As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [gdpr]

General Data Protection Regulation (GDPR) is a new legal framework in the EU. It was enacted by the European Parliament, the Council of the European Union, and the European Commission, with the intention to strengthen and unify data protection for all individuals within the European Union (EU). It will apply starting on May 25, 2018.

Filter by
Sorted by
Tagged with
3 votes
3 answers
685 views

How does the GDPR affect a personal blog?

The General Data Protection Regulation (GDPR) (EU) is a regulation in EU law on data protection and privacy for all individuals within the European Union. -- Wikipedia I have a low-traffic, personal ...
4 votes
1 answer
258 views

Is it valid to use a single cookie consent for multiple domains?

Many cookie consent services – for example SecurePrivacy, CookieBot, and CookiePro – allow "cross-domain" consent, where consenting with cookie usage on one domain will imply consent on ...
11 votes
2 answers
12k views

Are session cookies exempt from consent under GDPR?

Session cookies - cookies that last only for the duration of the current session - are arguably not a tracking tool under the spirit of the EU's data protection efforts. Under old EU cookie rules, ...
1 vote
1 answer
165 views

Is it against EU-law to load Google Tag Manager, if I don't do anything with it?

Question Can I load Google Tag Manager on my page, if I don't record any data before the cookie consent is given from the visitor? Context I have a WordPress installation, with a Vue frontend. I ...
1 vote
0 answers
82 views

Possible to legally display ads without consent from EU users?

The EU cookie law, I believe, requires the consent of EU user to place cookies. The ads that I know of on the website uses cookies. Is possible to legally display ads on website without consent from ...
2 votes
0 answers
651 views

How do I resolve the "IAB TC string" warning in AdSense for EU users?

I recently saw a warning in my Adsense dashboard: We've detected an issue on your IAB TC string on one or more of your sites or apps. These errors may affect your ability to serve ads to European ...
3 votes
1 answer
175 views

Make Google Tag Manager' tags GDPR compliant

How to make tags in Google Tag Manager GDPR-compliant without using 3rd party services like CookieBot? I have a custom "We use cookies" popup and GTM set up. I need to understand how to ...
1 vote
0 answers
28 views

Ads receiving clicks, but not actual traffic (phantom clicks from multiple ad platforms)

I am not receiving ad traffic from Facebook ads, Google Search ads, or Reddit ads to my website any more, despite receiving clicks on my ads across all these platforms. This is according to multiple ...
0 votes
0 answers
35 views

How do I set up my GDPR if I have more than one advertiser platform on a single domain?

I work with ezoic ads and Google Adsense, so what should I do to set up my GDPR consent? Should I ask both platforms to disable the consent and hire an authorized vendor to take care of the consent ...
4 votes
3 answers
104 views

Does GDPR make a distinction between individual and company email addresses?

For a B2B company, does GDPR make a distinction in the level of consent required for sending marketing emails to individual and business email addresses? What about role-based emails at companies? At ...
2 votes
1 answer
483 views

Google Analytics Opt-out option for users to be GDPR compliance

We have GA installed on almost every website and with GDPR implementation we have to give user option to Opt-Out from google analytics. I didnt fine any such option in GA which we can use rather ...
1 vote
0 answers
27 views

Does AdSense out-of-the-box GDPR message work with GA4?

AdSense offers a simple solution for GDPR-compliant messages for personalized ads (https://support.google.com/adsense/answer/10961068). If I enable this popup, do I need an additional popup ...
5 votes
1 answer
69 views

How do I allow users to delete Google Analytics data for GDPR compliance?

I'm in the process of making my website GDPR compliant and one of the requirements of GDPR is that users have the ability to delete data. After a user agrees to allow GA, Is there a way for users to ...
4 votes
2 answers
309 views

Ad words conversion without GDPR consent

Is it possible to track Google Ad conversions on a marketing site, cookieless and without the GDPR consent? There are articles like such that explain that you can create a hash combining the IP ...
2 votes
1 answer
56 views

GDPR: Checking if user falls under GDPR terms

I am a bit confused about what is the proper way to detect whether a user falls under GDPR laws. Most websites use IP geolocation for this purpose, but what if the user is traveling while visiting the ...
3 votes
1 answer
1k views

What region codes require GDPR compliance?

