Often, the cookie policy is integrated as part of the privacy statement of a website or application. This is the hardest part. The focus is on the type of cookies: another common place to see cookie approval notices can be found in the header of a website. This is immediately visible to all visitors to your website. In a mobile application, display the “Cookie-Policy” link in the menu where you specify other legal agreements, for example. B a “Info” or “Legal” menu. The EU GDPR requires you to get permission to use most cookies and a cookie notification is the perfect way to do this. The first thing to do is to know what cookies are used on your site. This is fundamental for the development of a specific and precise directive, depending on the needs, because each website is different. Overall, there are two different types of browser cookies, (i) session cookies that are stored in the computer`s memory during a user`s browser session and are automatically deleted from your computer when the browser is closed or if the session is considered terminated; and ii) permanent cookies that are stored on the user`s computer and are not deleted when the browser is closed. Permanent cookies can be used to maintain user preferences for a given website, so that these preferences can be used during future browsing sessions.

The ePrivacy Directive (EPD), adopted in 2002 and amended in 2009, became a “cookie law”, as its most notable effect was the dissemination of cookie consent pop-ups after its adoption. It complements (and, in some cases, suspends) the GDPR and addresses crucial aspects of the privacy of electronic communications and the prosecution of Internet users in the broad sense. Facebook`s mobile site takes a similar approach and provides its cookie consent notice at the top of the site: To comply with the rules applicable to cookies in accordance with the GDPR and the ePrivacy policy, you must: However, cookies can store a large amount of data sufficient to identify you without your consent. Cookies are the main tool that allows advertisers to track your online activities so that they can contact you with very specific ads. Given the amount of data that may contain cookies, they may, in certain circumstances, be considered personal data and are therefore subject to the GDPR. In this case, all information about cookies can also be placed in the privacy agreement, but then referenced in the separate Cookie Directive….