I am running a website which servers advertisements to stay profitable (one banner). Now I found out, that none of the advertisement delivery networks that I use, explain how they process the visitor's data.

Now with GDPR, can I still include these ads, without knowing how they process user data or is that a violation? Is it the advertisement network who must ensure compliance or the webmaster who delivers the ads?

  • I assume that this webmaster is in Europe and the site targets European visitors? If those are not the case, the GDPR is probably irrelevant. May 29, 2018 at 9:34
  • 1
    the website is hosted in the EU, I am a EU citizen residing outside of the EU and my website is targeted towards any kind of people all over the world, including Europeans.
    – Daniele D.
    May 29, 2018 at 10:40

1 Answer 1


So there are a couple of things you should be considering.

Setting Cookies

If you are setting a cookie on your website and passing this on to a 3rd party, this counts as personal identifiable information (PII). If you want to set this cookie, you need a user to opt-in, then set the cookie.

If you want a simple way to do this, have a look at [this google tag manager approach.][1]

While you may be using different services, below is what Google & Facebook are providing. That might help give you some direction for the Ad Networks you work with.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.