4 ms·
Everybody is so focused on 'cookies' as if the technology itself was regulated. The web developers (or marketing agencies or whatever) are also slow to learn wh
by pestaa 6y ago
Everybody is so focused on 'cookies' as if the technology itself was regulated. The web developers (or marketing agencies or whatever) are also slow to learn what proper data protection means, and slap popups and banners on everything, making the web disgusting and regulations seem misguided.
A session cookie, especially after a login, may not require consent at all. Describe in your policy what personal data, if any, is tied to the session, and what you do with it. Most places collect and process only what is necessary to deliver a service and fulfill a contract. Let users read this policy and possibly contact you to make changes to their data.
Of course, this is not what happened here with Google and Amazon. In the meantime it is so unfortunate to see cookies becoming "illegal" taboo.
- nojito 6y agoThis isn't about the technology used. The issue is that the tracking is not disclosed to the end-user at all.
- skrebbel 6y agoThat's the point GP is making. I think they're responding to some other comments in this thread (and threads like it), not to the article.
- pestaa 6y agoYes it was a general observation. The issue should not be phrased as "breaching cookie rules", as murdering someone with an automatic weapon is also not discussed as a "violation of human tissue guidelines".
- swiley 6y agoSession cookies for handling a login make sense. Session cookies on static pages are a violation of people's privacy.
- LunaSea 6y agoWhat about a session cookie that is used for more than just authentication like for example tying browsing sessions on different devices by the same user together?
- Macha 6y agoIf it's only to provide the stated purpose of the site (think those "scan a QR code and approve this login on your other device" setups), it likely falls under the legitimate interest exception. If it's to provide cross device tracking for better advertising, then you need consent. Lawyers are unlikely to take kindly to arguments of the "Well technically the advertisments are an integral part of the site", that will surely be raised in response to this. This is why the law is not code and gets interpreted by judges.
- piva00 6y agoIs that information going to be shared with 3rd parties? Is this tracking solely for the use of the product or for profiling the user? Those are the concerns with GDPR, you can do whatever you want if you are explicit about it AND have consent of the user.
- dehrmann 6y agoWhat I find ironic is Google actually goes to extreme lengths to protect your data. Compare that to all the third-party trackers loaded by random-etailer.com.