81–90 of 272 posts
Actually it's a bit more complex (but not much) than what is described: 1st party may need user consent when they will use personal datas for something that is not the intended service (legitimate use). For example, for a shopping cart: cookies are necessary for the service, so no problem. For fraud detection : no problem because it's a legitimate use. But if you start tracking with a user cookie what pages your user…
Earlier quoted context omitted.
As a side note: cookie management is just A PART of RGPD, that is based on personal information. So RGPD implies to inform the user about the ways their information is used, how it can be accessed, modified, deleted and so...
It's GDPR as in General Data Protection Regulation.
The vast majority of people DO NOT care about cookies nor do they care about trackers. However, there is a very real productivity loss with all the cookie prompts - both trying to implement them, getting around them, and the billions of people who have to click on them every single day. We've got to come up with a better solution.
Most don't even know what the hell a cookie is or any of the shit in those prompts.
>Tech bros love to whine about "The EU cookie policy" that simply doesn't exist the way they imagine it. All these popups are the most radical way to interpret the explicit consent demanded by regulations when sending data to a 3rd party. An ongoing provocation by the ad/tracker industry to blame their ruthless data hoarding on the EU. The official EU website has one of these annoying pop-ups. Are they part of the pr…
That one's the pretty much the optimal implementation though. * it's a small bar on the bottom * the site works without clicking on the consent buttons * it has clear "opt-in" or "opt-out" options * no annoying "customize my permissions" sub-menu with tons of enabled switches and dark patterns
>So stop blaming "the EU" and ask yourself if this is the internet we want. ...Yes, thats exactly the internet "we" want. I don't get why it so hard to accept that people simply dgaf about privacy, and much prefer free products online paid for by ads. And there is nothing wrong with that, because for those that actually care about privacy, there are plenty of tools.
I'm part of the EU electorate. Are you?
Earlier quoted context omitted.
> if you start tracking with a user cookie what pages your users are viewing (statistics collection), then... you need the user consent What about if you're Amazon and you want to show 'people who bought this also bought this' content? Then the tracking is necessary.
Why? Just store lists of bought product ids in its own database, then compute some statistics on it. Zero customer or user involvement is needed in that process.
>So stop blaming "the EU" and ask yourself if this is the internet we want. ...Yes, thats exactly the internet "we" want. I don't get why it so hard to accept that people simply dgaf about privacy, and much prefer free products online paid for by ads. And there is nothing wrong with that, because for those that actually care about privacy, there are plenty of tools.
You get a banner on your first visit, with a list "here are all the cookies and ways how we use your data, if you are not fine with it, please leave this website"
This should be an option for small private websites (different rules for FB, Google and alike), because no one forces you to use a site, same as "my house, my rules"
I think this statement is categorically false. Art. 6 GDPR (https://gdpr-info.eu/art-6-gdpr/) lists exhausively the reasons for lawful processing of personal data which applies not only to cookies, but also IP addresses etc. The "cookie consent" addresses Art. 6 Point 1(a). Whether third-parties (data processors) are involved is irrelevant, e.g. if I need to transfer personal data to my accountant, it falls under b, c (or d).
GitHub got rid of their banners in 2020: https://github.blog/2020-12-17-no-cookie-for-you/ I believe there is also a lot of "cargo culting" where site admins copy what everyone else is doing without understanding the legal background.
And an entire industry with companies like TrustArc built on pitching and selling this crap even if not required and/or if their solution wouldn't achieve compliance anyway.