1

if a guest of my site click on "Not agree" on cookie banner, what must I do?

  1. Have I to disable all the cookies?
  2. Have I to disable all the cookies except technical cookies (eg. login session cookies)? (I hope the second one)

And if I use anonymous google analytics, have I to disable also it or not?

Another question: for registered users is it correct to not present the cookie banner?

Thanks, bye

Improve this question

2 Answers 2

Reset to default
1

Technical cookies are always fine at any time, the user does not have to agree for these cookies.

You cannot use any other cookie until the user agreed. So if the user clicks on "Not agree", nothing changes, as you still cannot set those cookies.

Also see Working Document 02/2013 providing guidance on obtaining consent for cookies for further guidance.

The same applies to google analytics, you cannot use it until the user agrees, but you can configure Google Analytics in a way you don't need consent.

You can use a cookie to store whether the user agreed or not to the cookie banner. That way you don't have to ask it again. And yes, you can store that cookie without consent. So it might happen if a registered user did not answer the cookie banner, so you still display it.

Improve this answer
3
  • So, recap: 1 - No. 2 - Yes. 3 - anonymous google analytics are allowed without consent. 4 - Don't understand...for a regitered user (that agreed the privacy policy and cookie policy before registration) is necessary present the banner?
    – Golber
    Commented Oct 2, 2018 at 12:26
  • You cannot force a user to agree with the cookie policy, so a registered user has possibly not agreed to the cookie policy.
    – wimh
    Commented Oct 2, 2018 at 12:39
  • See this answer that responds to your cited answer, and argues that any analytics cookie, no matter how configured, cannot be exempt from needing prior user consent because the Article 29 Data Protection Working Party has deemed such a cookie not strictly necessary in the appropriate sense.
    – Jim Ratliff
    Commented Aug 4, 2022 at 4:52
0

Supplementing the answer by wimh, the GDPR says that you cannot require consent to use of cookies (or to any other processing) as a condition of registration, or of use of the site, unless the cookies, or other processing, are essential for the functioning of the site (or for the features made available to registered users). In general you cannot require consent as a condition of use, unless the use is not possible without the processing for which consent is being asked.

Improve this answer
1
  • I believe that requiring consent can never be a condition of use. Withdrawing consent must be without detriment. If the use is not possible without the processing, the appropriate lawful basis is likely to be ‘performance of a contract’. If you have a different lawful basis, but still seeking consent from the individual, is misleading and inherently unfair.
    – wimh
    Commented Apr 30, 2019 at 14:00

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .