2 ms·

> if you start tracking with a user cookie what pages your users are viewing (statistics collection), then... you need the user consent What about if you're Am

> if you start tracking with a user cookie what pages your users are viewing (statistics collection), then... you need the user consent What about if you're Amazon and you want to show 'people who bought this also bought this' content? Then the tracking is necessary.

thiht 4y ago
Then you ask for consent.
germanier 4y ago
It's not enough that you "want to". You have to weigh your interest and that of the users against each other and would probably come to the conclusion that you can process that data for that purpose without consent if you aggregate it.
pelorat 4y ago
Why? Just store lists of bought product ids in its own database, then compute some statistics on it. Zero customer or user involvement is needed in that process.
- oneeyedpigeon 4y ago
  So is that tracking or not? It's definitely storing personal information, so it feels like it counts, but surely the intent is for a self-contained order database to get a pass on this? Maybe not.
  - olivierduval 4y ago
    I think that it's a matter of implementation, because all you need really is the order correlation, not the user that passed the order. So - if you keep a reference to specific user (like "your friend toto bought this") then you need consent - if you keep a reference to "user category/generic profile" then it's anonymized so no need for consent - if your profile is build on all the orders of your different users but without user informations, then it seem fine to me... because of anonymity
  - friendzis 4y ago
    You don't need cookies for that
    - germanier 4y ago
      Although these things are called "cookie banner", it doesn't matter whether you need/use cookies or do it server-side. It's about the data that is being processed and the intent, not the technical implementation.
      - friendzis 4y ago
        And duration. E.g. session cookie holding serialized shopping cart data is ok, but longer term storage is not ok.
harha 4y ago
What if you could only buy bundles of goods which are dynamically generated (and look like a basket to the user) and the seller just shows frequently purchased bundles or combines subsets of these? Curious where to draw the line.
goodpoint 4y ago
Not at all. You don't need cookies and consent for anonymized statistics.

thiht 4y ago

Then you ask for consent.

germanier 4y ago

It's not enough that you "want to". You have to weigh your interest and that of the users against each other and would probably come to the conclusion that you can process that data for that purpose without consent if you aggregate it.

pelorat 4y ago

Why? Just store lists of bought product ids in its own database, then compute some statistics on it. Zero customer or user involvement is needed in that process.

oneeyedpigeon 4y ago
So is that tracking or not? It's definitely storing personal information, so it feels like it counts, but surely the intent is for a self-contained order database to get a pass on this? Maybe not.
- olivierduval 4y ago
  I think that it's a matter of implementation, because all you need really is the order correlation, not the user that passed the order. So - if you keep a reference to specific user (like "your friend toto bought this") then you need consent - if you keep a reference to "user category/generic profile" then it's anonymized so no need for consent - if your profile is build on all the orders of your different users but without user informations, then it seem fine to me... because of anonymity
- friendzis 4y ago
  You don't need cookies for that
  - germanier 4y ago
    Although these things are called "cookie banner", it doesn't matter whether you need/use cookies or do it server-side. It's about the data that is being processed and the intent, not the technical implementation.
    - friendzis 4y ago
      And duration. E.g. session cookie holding serialized shopping cart data is ok, but longer term storage is not ok.

harha 4y ago

What if you could only buy bundles of goods which are dynamically generated (and look like a basket to the user) and the seller just shows frequently purchased bundles or combines subsets of these? Curious where to draw the line.

goodpoint 4y ago

Not at all. You don't need cookies and consent for anonymized statistics.