Skip to main content
10 votes

Are session cookies exempt from consent under GDPR?

I've been looking at this too, and I believe they fall under the category of pseudonymous data (most information taken from this helpful page): Article 4(5) ‘pseudonymisation’ means the ...
Ian's user avatar
  • 201
8 votes

Do i need User consent for Google Analytics to be GDPR complaint

First of all, I'm not a lawyer but after reading the new law and analyzing Analytics, that's how I've been working since GDPR. The problem is that you can't track any user information without their ...
Emirodgar's user avatar
  • 3,817
5 votes

Is it required to list each cookie by name to comply with EU/UK Cookie Laws?

It is required by EU law that all websites operating in or targetting audiences in the EU must have a cookie notice. When they first introduced the policy, it was a strict consent, since then it has ...
Simon Hayter's user avatar
4 votes
Accepted

Cookie consent message needed for web game high score?

I think the answer is no. This page says Not all cookies are used in a way that could identify users, but the majority are and will be subject to the GDPR. That sounds like if there is no ...
Rob Kwasowski's user avatar
4 votes

Make Google Tag Manager' tags GDPR compliant

//UPD: There has been Consent Mode feature in GTM in Beta for some time now, it may be good enough to use in production. https://developers.google.com/tag-platform/tag-manager/templates/consent-apis ...
BNazaruk's user avatar
  • 1,772
4 votes
Accepted

Should I hide the content inside the cookies law compliance banner from search engines?

It's fine, there's no need to hide it. Google knows these things need to exist, and having one will not hurt your SEO. Indeed, many large sites, e.g., Android and Google themselves, don't hide their ...
GDVS's user avatar
  • 7,795
3 votes
Accepted

Cookie consent for promocode

https://gdpr.eu/cookies/ has a good summary of cookie usage under the GDPR in very readable language. It says: Strictly necessary cookies — These cookies are essential for you to browse the website ...
Stephen Ostermiller's user avatar
3 votes

Does GDPR replace EU cookie notice policy?

The cookie notice/consent is apart of the Directive 2002/58/EC while The EU General Data Protection Regulation (GDPR) replaces the 95/46/EC Data Protection Directive. They are not the same but work ...
Simon Hayter's user avatar
3 votes
Accepted

Is a cookie prompt needed for European company websites used only internally?

This guidance (Guidance on the rules on use of cookies and similar technologies) from ICO(UK's independent body set up to uphold information rights) has a part related to the intranet: How do ...
behzad's user avatar
  • 141
2 votes

Which country's privacy policy is applicable to my website?

You need to look at: Your home country laws on privacy, i.e. India The country where you host/collect/process data through, i.e. USA The countries where your customers are, i.e. USA, Canada, EU You ...
termsfeed's user avatar
  • 720
2 votes

GDPR cookies, do I need to store consent serverside?

As with most things in law, if sued, the burden of proof is on both parties to state their case. In the event that your website/company was ever brought to court over GDPR, you would have to assume ...
Michael d's user avatar
  • 4,803
2 votes
Accepted

Would blocking all EU traffic (to comply with EU cookie law) have unexpected consequences such as crawlers or SEO?

Here is my take on this: Firstly, ask the "legal team" to explain to you what a cookie is, and how that law protects users. Remind the "legal team" that the out-of-touch "politicians" who made that "...
dhaupin's user avatar
  • 3,339
2 votes
Accepted

What is the effect/downside of making GA use session cookies (_ga cookies expire 0 sec)

The GDPR is about tracking people and cookies. If you do either, then you're definitely not off the hook. The fact that you reduce the duration of the cookie may help in some ways, but it doesn't ...
Alexis Wilke's user avatar
  • 2,235
2 votes

Must cookie consent banner prevent site working?

Provided the site doesn't set any cookies, or at least only truly essential cookies before the visitor accepts or dismisses the cookie consent notice, then yes they are compliant. Some site owners ...
Zhaph - Ben Duguid's user avatar
2 votes
Accepted

Is a cookie notice required on a personal web site that uses cookies?

Indeed, the information out there is disparate and often confusing. According to the folks in this Quora thread, GDPR applies to you as well. On the other hand, this article would suggest you can ...
Henry Visotski's user avatar
1 vote

The info logged in my host servers

We can only provide general advice without knowing the specifics - but I'm pretty sure this will cover > 95% of hosts. The web host logs are logged in the web server which can be configured, but ...
davidgo's user avatar
  • 8,069
1 vote

Custom "cookie solution"

Your question is unclear. Cookies is simply a variable/token which is passed between the web client and the server so the server knows who it is talking to. If you use Google properties then Google ...
davidgo's user avatar
  • 8,069
1 vote

Is it valid to use a single cookie consent for multiple domains?

It is valid as long as you can comply to EU GDPR. You might need to dynamically generate some contents of the cookie banner consent (i.e.: domain name). Your domain name example.org and subdomain app....
Goemon Code's user avatar
1 vote

Must cookie consent banner prevent site working?

First you need to decide from which Countries your website will be accessible as the consent banner might need to comply to different legislations such as EU GDPR/ePrivacy, UK GDPR, CCPA/CPRA, LGPD, ...
Goemon Code's user avatar
1 vote

Is it against EU-law to load Google Tag Manager, if I don't do anything with it?

Google Tag Manager container code on it's own, does not track anything or use/create any cookies for a site visitor. So I'm considering to load GTM, but then setup all Analytics and third-party ...
Bronwyn V's user avatar
  • 3,423
1 vote

Does GDPR replace EU cookie notice policy?

Nowhere in the GDPR it says you are not allowed to store user identification information. What the GDPR states is that if you collect or process personal data (i.e. any data that can be linked to a ...
Richard Kranendonk's user avatar
1 vote

GDPR - 3rd party compliant contact form

It's pretty hard to answer your question, since you are missing some much needed information. It depends on how you collect the information as well, and since I am not a lawyer, I cannot and will not ...
David K.'s user avatar
  • 2,771
1 vote

What does cookie opt-out mean in the context of the EU Cookie Law?

Some types of cookies including user input cookies which are valid for the duration of the session are exempt from the cookie consent law. What this means is that you may use a cookie to identify if ...
Chris Rutherfurd's user avatar
1 vote

Are session cookies exempt from consent under GDPR?

Exemption from consent under EU GDPR for session cookies needs to be evaluated on a cookie-by-cookie basis. You have to comply to both the EU GDPR and the ePrivacy Directive: https://gdpr.eu/cookies/ ...
Goemon Code's user avatar
1 vote
Accepted

GDPR cookies, do I need to store consent serverside?

To be honest I am looking for an answer as well. Just to mention we are not talking about a sue here as Michael wrote, it is a data protection audit, which is done by the data protection authority of ...
inf3rno's user avatar
  • 126
1 vote

What does "Slightly longer" mean in EU cookie law?

The reason why the term "slightly longer" is used is that different websites have needs to have the cookies last different durations past the end of the session. The basic interpretation of this ...
Chris Rutherfurd's user avatar
1 vote

Which country's privacy policy is applicable to my website?

According to https://www.cookielaw.org/faq/#WereoutsideoftheEUareweaffected technically you don't need to display the cookie consent banner as you do not legally have an entity within the EU, the site ...
ThePHPUnicorn's user avatar
1 vote

Which country's privacy policy is applicable to my website?

Technically, EU privacy policy is strictly for web pages within EU. So, you don't need to put it quite frankly. But... make your privacy policy for the web, look how are they written, then you write ...
Josip Ivic's user avatar
  • 3,878

Only top scored, non community-wiki answers of a minimum length are eligible