPR compliant?

Thank you!