Do we need to sign a data processing agreement with Cookie Information?

Cookie Information has made extensive efforts not to process any Personal Data on behalf of our clients.

None of the "Service Data" is considered Personal Data as defined in the GDPR. Therefore, processing the Service Data does not fall under the GDPR or any other legislation relating to the processing of personal data. Consequently, Cookie Information does not act as a data processor when providing the Services.

Data flow

When a user submits their user preference, and the consent pop-up closes, a 1. party cookie with the name 'CookieInformationConsent' gets placed in the user's browser. The 'CookieInformationConsent' cookie contains all data collected by the system. The table at the end of this document shows the data stored in the 'CookieInformationConsent' cookie, which gets saved to Cookie Information's database.

The data is collected and used for two purposes:

1) Consent Documentation

2) Respecting User Consent

Consent Documentation

Website operators are obliged to prove and document compliance with GDPR. For this purpose, the system will allow the website operator to verify compliance by creating a technical audit trail of user consent.

In any situation where a website operator is required to provide documentation of the user's consent, the website operator should start by retrieving the Consent ID from the user. If a website visitor asks to see their consent, please ask them to have their user_uid handy. From this, we can then find their consent in our records.

Once you have the user's ID, then you will need to send it to our support. Reach out through the chat or at support@cookieinformation.com.

This is an example of a Consent ID: '99535183-294f-4305-919d-d16e13610b51'

With this Consent ID, the system can provide the website operator with the ability to fulfil the GDPR requirement of documenting consent.

Only when a user provides the website operator with the consent id, the website operator can match the user with a consent id in the system.

Respecting User Consent

Website operators are obliged to respect the users' consent preferences submitted via the consent pop-up provided by Cookie Information.

To provide website operators with this ability, Cookie Information allows the website operator to read and use the consent preferences from the 'CookieInformationConsent' cookie.

Cookie Information allows the website to read the accepted data processing purposes from the cookie and lets the website fire/load tracking on the user following the user preference.

The process of respecting user consent only needs the two data fields, 'Consents Denied' and 'Consent Approved,' to function correctly.

____________________

Data stored by Cookie Information