3 ms·
Actually coming up with an example is quite easy. Consider website with huge catalog that customizes recommendations based on your previous activity on the webs
by guy98238710 9y ago
Actually coming up with an example is quite easy. Consider website with huge catalog that customizes recommendations based on your previous activity on the website. This makes user experience better, but it is not strictly required for the site to function. None of the exceptions on the page you linked apply to this case.
- pjc50 9y agoIf the user has an account cookie that would be subsumed in there, along with the consent notice that the site was storing your activity. If there is no other cookie, then it gets interesting - you're storing a chunk of their browser history, which if you can identify it to a particular user becomes personal data. Then you need their permission to store this - and that's the intent of the GDPR.
- TheCoelacanth 9y agoYou could easily do that for logged in users without using anything more than a session cookie to track that they are logged (which was allowed). Tracking non-logged in users across multiple sessions is obviously not allowed without consent, but that is exactly the type of non-consensual privacy invasion that the law is intended to prevent.