30.07.2020 · 3 min read

Cookie banner: these mistakes can happen

The Magento API from solutioo offers a tailored connection of Magento online shops to Business Central, entirely in German.

The API lets you extend Business Central simply and without fuss with the elements and options a Magento shop needs. Simplify and speed up your workflow and your business processes with the powerful duo of Microsoft Business Central and Magento, which fit together smoothly thanks to our interface.

1. IGNORING

Not implementing a cookie notice is probably the most serious mistake a website operator can make. Or resting on an old cookie banner that only informs people that cookies are being set. They do not allow valid consent within the meaning of the GDPR. Wording under which people also agree to cookies simply by using the website is not sustainable under data protection law either.

COMPLIANT MEANS: A consent solution with which visitors can actively consent to data collection.

2. TOO MUCH INFORMATION

Using cookies does not, however, require consent in every case. You do not have to have the visitor approve the use of strictly necessary or technically necessary cookies. Among other things, these are cookies that are indispensable for the technical operation of the website. You do have to inform people in your privacy policy about the use and how technically necessary cookies work.

COMPLIANT MEANS: A website that only sets technically necessary cookies does not need a cookie banner.

3. TOO EARLY

What matters is that a cookie banner pauses data processing until the visitor has actively consented. All scripts on the site that collect personal data must therefore be blocked on the first visit to the website.

COMPLIANT MEANS: Cookies may only be set after the visitor has been informed and has consented voluntarily.

4. COVERING

The legal notice and the privacy policy are legally essential on websites. Under § 5 (1) TMG, website operators are obliged to keep a legal notice easy to recognise, directly reachable and permanently available. The privacy policy must be easy to access as well. The cookie banner must therefore NOT cover access to the legal notice or the privacy policy.

COMPLIANT MEANS: The cookie banner must be placed so that the links to the mandatory information are not covered.

5. NO WAY TO WITHDRAW

A visitor to a website must be able to withdraw consent to data processing at any time. And as simply as possible. It also matters that the rejected cookies stop collecting data from that moment on.

COMPLIANT MEANS: implement a corresponding way to withdraw consent in the cookie banner.

Takeaway

What now?

Get in touch with our team.