GDPR Compliance: 4 Rules to Apply to Your Website

[taslimakhatun119]

It is now the first thing you see when browsing a website: the banner to accept or refuse cookies. This has been mandatory since the GDPR came into force in 2018.

But, its presence alone is not enough. For your website to comply with the regulations, the cookie consent banner must first present the “Accept” and “Reject” buttons at the same level and with the same visibility. This means that you must not encourage the user to choose one more than the other.

The user must also have access to the “Learn more” and “Customize” buttons. The first allows them to obtain more information about cookies, as well as your policy on the subject. The second is used to customize their japan telegram data consent preferences: the user can choose to accept certain settings, but refuse others.

These four buttons are essential to comply with the GDPR in France. Note, moreover, that this consent must be renewed every 13 months .

GDPR Compliant Cookie Popup
Example of a cookie consent banner on the showroomprive.com e-commerce site
Request consent for all information collected
Cookies are not the only way to collect information about your website visitors. You can also collect data through your contact form or by creating a customer area. Moreover, this also applies if you collect paper information (via an in-store questionnaire, for example).

Therefore, you must also obtain the consent of Internet users if you intend to use the data collected through these features. To do this, a checkbox with the words "I have read and accept the privacy policy" is sufficient.

Privacy policy is one of the key elements to add to your website to be GDPR compliant.

Add a Privacy Policy to Your Website
The privacy policy is an essential information page that must be added to your website to comply with the GDPR.

This presents your company's commitments regarding the collection and processing of personal data. It is therefore an essential legal document, which summarizes the rights of Internet users and which must, in fact, be easily accessible. We advise you to integrate it into the footer of your website.

The privacy policy details as follows:

The identity of the data controller;
The nature of the data collected;
The purpose of collecting personal data;
Where applicable, the transfer of personal data to another country outside the European Union (where the law on the processing of information is different);
The measures taken by the company to secure Internet users' data;
The possibility for the Internet user to make a complaint to the CNIL;
The possibility for the Internet user to modify or delete their data.
This key page of your website also mentions the cookie policy. It lists all the tracking tools used to collect data, and for what purposes. For example, if you use Google Analytics, you will need to stipulate this in the privacy policy.

Add legal notices to your website
Just like the privacy policy, the legal notices are a mandatory page on your website. The Internet user must find them easily: this is why they are generally placed in the footer menu.

Legal notices are all the information that allows the Internet user to identify you. They contain:

Your company’s contact details (company name, address, email, telephone number, etc.);
Your identification number (RCS number), if it is a commercial activity;