TL;DR: What ISO 3166-2 region codes require GDPR compliance? I'm trying to implement my own GDPR compliance using Google Tag Manager. This documentation has a header titled "Region-specific ...
2 votes
2 answers
55 views

Is it forbidden to include "irrelevant" info in a European privacy policy?

I have several German project web sites, using different components. Let's say one site uses a social media plugin an the other site doesn't. Can I use the same, generalized data protection policy ...
3 votes
1 answer
325 views

Will my ranking drop if I don't comply with GDPR?

I have a site that is not doing well on search and I don't know why. My site doesn't have the GDPR popup, will that be an issue with Google rankings? If so, how does Google know?
2 votes
2 answers
79 views

Matomo one click solution GDPR compliant settings

I'm using the latest Matomo self-hosted version. Is there a one click solution to set all settings to be GDPR compliant? (like import default settings for GDPR)
2 votes
1 answer
108 views

Cookie consent for promocode

We have an ecommerce site, and the promocode the user provides on the shopping bag is stored as a session cookie. Is this considered a strictly necessary cookie? If the user rejects non-essential ...
7 votes
1 answer
3k views

GDPR compliant contact form

As of May 2018, the General Data Protection Regulation (GDPR) will come into affect and I am wondering how best to comply with this when implementing a simple contact form. The form, lets say, ...
6 votes
2 answers
439 views

Does a contact form need to ask the user for explicit permission to be GDPR compliant?

I have read about GDPR compliance for forms, and from my understanding a contact form is compliant if it has: A tick box (unchecked) clearly saying we will contact you back regarding your query OR if ...
2 votes
1 answer
51 views

What would happen to my website if I don't install consent for GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act)?

I really hate the consent popup on my website. It's stupid, slow and not even helping the users. May I know what would happen if I just remove it? Will government of EU/California sue me or block my ...
1 vote
0 answers
423 views

Was youtube-nocookie.com always serving cookies or did it start recently? Is it a scam?

I've been using Youtube embeds in enhanced privacy mode by chang[ing] the domain for the embed URL in your HTML from https://www.youtube.com to https://www.youtube-nocookie.com I remember checking ...
1 vote
0 answers
31 views

How long can anonymised log files be stored in the EU?

It seems to be standard industry practice to anonymise IP addresses etc. in web server log files after seven days. If this has happened, how long am I allowed to keep the log files? My reason for ...
6 votes
1 answer
697 views

Should I hide the content inside the cookies law compliance banner from search engines?

I am working on my first website.I am working on the last steps before deploying it. Now I am facing the law compliance requirements. Right now it is mandatory by GDPR to show the cookies compliance ...
1 vote
0 answers
41 views

Do I need a cookies notice?

I've read that if you are storing identifying information like the user's name or email address in cookies then you have to ask for consent. I just want to store the user's country code, like US, CA, ...
1 vote
0 answers
27 views

Small web service, gdpr, privacy policy etc

I have created a simple API based service for developers. And I am stacked for a few days with gdpr and legal stuff. I am using firebase auth, to track users and API usage. I want to show an ads from ...
0 votes
1 answer
88 views

Do I require GDPR user consent for Google Analytics if "anonymizeIp" is enabled?

I can't seem to find a reliable answer to this question. As IP addresses are considered PII under the EU's GDPR, it seems important that Google Analytics tracking is placed behind a cookie consent ...
1 vote
0 answers
18 views

For GDPR consent, should resellers/intermediaries be included in verdorlist.json?

When EU users enter a GDPR supported website, such users get presented with a "are you sure we can follow you?" question. If those users click "yes" than it stores a cookie with a Base64 consent ...
6 votes
1 answer
2k views

How to show Registrant Name in WHOIS lookup?

