What’s up with the IAB Europe Standard (TCF)?

The Cookie Consent module of the IAB Europe Standard (TCF) does not comply with the GDPR privacy guidelines. Publishers will have to adjust their Cookie Consent module, otherwise they risk a fine. The Belgian Data Protection Authority (DPA) has imposed a fine of 250,000 euros on the IAB Europe Industry Association.

What does the IAB Europe Standard mean?

80% of websites in Europe ask for user consent to collect data through cookies and then share it with advertisers. The TCF is designed for real-time bidding on online advertisements, to do this in a GDPR-proof manner. This mainly concerns space that is purchased via Display. The problem arises that users cannot oversee what they are giving permission for. In addition, the IAB cannot check whether the information is being used correctly. This is against EU privacy rules. This ruling applies to the entire EU, including the Netherlands.

What does this mean for your CookieConsent?

If you use the CookieConsent module of the IAB Europe standard (TCF), it does not comply with the GDRP privacy guidelines. You will have to stop with this module or look for an alternative. An alternative that does comply with these rules is Cookieconsent.io. This module is not built into our cookie consent, so Cookieconsent.io complies with European legislation. This gives you a lot of security with the cookie consent!

If you are not sure whether your CookieConsent is sufficient or if you want more information about CookieConsent.io, please contact info@cookieconsent.io.

What does this mean for my Facebook campaigns without Facebook S2S

The new regulations are an improvement for the user. Called by the ITP (Intelligent Tracking Prevention) of Apple, you as a user can choose not to be tracked anymore by means of “third party cookies”. An example of this is that when you visit a website you also receive a cookie from Google and Facebook. Facebook can then later identify you as visitors to the website. A user can now decide to not accept the third party cookies. You can’t track that user anymore. This is at the expense of the measured data, which also has an effect on the optimization of the campaigns. As a result, providing insight into the contribution of online campaigns via Facebook is becoming increasingly limited.

How can you solve this with the Facebook S2S

This problem arises with every advertiser on Facebook from a budget of €100 per month to more than €100,000 per month. The more budget you use, the more bothered you will be from the limitation of available data. The solution to this problem is a server-to-server solution that closes the gap. As a result, sufficient data will be available in Facebook to optimize the data and to properly attribute the campaign results to the campaign.

With our solution there is AVG trial access to the data within the Facebook platform. The Facebook S2S is designed to make data available to Facebook in real time. No scripts or cookies from Facebook itself are needed for this. The data is collected on your website and made suitable for processing by Facebook. The moment you have a data layer, this data is enriched. When it comes to privacy-sensitive information, this data is automatically encrypted. This way you always comply with the AVG law. These are then offered to Facebook in real-time, so that sufficient data is available to attribute to the campaign and then optimize it.

Advantages Facebook S2S Solutions

1. Available data
The Facebook S2S ensures more available data than your current situation. This ensures that you can optimize your campaigns with more reliable data to make better decisions.

2. Better performance
The server-to-server solution doesn’t affect your website speed.

3. Reliable data
With the sever side forwarding you don’t need the permission from third parties. It’s a lot more reliable than third-party code. Cookies and ad blockers don’t affect the server-to-server solution, because it’s a first party cookie.

More information and the costs for the Facebook server-to-server solution can be found here. Do you have questions about the Facebook Server-to-Server Integration? Then you can always contact us by email.

What does the GDPR legislation mean.
The General Data Protection Regulation (AVG) has been applicable since 25 May 2018. This means that the same privacy legislation applies throughout the European Union (EU). The Personal Data Protection Act (WBP) no longer applies.

The AVG is also known under the English name: General Data Protection Regulation (GDPR).

What has changed since May 25, 2018.
Among other things, the AVG has ensured that:

• Strengthening and extending privacy rights
  People have the opportunity to stand up for themselves when processing their data. Organizations must get valid permission from people to process their personal data. Organizations must be able to prove that they have received valid permission. People must be able to withdraw their consent as easily as they can give it.
• More responsibilities for organization
  Organizations have more obligations when processing personal data. The GDPR places more emphasis on the responsibility for your organization to demonstrate compliance with the law.

Why do I need a Cookie Consent.
By law, every website that uses cookies requires a cookie Consent on the website. You must describe exactly which cookies are placed by the website and what these cookies are.

What kind of cookies are there.
It is often stated that there are four types of cookies: essential cookies, preferred cookies, analytical cookies and advertising cookies. This makes it more difficult than necessary. In fact it is very simple. There are two types of cookies. These two types of cookies are:

1. Permission-free cookies
2. Permission cookies

Simple anyway. The name ultimately says what needs to be done. What is covered by these two types of cookies?

Permission-free cookies
As the name suggests, these are cookies that do not require the permission of the visitor to your website. These are cookies that do not infringe on the visitor’s privacy. Examples of consent-free cookies are:

• Analytical cookies
• Functional cookies
• Preferred cookies

Analytical cookies
Analytical cookies are cookies that are used by tools such as Google Analytics or Adobe Analytics to gain insight into visitor statistics. Based on this data you can see how your website is performing and where there are areas for improvement.

Functional cookies
Just like analytical cookies, functional cookies are not covered by the cookie law. These are cookies that are required for your website to function properly. If you do not use these cookies, your website will not function properly. An example of this is adding an item to a shopping cart if you are an e-commerce shop. Another example is access to a secure environment on your website.

Preferred cookies
Preferred cookies are cookies that ensure that a website can remember important information. This may be the preference of a language institution.

Permission cookies
You need permission to place these cookies. These cookies therefore infringe on a visitor’s privacy, so that the visitor can decide for himself whether or not to agree to this. Examples of permission cookies are:

• Marketing cookies
• Third party cookies

Marketing cookies
Marketing cookies collect information about the use of websites, used keywords and how visitors came to a website. This data is used for reporting with the goal to make websites better. This allows a better and more relevant offer to be made on the own website or website of partners. These cookies can be placed by both the websites visited and third-party domains.

Third party cookies
Third-party cookies are placed by third-party websites. An example is that with a marketing campaign the website gives advertiser permission to place a cookie to retarget the visitors. This requires prior permission in advance. Social cookies are an example of this. These are used to integrate certain functionalities of social media platforms into the website. Think of YouTube videos and social sharing options.

If you have the Google Analytics code on your website and you do not use Google Analytics, you don’t need a cookie consent if you set it up your Google Analytics account properly. You have to make a number of adjustments including:

1. Anonymizing the visitors IP address
2. Turn off data sharing
3. Accept the Data Processing Amendment
4. Create a clear privacy page about the use of Google Analytics
5. Deactivate the Features for advertiser
6. Deactivate Remarketing and Reporting functions for advertisements

Do you collect target groups and are you using remarketing for your online campaigns? Then you definitely need a cookie notification.

Cookie notification GDPR proof
You have read everything and consider whether your cookie consent complies with the GDPR legislation. Are you still in doubt whether your cookie consent complies or doesn’t meet the GDPR legislation? Let us know (or do a free web scan) and we can take this off your hands so that you comply with the GDPR legislation.