Hot answers tagged

10 votes

Are session cookies exempt from consent under GDPR?

I've been looking at this too, and I believe they fall under the category of pseudonymous data (most information taken from this helpful page): Article 4(5) ‘pseudonymisation’ means the ...
Ian's user avatar
  • 201
8 votes

Do i need User consent for Google Analytics to be GDPR complaint

First of all, I'm not a lawyer but after reading the new law and analyzing Analytics, that's how I've been working since GDPR. The problem is that you can't track any user information without their ...
Emirodgar's user avatar
  • 3,817
6 votes
Accepted

GDPR - Clear Chat Messages

What is the issue here GDPR allows you control of your data, but it is not strongly defined who owns chat messages. This will probably be solved once there have been court cases on the matter, which ...
jrtapsell's user avatar
  • 687
6 votes

How to show Registrant Name in WHOIS lookup?

Why do the details not show by default This is because of the GDPR, which brought in a lot of personal data protections, and resulted in a large amount of changes to WHOIS, in order to try to make it ...
jrtapsell's user avatar
  • 687
6 votes

Do service workers require consent under GDPR?

I am not a lawyer nor do I reside in the EU, but to the best of my understanding GDPR is a law about user tracking, not a law about which browser APIs you can use. In the eyes of the law it doesn't ...
Maximillian Laumeister's user avatar
5 votes

Massive drop in Google impressions for last two months after cookie script was added for GDPR

The Google Search Console site you are looking at is specific to http. You need to also verify your new https site with the Google Search Console to see how it is performing. That drop for http is ...
Tony McCreath's user avatar
5 votes

What region codes require GDPR compliance?

First, it's important to say I'm not a lawyer and this isn't legal advice. I found a GDPR Country List that seems to be from 2022. This list does not include region codes, so I am crosschecking it ...
Daniel Kaplan's user avatar
4 votes

GDPR - Kills email marketing, How can I do email marketing under GDPR?

It sounds like the problem here is people are already not very engaged with your emails. I see two approaches to reach your audience before the deadline: Send another email, but make it engaging. ...
WebElaine's user avatar
  • 1,920
4 votes
Accepted

Cookie consent message needed for web game high score?

I think the answer is no. This page says Not all cookies are used in a way that could identify users, but the majority are and will be subject to the GDPR. That sounds like if there is no ...
Rob Kwasowski's user avatar
4 votes
Accepted

Should I hide the content inside the cookies law compliance banner from search engines?

It's fine, there's no need to hide it. Google knows these things need to exist, and having one will not hurt your SEO. Indeed, many large sites, e.g., Android and Google themselves, don't hide their ...
GDVS's user avatar
  • 7,795
4 votes

Make Google Tag Manager' tags GDPR compliant

//UPD: There has been Consent Mode feature in GTM in Beta for some time now, it may be good enough to use in production. https://developers.google.com/tag-platform/tag-manager/templates/consent-apis ...
BNazaruk's user avatar
  • 1,762
4 votes
Accepted

What would happen to my website if I don't install consent for GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act)?

Most likely nothing will happen - it us highly unlikely they could sue you (you are outside their jurisdiction) and those jurisdictions are not designed to block the Internet - and have bigger ...
davidgo's user avatar
  • 7,874
3 votes

Is a screen name considered personal data under the GDPR?

I'm no lawyer, but under the current UK Data Protection Act, personal data is broadly defined as: "any information relating to an identified or identifiable natural person ('data subject'); an ...
andrew5555's user avatar
3 votes
Accepted

Massive drop in Google impressions for last two months after cookie script was added for GDPR

When moving from http to https you will see http drop and https rise until all the 301 and 410 are integrated into https (google webmaster tools treats each protocol as different sites) As how to ...
alo Malbarez's user avatar
3 votes

Does GDPR replace EU cookie notice policy?