I have purchased a domain name (anishghosh.me) from bigrock.com but when I'm doing a WHOIS lookup on the domain the registrant name is not showing in that information. How can I show my name as the ...
1 vote
1 answer
114 views

Confused about GDPR and Who is

Exactly how does it work with GDPR and Who is? I live in the Netherlands and have a .com domain at Namecheap. According to the Namecheap support, my data becomes public in Who is if I disable their ...
3 votes
1 answer
364 views

Should I buy domain privacy now that GDPR is in

I used to get scammers ringing my phone because I didn't buy domain privacy. Being in the EU, Do I still need to buy this service if I dont want scammers and spam ringing my phone by looking up whois? ...
6 votes
1 answer
2k views

Do i need User consent for Google Analytics to be GDPR complaint

I am using GA on website as everyone out there does same. In order to be GDPR complaint i had used "https://cookie-script.com" script to for user consent for one of my website and i notice for last ...
1 vote
1 answer
935 views

Hide a privacy policy banner from GoogleBot

I want to hide a privacy policy banner from Google. A similar question has been asked over here however a lot has changed since then. In our case, we have been advised by our lawyers to ensure that ...
3 votes
1 answer
105 views

If a blogging platform doesn't allow deletion of users personal data, who is liable under the GDPR?

I am using a company which offers free blogging service wordpress.com. On that service, there are European blogs with post contacts (name, email, telephone) which is not erasable by the users. ...
1 vote
1 answer
67 views

Would a "this site uses cookies" notice be sufficient under the GDPR for cookies from other domains

I'm using a third-party analytics tool that sets a cookie to track the user for analytics purposes (for tracking conversions) as soon as the user hits the page. The analytics service does not store ...
4 votes
1 answer
117 views

Cookie consent message needed for web game high score?

I'm making an online word game and I want to use a cookie to store the user's high score so it will always show it when they play the game, not just for the session. To comply with the EU GDPR do I ...
2 votes
2 answers
527 views

Do service workers require consent under GDPR?

I notice that Chrome puts service workers, indexed databases and local/session storage under "cookies" in the site info dropdown. Are these things in any way considered ways to access personal ...
-1 votes
1 answer
73 views

My clients name isn't shown in Whois

My client's name isn't shown in whois https://whois.icann.org/ nor https://ae.godaddy.com/whois nor any otheer whois service though I didn't make the domain private, the name, the address, and ...
4 votes
1 answer
510 views

Is a screen name considered personal data under the GDPR?

There are many types of data which is considered "personal" (email, real name, ...). What is not considered personal data? Is the username of a person personal data if it can be changed on different ...
3 votes
2 answers
87 views

Does GDPR replace EU cookie notice policy?

From what I understand GDPR says you are not allowed to store user identification information such us IP, name. But I could use cookies for user experience. For example I can track visited page ...
1 vote
2 answers
1k views

Massive drop in Google impressions for last two months after cookie script was added for GDPR

I was checking Google Search Console and noticed that there is massive drop in Google impressions since July, not sure what could be the reason. I remember that I integrated a cookiebot.com script ...
1 vote
0 answers
25 views

GDPR compliance for B2B Scenario

We are working on a website that will be an authentication only site, i.e. only users who are invited and accept the invitation by logging into our site will have access to it. We will also have a few ...
2 votes
2 answers
64 views

Can I send personal email under GDPR?

I run an app with around 10,000 users. When users register, we show them a checkbox saying "Send me occasional tips and updates", which is unchecked by default. If users don't check it, we don't send ...
1 vote
0 answers
42 views

Delete Google Analytics cookie in AMP version

I'm developing a new AMP site. It's very simple and I just want to know visits/pageviews in Google Analytics. Because of the European GDPR law, instead of notifying the users about the cookie, I ...
3 votes
1 answer
115 views

GDPR & Outdated Browsers

So as a web developer we are always asked to support the old browsers for the potential that someone may fire up a decade old computer and visit our sites. However with GDPR now in place I wonder if ...
3 votes
1 answer
329 views

How do I stop showing Adsense to someone if they reject cookies?

I have a Wordpress site and have just installed a cookie banner to get consent. I have a few questions about this though, what do I do if somebody clicks "reject"? How do I stop showing them the ...
6 votes
2 answers
220 views

My web page does not collect any data. Should I disclose my hosting company (which may log requests) in my privacy policy?

I have a static blog hosted on GitHub. I do not collect any data about anyone. GitHub pretty straightforward states that they do collect some data in their GitHub Privacy Statement. So if a user go to ...
0 votes
1 answer
30 views

Table that lists all local storage items used on site

According to the newest regulations and our law department each website our company owns/manages needs to have a page that lists all cookies and local storage items used on the site. I tried to find ...