{"id":1376,"date":"2023-12-01T14:29:53","date_gmt":"2023-12-01T13:29:53","guid":{"rendered":"https:\/\/www.milkycode.com\/?p=1376"},"modified":"2023-12-01T14:30:59","modified_gmt":"2023-12-01T13:30:59","slug":"what-a-cookie-consent-banner-must-look-like","status":"publish","type":"post","link":"https:\/\/www.milkycode.com\/en\/what-a-cookie-consent-banner-must-look-like\/","title":{"rendered":"What should a cookie consent banner look like?"},"content":{"rendered":"<p>Christmas is coming soon and cookies are being baked everywhere again. But it's not just at Christmas that you should pay attention to cookies; your website and the services integrated into it also bake cookies every day, but not every visitor wants them. In this blog post, we explain what this means for you and what you need to do to avoid legal problems.<\/p>\n<h2>What are cookies anyway?<\/h2>\n<p>Cookies are small text files that are stored on the computer by the web browser. These files are used to store information about the user and their interactions with a website. Cookies enable the provider to recognize the user and provide personalized experiences.<\/p>\n<p>Cookies can serve a variety of purposes, from storing login information to tracking user behavior for analytics purposes. Although cookies help to improve the user experience, they can also raise privacy concerns. It is important to note that cookies should be stored on the basis of the user's consent, and there must be mechanisms in place to manage or reject cookies (<a href=\"https:\/\/www.verbraucherportal-bw.de\/,Lde\/Startseite\/Verbraucherschutz\/Cookies+_+hilfreich+oder+gefaehrlich_\" target=\"_blank\" rel=\"noopener nofollow\">Consumer portal BW<\/a>).<\/p>\n<h2>Legal background to cookies<\/h2>\n<p>Consent tools (cookie banners) are legally necessary when it comes to effective consent for user tracking or the setting of non-essential cookies. However, care should be taken to use a \"real\" consent tool where the user can actually consent or reject. Cookie banners are still frequently used that simply indicate that the website uses cookies. However, this is not legally permitted. A user must be able to specifically consent or reject.<\/p>\n<p>The topic of consent to the processing of personal data is a perennial issue on the internet, especially since the GDPR (General Data Protection Regulation). However, not only the use of a genuine consent tool, but also the design play an important role.<\/p>\n<h2>Necessary cookies<\/h2>\n<p>What does \"necessary cookies\" actually mean? Necessary cookies are required to use a website properly. These include \"session cookies\" in an online store, for example, which save the shopping cart or cookies that save a login. In general, all cookies that are necessary for the proper operation of the website are summarized here.<\/p>\n<h2>Non-essential cookies<\/h2>\n<p>Non-essential cookies, on the other hand, are all types of cookies that are not necessary for the operation of the website or its use. These include, for example, tracking cookies that record surfing behavior, cookies from third-party services that are integrated on the website (such as YouTube or Google Maps, etc.). Analysis cookies, such as those from Google Analytics, or cookies for advertising.<\/p>\n<h2>What should a cookie consent banner look like now?<\/h2>\n<ol>\n<li>It may <strong>not automatically consented<\/strong> become. Sentences such as: \"By visiting our website, you accept the use of cookies\" (or similar) are not permitted. The mere statement \"We use cookies\" with an \"OK\" button is also inadmissible.<\/li>\n<li class=\"translation-block\">As long as a user has not made a decision, <strong>no non-essential cookies may be set<\/strong> at any time.<\/li>\n<li class=\"translation-block\"><strong>Third-party services<\/strong> (Youtube, Google Maps, etc.) may <strong>not be loaded without consent<\/strong>, as personal data (IP address) is transferred to a foreign provider.