They still have to inform you, right? Like with some banner at the edge of the page telling that they use cookies, just no need for a popup asking you to accept or decline.
The serious answer is to whatever your country’s internet regulation agency is (assuming your in the EU, else you’re out of luck). So for example, in France that would be the CNIL, in Germany it’s the BfDI, etc.
Just FYI Germany likes to make things more difficult, so with federation every sub-area is separated in many aspects and has own agencies for different things..
BfDI is only responsible for health and internet-provider institutions (and a few more).
Otherwise you can send it to the one where the company is located at, or always where you are located at. (they will forward it, but that can take a few months, so better to submit where it has to go).
If that’s so it’s incredibly poorly enforced to the point where complaining is unlikely to have any effect at all. Most Sites have a button that leads To a secondary menu where cookie preferences can be set. Perhaps this meets the mandate you speak of? It’s a much more common setup.
“well, we’re not selling it, we’re just using 247 advertising agencies to measure the general performance of our site. Nothing targeted, we’d never do that.” - totally legit companies that absolutely value user rights
by the way, I’ve always been subconsciously curious but never asked anybody, what happens when we click “ok yes I accept cookies?” And What happens if we click " not ok, I don’t accept cookies?"
Depends on the implementation. If you decline, it’s either 1) no cookies are written at all and you get promoted again the next time you visit that site or 2) a single cookie is written only remembering that you declined the prompt.
NEVER click decline all. There are loopholes built in that still grant access to “legitimate interest” cookies, which are recognized differently from “consent cookies.” If you click reject all, it still allows collection of certain personal info through cookies labeled legitimate interest. Which is entirely up to advertisers to categorize.
As annoying as it is, always open up options and manually uncheck cookies.
With TCF 2.2 “legitimate interest” is no longer allowed (but that’s probably only for IAB members). At our company we already had a rule where we disabled all “legitimate interests” from our vendors, so I assume there are other companies that do the same.
I’ve had that running for a while now, sadly some sites give you the option “accept all cookies” or “deny all by getting a monthly subscription” which if using this extension will automatically redirect you.
Aside from that little downside it has made browsing so much better.
EU Cookie Directive applies to all website owners within the EU aswell as Websites which target EU users.
It gives clear rules for different categories of cookies like how you need to display them and for which you actually need consent to be allowed to use them.
It also sets rules for how easy certain actions have to be and granularity.
(very simplified)
Some US news websites still geoblock European visitors rather than fix their site to not track the ever loving fuck out of visitors who say no. So imagine what they’re doing to their domestic visitors.
I liked it when some news sites did plain text only if you didn’t accept cookies. So no cookies, no ads and don’t have to deal with your crappy css? Why would I ever accept that? It was wonderful.
Man the worst I saw was a petrol station, when you walked in up to the tills there was this little sign on a floppy plastic thing that said they had face recognition running and a QR code to scan. The text of the sign mentioned “legitimate interests” but in no way directed users to scan the code and go to the website to object their consent.
It’s such bullshit. These companies collect up the data we produce and sell it for pure profit, without offering anything in return. The data brokerage industry is worth multiple trillions of $ per year, with only $8bn people in the world it stands to reason that the average user’s data is worth $1,000 per year, but they just pick that out of our pockets and use it against us.
Add comment