5 ms·
Actually it's a bit more complex (but not much) than what is described: 1st party may need user consent when they will use personal datas for something that is
by olivierduval 4y ago
Actually it's a bit more complex (but not much) than what is described: 1st party may need user consent when they will use personal datas for something that is not the intended service (legitimate use).
For example, for a shopping cart: cookies are necessary for the service, so no problem. For fraud detection : no problem because it's a legitimate use. But if you start tracking with a user cookie what pages your users are viewing (statistics collection), then... you need the user consent ! Because it's not necessary for the service... (even if it might be in your interest)
EDIT: if your statistics are not bound to personal informations (so you dont need statistics for INDIVIDUAL users but only the your users AS A WHOLE) then... no problem for RGPD and no need for consent. Actually, that's what a lot of RGPD-compatible statistics do (like Matomo and others...)
- oneeyedpigeon 4y agoI think the vast majority of sites that use cookie popups DO need to do so because they use targeted advertising. It's only a tiny number that have been 'too aggressive', although I'm personally aware of such an example.
- olivierduval 4y agoAs a side note: cookie management is just A PART of RGPD, that is based on personal information. So RGPD implies to inform the user about the ways their information is used, how it can be accessed, modified, deleted and so...
- Circuitstorm513 4y agoIt's GDPR as in General Data Protection Regulation.
- teekert 4y agoI guess OP is French, they use different word orders for almost anything, ie: DNA: AND.
- glandium 4y agoDNA is ADN, not AND.
- cyco130 4y agoOr RGPD as in "Règlement Général sur la Protection des Données" (French).
- Machado117 4y agoOr RGPD as in Règlement général sur la protection des données
- pdpi 4y agoGiven that OP's username starts with Olivier, I assume they're French. The French name is Règlement Général sur la Protection des Données. You just get used to your native language's abbreviations.
- nkrisc 4y agoMy guess is they are a native speaker of some Romance language, and that is the acronym in their native language, perhaps French based on username and what little I know of French.
- WeylandYutani 4y agoAh the French. In the great words of Samuel L Jackson "English motherfucker do you speak it".
- regularjack 4y agoIt's not only the French, would be the same for the Portuguese, for example. English is an official language of only two EU countries, if I'm not mistaken.
- iso1631 4y agoCyprus and Ireland French is official language of France, Belgium, Luxembourg and parts of Italy. Reality of course is that English is (ironically) the Lingua Franca of the world. (I was watching Iron Man 2 the other day, Tony Stark had a fairly lengthy scene of him speaking French which was quite nice)
- olivierduval 4y agoYou're right... I'm french ;-) Sorry about the wrong acronym (RGPD = GDPR)
- OJFord 4y agoIsn't it inconvenient and search result partitioning to use this? I haven't come across/noticed it before. In English for example we use the French order acronym UTC, not UCT or CUT. (Though to be fair in the UK outside of a computing context we mostly use GMT.)
- d1sxeyes 4y agoUTC is a hilarious acronym precisely because it is not correct in either French or English. In French it would be TUC, in English CUT. Both parties agreed on UTC because it doesn’t give either language primacy. https://en.m.wikipedia.org/wiki/Coordinated_Universal_Time https://en.m.wikipedia.org/wiki/Coordinated_Universal_Time
- walthamstow 4y agoI generally prefer when we agree on a spelling, even if it isn't in English. CERN is a good example of this, no English speaker in their right mind would call it ECNR.
- OJFord 4y agoYes, that's what I meant. (Though I stand corrected, UTC is not French either, but the effect is the same - we both use one.)
- soneil 4y agoIt's my understanding that we use UTC because it favours neither the english nor the french. English wanted CUT, french wanted TUC, so UTC was chosen to favour neither.
- oneeyedpigeon 4y ago> if you start tracking with a user cookie what pages your users are viewing (statistics collection), then... you need the user consent What about if you're Amazon and you want to show 'people who bought this also bought this' content? Then the tracking is necessary.
- thiht 4y agoThen you ask for consent.
- germanier 4y agoIt's not enough that you "want to". You have to weigh your interest and that of the users against each other and would probably come to the conclusion that you can process that data for that purpose without consent if you aggregate it.
- pelorat 4y agoWhy? Just store lists of bought product ids in its own database, then compute some statistics on it. Zero customer or user involvement is needed in that process.
- oneeyedpigeon 4y agoSo is that tracking or not? It's definitely storing personal information, so it feels like it counts, but surely the intent is for a self-contained order database to get a pass on this? Maybe not.
- olivierduval 4y agoI think that it's a matter of implementation, because all you need really is the order correlation, not the user that passed the order. So - if you keep a reference to specific user (like "your friend toto bought this") then you need consent - if you keep a reference to "user category/generic profile" then it's anonymized so no need for consent - if your profile is build on all the orders of your different users but without user informations, then it seem fine to me... because of anonymity
- groffee 4y ago[dead]
- jwildeboer 4y agoToot/thread author here. You are of course right. I couldn't pack all details in those toots. I had to break it down to the absolute basics that are often misunderstood: Not every cookie needs consent. The way this is presented nowadays in these popups is deliberately misleading and trying to move the blame to some anonymous political entity when in reality it simply isn't that way.
- nonethewiser 4y agoAre mastadon posts really called toots or is this a joke?
- Sohcahtoa82 4y agoThey are. It's not a joke.
- berkes 4y agoThey were and it was a joke. Now it sticks, and'll probably be used forever. But mastodon, the project, has long stopped calling it a toot, removed it from all UI and docs and explained why it changed.
- Myrmornis 4y agoAren't you failing to account for the following? In theory, website owners could do as GitHub did and remove inessential cookies and get rid of annoying banners: https://github.blog/2020-12-17-no-cookie-for-you/ https://github.blog/2020-12-17-no-cookie-for-you/ But in practice, website owners are worried about breaking laws and aren't experts and just follow what they see everyone else doing, and so put up banners. So in practice, the regulations are indeed the ultimate cause of annoying banners, even if in theory those are avoidable in some cases. The people who introduced the regulations were able to look at the ecosystem of website owners and predict that the consequences of the regulations would be the vandalism of the internet by banners that we've seen over the last few years.
- 4y ago
- friendzis 4y agoWhile legitimate interest is one of possible exemptions to GDPR blanket ban, legitimate interest justification must be accompanied by a rights and freedom test.