Skip to content
GDPR service

Website and cookie compliance

Most banners are decorative: they announce cookies that have already been set. We check what actually runs on your site and bring it into the form the law requires. You keep the documentation showing what you chose to use and on what basis.
The problem

The banner is not the compliance

A banner that appears after the tracking scripts have already loaded changes nothing. Neither does one where accepting takes one click and refusing takes three. Both are among the most frequently sanctioned patterns in Europe.

The rule in Romania sits in Article 4(5) of Law no. 506/2004, which transposes Article 5(3) of Directive 2002/58/EC. It makes storing information on, or gaining access to information already stored in, a user’s terminal equipment conditional on two cumulative requirements: the person’s agreement and prior, clear and complete information. The text does not speak of cookies, and it does not speak of personal data. It speaks of information and terminal equipment — which is why it also catches analytics identifiers, pixels and fingerprinting.

The practical consequence: on a site with no valid consent mechanism, two separate grounds apply at once — the national one for the access to the device, and the GDPR for the processing that follows.

Deliverables

What you get

  • An inventory of every script that actually runs on the site, including those nobody remembers adding
  • A consent banner where refusing is as easy as accepting
  • Blocking of non-essential scripts until a choice is made
  • A cookie policy that matches what the site really does
  • A record of consents: what was given, when, and under which version of the banner
  • A procedure for withdrawing consent that has real effect

The technical work of installing a consent tool stays with whoever maintains your site. What we do is establish what may be collected, on what basis, and what the documentation has to show.

Related

Where this fits

A complaint about a website is one of the most common ways an inspection starts. If you want the wider picture of the company’s obligations, see GDPR compliance. If you would rather know how an inspection unfolds before it arrives, see inspection readiness.

What is running on your site right now?

Send us the address and tell us whether you already use a consent tool.

Request a quote