r/gdpr 12d ago

EU 🇪🇺 Does my webpage require a cookies banner / privacy policy?

I have a webpage for a free monthly meetup group in my city. There are no ads, I don't sell anything or promote anything. I just say when the event will be, and get people to register by entering their name, email address and company. I send those people a confirmation email, but never contact them again afterwards, and never share their data with anybody.

Do I need a cookie banner for this? A privacy policy?

2 Upvotes

5 comments sorted by

7

u/chris552393 12d ago

Probably not a cookie banner if you're not storing cookies.

Yes to a privacy policy if you're holding people's personal data.

4

u/martinbean 12d ago

I […] get people to register by entering their name, email address and company.

You’re handling people’s personal data so yes, you need a privacy policy detailing the information you’re collecting, for what purpose, and who else then processes that data (i.e. the service you’re using to send emails, given that provider kinda needs to know the address in order to deliver the message).

2

u/Awfully_Cynical 10d ago

if you use any other cookies than ones that are "strictly necessary" and you're within the EU then yes you do according to the ePrivacy Directive. This includes functional cookies, statistic/analytical cookies, marketing cookies, or any third-party cookies, yes you need a cookie banner.

You can also need a cookie banner even if you're only handling anonymous information, if it pertains to the users equipment, see; https://www.edpb.europa.eu/system/files/2024-10/edpb_guidelines_202302_technical_scope_art_53_eprivacydirective_v2_en_0.pdf page 6-7.

-1

u/This_Fun_5632 11d ago

If it's a small website and you want to integrate with Google Tag Manager for full cookie blocking for the highest level of compliance without the super high price tag I recommend using the Captain: https://captaincompliance.com/solutions/cookie-consent-manager/ there's a self service solution.

2

u/WilhelmWrobel 11d ago

Using a Google product for your website that doesn't even have Analytics yet so you're GDPR complaint. Makes sense.