This is an old revision of the document!
Privacy Setup
The scope of the European GDPR law, and of the other data protection laws for other countries, is wide and affects how the company processes all kinds of personal data.
Some of this processing happens on the website, which has to be compliant with the law. Three elements are needed:
- The design of the website must be compliant
- Privacy & Cookie policies have to be provided
- Cookie consent has to be obtained by the users before placing any cookie
There are also two further elements, that are less clear about the practical implementation and need:
Privacy and Cookie policies
These policies are meant to give transparency about the data treatments.
References:
Examples:
- single page Privacy and Cookie Apposta
- separated pages BH Privacy and BH Cookies
What to do: the company can provide their texts, or both policies can be automatically generated by Cone with Iubenda. In both cases, the responsibility of the legal compliance lies on the company, which must control and approve the policies and keep them updated (directly or through Cone).
Costs: if the company provides them they are just editorial content, and there is no cost. If Cone sets them up, for each language of the website there is an annual fee that adds to the maintenance annual fee, which includes Cone management and Iubenda's fees.
list typical services to be included in the policies
add the legal text for mentioning Cone as sub-processor
Cookie consent
- Cookie law
https://www.iubenda.com/en/help/5525-cookies-gdpr-requirements
https://www.iubenda.com/en/help/6469-consent-solution-getting-started
Cookie preference log
Registro Preferenze Cookie