The cookie notice/consent is apart of the Directive 2002/58/EC while The EU General Data Protection Regulation (GDPR) replaces the 95/46/EC Data Protection Directive. They are not the same but work ...
Simon Hayter's user avatar
3 votes

Hide a privacy policy banner from GoogleBot

You do not need to hide the GDPR efforts from Google at all. If at all, it is an excellent signal towards any search engine that you are law abiding and you have Privacy Policy in place and take Data ...
Georg Keferböck's user avatar
3 votes

Does a contact form need to ask the user for explicit permission to be GDPR compliant?

I have a contrary opinion on this. I don't believe your checkbox collects any additional consent from the user that just submitting the form does, so I believe the checkbox can be removed because it ...
Maximillian Laumeister's user avatar
3 votes
Accepted

Cookie consent for promocode

https://gdpr.eu/cookies/ has a good summary of cookie usage under the GDPR in very readable language. It says: Strictly necessary cookies — These cookies are essential for you to browse the website ...
Stephen Ostermiller's user avatar
2 votes
Accepted

What is the effect/downside of making GA use session cookies (_ga cookies expire 0 sec)

The GDPR is about tracking people and cookies. If you do either, then you're definitely not off the hook. The fact that you reduce the duration of the cookie may help in some ways, but it doesn't ...
Alexis Wilke's user avatar
  • 2,235
2 votes

Can material sent to me as the proposed content of a website fall foul of GDPR regulation?

It looks like contractors do fall under GDPR; but in certain situations do not have to register. The EU General Data Protection Regulation (GDPR) is aimed at all organisations or individuals who hold ...
Christopher Klaus's user avatar
2 votes

Websites using email alerts to notify users - is this considered marketing / covered by GDPR?

You should look at what “legitimate interests” are under GDPR: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/legitimate-interests/when-can-we-rely-on-...
termsfeed's user avatar
  • 720
2 votes

Which country's privacy policy is applicable to my website?

You need to look at: Your home country laws on privacy, i.e. India The country where you host/collect/process data through, i.e. USA The countries where your customers are, i.e. USA, Canada, EU You ...
termsfeed's user avatar
  • 720
2 votes
Accepted

What kind of advertisement am I allowed to show and still comply with GDPR?

So there are a couple of things you should be considering. Setting Cookies If you are setting a cookie on your website and passing this on to a 3rd party, this counts as personal identifiable ...
Jason's user avatar
  • 686
2 votes
Accepted

Where to Send Non-Consenting Visitors?

Should non-consenting visitors be kicked out It depends on the use of the cookie, as this ICO page says: An online furniture store requires customers to consent to their details being shared with ...
jrtapsell's user avatar
  • 687
2 votes

Can I send personal email under GDPR?

I am not a lawyer, however, I would not consider using information which the user freely provided in an expected manner would fall under activities restricted by the GDPR. To confirm, let's consult ...
Gray's user avatar
  • 176
2 votes
Accepted

Matomo one click solution GDPR compliant settings

GDPR can be a complex process, there is this guide that goes over the 12 steps: https://matomo.org/blog/2018/04/how-to-make-matomo-gdpr-compliant-in-12-steps/ The easiest way to be compliant with GDPR ...
mattab's user avatar
  • 146
2 votes

Does a contact form need to ask the user for explicit permission to be GDPR compliant?

GDPR Compliance is Extremely Broad Anywhere you are collecting user information, then storing said information, and there is the possibility of using that information for future correspondence, will ...
Mike Ciffone's user avatar
  • 6,350
2 votes

Will my ranking drop if I don't comply with GDPR?

To my knowledge, Google has never announced that GDPR compliance is a factor in their ranking algorithm, so it's reasonably safe to assume that your ranking issues stem from a different cause. However,...
Maximillian Laumeister's user avatar
2 votes

Does AdSense out-of-the-box GDPR message work with GA4?

It looks like Google Analytics and Adsense adhere to TCF v2.0 which is a standard for consent management. According to this documentation https://support.google.com/analytics/answer/10022331?hl=en if ...
Luke's user avatar
  • 133
1 vote
Accepted

How to find expiry date without whois?

What needs to change with WHOIS At the moment the private details of registrants are included in the publicly accessible WHOIS data. The argument for nobody having access is that people like their ...
jrtapsell's user avatar
  • 687

Only top scored, non community-wiki answers of a minimum length are eligible