Implement cookie on the website through cookie yes
Implement a cookie file management system on the website that fully complies with the requirements of European Union legislation, including GDPR (Regulation EU 2016/679) and ePrivacy Directive (2002/58/EC). The system must ensure transparency in data processing, obtain the user's lawful consent, and allow for its withdrawal.
General requirements
The website must not set analytical, marketing, or other non-essential cookies before obtaining the user's explicit consent.
Consent must be voluntary, specific, informed, and expressed through an active action (clicking a button).
Pre-checked boxes and hidden consent mechanisms are prohibited.
The user must be able to refuse all non-essential cookies as easily as accepting them.
Cookie banner structure
Upon the first visit to the website, the user must see a banner with brief information about the use of cookies.
The banner must contain:
– a brief explanation of the purposes of using cookies
– a "Accept all" button
– a "Reject all" button
– a "Customize" button
The reject button must be visually equivalent to the consent button (same size, contrast, and accessibility).
The banner must not disappear automatically and must not hide the option to refuse.
Cookie settings (second level)
When selecting "Customize," the user must see a control panel for cookie categories.
Categories:
– Necessary (mandatory, cannot be disabled)
– Analytical
– Marketing
– Functional (if applicable)
For each category, the following must be specified:
– description of the purpose of use
– list of cookies
– provider
– retention period
– type (first-party or third-party)
Loading scripts
Analytical and marketing scripts (e.g., Google Analytics, Meta Pixel, and others) must not be loaded before obtaining consent.
Implementation is allowed through:
– Google Tag Manager
The system must retain:
– a unique anonymous user identifier
– the date and time of consent
– selected categories
– version of the cookie policy
There must be a technical possibility to confirm the fact of user consent (audit trail).
The retention period for logs must comply with the company's internal policy, but not less than a period sufficient to confirm the legality of data processing.
Result of work
After implementation:
– the website fully complies with GDPR and ePrivacy requirements
– there is no installation of non-essential cookies without consent
– the ability to prove consent has been implemented
– the user can easily manage their settings
