4 ms·
That's absolutely not the spirit of the law. I suggest you read an intro to the GDPR, or GDPR itself, which is quite approachable. In short: you shouldn't trac
by MayeulC 5y ago
That's absolutely not the spirit of the law. I suggest you read an intro to the GDPR, or GDPR itself, which is quite approachable.
In short: you shouldn't track the user, unless the user opts into it. Cookies are one of the many ways that can be used for tracking.
There are other regulation pertaining to data retention, processing, etc. But since you focus on cookies, that's the gist of it.
You don't have to ask permission to deposit a login cookie, since that's functional and non-tracking. Using that cookie to track across websites requires consent. Depositing a Google Analytics cookie requires consent.
Any website that shows me a cookie popup screams "we want to track you! We collect data on your online behavior and sell it to third parties!"
- slowmotiony 5y agoHere is just a part of the legal text that I had to put in the webpage because I have a contact form. Honestly I don't even know if that's all I was supposed to include or if there were any updates to the articles, so at this point it might even be noncompliant and therefore illegal. Trust me I couldn't care less about your data, I just wanted a contact form without possibly getting sued. Contact form Type and purpose of the processing The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional. Legal basis The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR). By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions. If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR). Recipients Recipients of the data may be processors. Retention period The data will be deleted no later than 6 months after processing the inquiry. Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines. Mandatory or required provision The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.