Law Stack Exchange
Law Stack Exchange

Questions tagged [cookies]

33 questions
13
votes
6 answers

What should a website do if the end user refuses to accept the necessary cookies?

Suppose that a data controller chooses the consent legal basis for GDPR article 6 purposes. Then, the data controller says something along these lines in a cookie consent banner on their website: We need to use cookies to provide you with our…
Paul Razvan Berg
  • 381
  • 2
  • 8
7
votes
1 answer

Can a website Demand acceptance of non-essential cookies to allow free access?

I have experienced several times now that sites require payment if you do not accept non-essential cookies. My reading of the relevant legislation (from the EU - I have not browsed the Californian legilation) indicates that I, as a consumer, should…
JoSSte
  • 291
  • 1
  • 8
5
votes
1 answer

Cookie Law: do anonymized analytics require cookie consent?

In recent years a lot of privacy-aware analytics solutions have started popping up. These generally work using a very similar principle (see e.g. Fathom's algorithm): Create a fingerprint of the user using a hash of some combination of their IP,…
Birjolaxew
  • 153
  • 5
5
votes
1 answer

Do sites need to explicitly ask for cookie consent as of 2022?

I'm trying to build a web app based in the UK that will serve (primarily though not exclusively) British and European customers, and am trying my best to make sure that I comply primarily with the GDPR but also other relevant data protection laws.…
Hashim Aziz
  • 315
  • 1
  • 7
4
votes
0 answers

Does consenting the usage of tracking Cookies also cover tracking Pixels under GDPR?

Last December Stack Overflow announced a change to the network advertisement policies. “Retargeting pixels are not allowed on any campaign. allowed for a limited number of vetted and pre-approved Programmatic partners.” The change introduced the…
SPArcheon - on strike
  • 351
  • 1
  • 9
4
votes
1 answer

If website uses cookies only after users login, can I ask for cookie consent during account creation instead of website launch?

I have a website that uses cookies only if the user logs in. Is it necessary to show a cookie popup banner at website launch or can I ask for consent when user is creating an account (the standard I agree to the website conditions checkbox)?
Kamil
  • 173
  • 1
  • 4
4
votes
1 answer

Should registered users accept cookie consent in GDPR?

I want to use cookie consent for saving user language, currency and affiliate marketing purpose. Can I store data without consent of the registered users? They are registered so do I need to take consent from them.
Cyber
  • 43
  • 3
4
votes
2 answers

Repercussions of defying the Cookie Law

I was wondering what case law is out there on the subject, or, if there is not much, what real repercussions can website owners who defy the Cookie Law expect? Say Bob is not only pissed off by the ostensible (as he thinks) necessity to implement…
Greendrake
  • 28,487
  • 5
  • 71
  • 135
4
votes
1 answer

Do lax and lazy cookie messages comply with cookie laws?

On a web page, I received a cookie pop-up that looked like this: Which reads as: We use cookies. You probably don't care. Click the button to get rid of this pointless message. Whatever (the button) This seems pretty lax and lazy. Does it comply…
user11111111111
  • 143
  • 7
3
votes
0 answers

Is the BBC website out of compliance with the UK cookie regulations regarding consent and nudging techniques?

The United Kingdom's Information Commissioner's Office (ICO) requires websites to make it as easy to reject non-essential cookies as to accept them and also outlaws "nudging techniques", which the BBC itself has reported on, yet the BBC.co.uk…
rfii
  • 89
  • 2
2
votes
1 answer

Is consent required for paying, corporate subscribers of a B2B website?

I was intrigued by this question: Why is the Google Analytics cookie defined as "strictly necessary" and saved without consent?, and how GDPR/E-Privacy applies to paying, corporate subscribers of a B2B website or platform, when: X licences are…
Xinnabar
  • 21
  • 2
2
votes
1 answer

GDPR - asking for consent indefinitely if respondent says no, until respondent say yes by exhaustion. Confirming choices allegedly forcing behaviour?

Under EU regulation, GDPR concerns dealing of personal data and describes the different parties that are responsible for handling those data. While navigating on the internet, a pop-up is prompted asking for consensus to the user to chose if or not…
user305883
  • 121
  • 1
2
votes
1 answer

Essential cookies - legal responsibilities

I'm using Stripe to process payments on my site The only cookies the site uses are set and processed entirely by Stripe The cookies would only apply to users who have 1) created an account, and 2) signed up for a paid subscription When signing up…
pez
  • 121
  • 2
2
votes
1 answer

Count visitor per day with GDPR & Cookies in EU

My question is: how is it possible calculate visitors per day without gathering some information about the users in order to be able to identify them as revisits? We have a cookie consent banner in our site, if a user clicks to choose to accept…
E P
  • 141
  • 3
2
votes
1 answer

Can you preemptively check local storage before user agrees under Cookie Law?

I am pretty new to the idea of asking for consent for storage for a website because I'm American. I understand that if I want to store anything, I need to ask users for consent. However, I'm confused by exactly how to abide by the Cookie Law. How do…
shanshine
  • 23
  • 4
1
2 3