<\/li>\n<li>It must <strong>both<\/strong> one \"<strong>Accept<\/strong>\" Button, <strong>as well as<\/strong> one \"<strong>Reject<\/strong>\" button. Both should be \"equivalent\". This means that the \"Reject\" button must not be hidden, on a different level or difficult to read (keyword nudging). It should also not be placed or designed in such a way that a user is tempted to click on the \"Accept\" button. Although there are now rulings that both buttons do not have to look the same, this can quickly become a problem. What is clear and what is not is not definitively defined. For example, if the \"Reject\" button is gray and the \"Accept\" button is green, it will definitely be inadmissible. We simply recommend always displaying both buttons in the same color. Some cookie plugins, such as Borlabs, even point out if you want to use different colors here.<\/li>\n<li>The buttons should <strong>Unique designations<\/strong> have:\n<ol>\n<li>\"Accept everything\" and \"Reject\"<\/li>\n<li>\"Agree\" and \"Only allow essential \/ (technically) necessary cookies\"<\/li>\n<li>\"Accept all\" and \"Only allow essential \/ (technically) necessary cookies\"<\/li>\n<\/ol>\n<\/li>\n<li class=\"translation-block\"><strong>Pre-selected checkboxes<\/strong> in selection options are <strong>not permitted<\/strong>. If you have the option to allow individual cookies or cookie groups in the banner, then these must not be <strong>preselected<\/strong>. Of course, this only applies to non-essential cookies.<\/li>\n<\/ol>\n<h2>Statement from the European Data Protection Board on the design of cookie banners<\/h2>\n<p>Because there is no uniform regulation on the subject of cookie banners across the EU, the European Data Protection Board (EDPB) has drawn up guidelines with its \"Cookie Banner Taskforce\". In its draft report, the EDPB confirms which cookie banner settings are misleading:<\/p>\n<ol>\n<li>Missing reject button on the first level of the cookie banner<\/li>\n<li>Pre-ticked boxes on the banner so that the user cannot actively consent<\/li>\n<li>\"Nudging\", where the text becomes practically illegible due to such a low contrast between the text and the background of the button<\/li>\n<li>Complicated links to reject cookies, instead of a \"Reject\" button<\/li>\n<li>Missing revocation button - No button available to revoke the cookie consent<\/li>\n<\/ol>\n<h2>Do you have any further questions about using a content tool?<\/h2>\n<p>If you have any further questions about content tools and cookie banners, or are unsure whether your website complies with the legal provisions, simply contact us without obligation. We will take a look at your website and discuss the next steps with you in a free consultation.<\/p>","protected":false},"excerpt":{"rendered":"<p>Bald ist Weihnachten und es werden wieder \u00fcberall Kekse (Cookies) gebacken. Aber nicht nur an Weihnachten solltest Du Cookies Beachtung schenken, auch Deine Website und dort eingebundene Dienste backen t\u00e4glich Cookies, die aber nicht jeder Besucher haben m\u00f6chte. Was das jetzt konkret f\u00fcr Dich bedeutet und was Du tun musst, um keine rechtlichen Probleme zu [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1377,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50],"tags":[],"class_list":["post-1376","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"featured_image_src":{"landsacpe":["https:\/\/www.milkycode.com\/wp-content\/uploads\/2023\/12\/Cookies-1140x445.jpg",1140,445,true],"list":["https:\/\/www.milkycode.com\/wp-content\/uploads\/2023\/12\/Cookies-463x348.jpg",463,348,true],"medium":["https:\/\/www.milkycode.com\/wp-content\/uploads\/2023\/12\/Cookies-300x171.jpg",300,171,true],"full":["https:\/\/www.milkycode.com\/wp-content\/uploads\/2023\/12\/Cookies.jpg",1280,729,false]},"_links":{"self":[{"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/posts\/1376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/comments?post=1376"}],"version-history":[{"count":2,"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/posts\/1376\/revisions"}],"predecessor-version":[{"id":1379,"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/posts\/1376\/revisions\/1379"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/media\/1377"}],"wp:attachment":[{"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/media?parent=1376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/categories?post=1376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.milkycode.com\/en\/wp-json\/wp\/v2\/tags?post=1376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}