3 ms·
They have Google Analytics enables without consent and in the privacy policy they claim this: >> “Google Analytics does not identify individual users or associ
by bad_user 8y ago
They have Google Analytics enables without consent and in the privacy policy they claim this:
>> “Google Analytics does not identify individual users or associate your IP address with any other data held by Google.”
This is wrong, GA may anonymize IPs, however they drop a tracking cookie in order to identify unique visitors.
Tracking cookies under the GDPR fall under “personal data”, even if they are pseudo-anonymous. Also note that usage of Google Analytics cannot be a “legitimate purpose”.
So is this legal what they are doing? Or what am I missing?
- protonmail 8y agoIn the sense of art. 6 §1 (f) GDPR, there is nothing preventing analytics to be justified by a legitimate interest. Recital 47 also says the processing of personal data for direct marketing purposes can be carried out for legitimate interests. Per the e-privacy directive, we provide notice that there is a cookie. The updated Privacy notice is now supplemented with extra information.