3 ms·
Does it? I would assume that means every single online interaction needs a consent banner, since sending a request over TCP includes, by it's nature, your IP a
by faeranne 5y ago
Does it? I would assume that means every single online interaction needs a consent banner, since sending a request over TCP includes, by it's nature, your IP address. I never dug too deep into GDPR or the like, since my own websites are all for personal use, and I'm not in charge of any of that stuff for work.
I kinda assumed that demanding consent before sending a user's IP would be technically impossible, given that you have to send it as part of the first request, before even being able to ask for permission? Ok, time to research this.
- faeranne 5y agoI keep forgetting that part of GDPR is the storage aspect. Unless it goes in a log (though it usually does,) it's not counted. A technical argument could be made that going into memory is storage, but at that point the above issue comes full force, so arguing it doesn't seem to make any sense.
- XCSme 5y agoI wrote a short blog post about this: https://www.uxwizz.com/blog/self-hosted-analytics-gdpr-friendly https://www.uxwizz.com/blog/self-hosted-analytics-gdpr-frien... This quote from the GDPR law is more relevant to your question: > If the controller has the legal option to oblige the provider to hand over additional information which enable him to identify the user behind the IP address, this is also personal data. In addition, one must note that personal data need not be objective.