3 ms·
You usually make sensible comments, so that even you are not understanding that the law says nothing about cookies and is needed only in specific circumstances
by Aachen 5y ago
You usually make sensible comments, so that even you are not understanding that the law says nothing about cookies and is needed only in specific circumstances when the data processor wants to do something that cannot be reasonably expected and violates "the interests or the fundamental rights and freedoms of the [user]" means we need to better communicate what this law actually requires and when.
> The experience of browsing the web in Europe is shit due to all the popups asking you about [some technical thing that you can, indeed, control in your browser].
I just made this overview of when a cookie wall is required, hoping that it might help clear this up.
(Edit: for mobile https://pastebin.com/raw/gDn5AwuV https://pastebin.com/raw/gDn5AwuV )
+-------------------------------------+
| Do you store data about users which |
| are merely viewing pages? |
+-------------------------------------+
| \ ________________________
yes `-no->|No cookie wall needed.|
| ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
+---------------------------+
| Can this data be traced |
| to an individual person? |
+---------------------------+
| \ ________________________
yes `-no->|No cookie wall needed.|
| ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
+------------------------------------+
| Are you legally required to do so? |
+------------------------------------+
| \ ________________________
no `-yes->|No cookie wall needed.|
| ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
+--------------------------------------+
| Is it necessary, e.g. to make site |
| features work that the user enabled? |
+--------------------------------------+
| \ ________________________
no `-yes->|No cookie wall needed.|
| ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
+---------------------------------------+
| Is it to protect the user's vital |
| interest, or are you a government and |
| the processing is necessary? |
+---------------------------------------+
| \ ________________________
no `-yes->|No cookie wall needed.|
| ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
+---------------------------------+
| Considering recital 47, do you |
| have a legitimate interest? |
+---------------------------------+
| \ ________________________
no `-yes->|No cookie wall needed.|
| ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
+----------------------------------------+
| Then processing their personal data is |
| none of your business but you can ask |
| for their permission ("consent"). |
+----------------------------------------+
\ _________________________
`----->|You need a cookie wall.|
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
What most people think when they see a GDPR banner: stupid law, politicians are stupid, "it's such a misunderstanding of regulators type of situation."
Reality: website wants to do something that you don't want them to do, and now the websites are required to let you make an informed decision.