A cookie policy protects your visitors' privacy while fulfilling a legal obligation: clearly defining your data collection practices, providing genuine control over preferences, and ensuring transparency regarding data usage.
This sample cookie policy helps you understand your obligations and provides a template you can customize for your website. It outlines the different categories of cookies, the required disclosures you must include, and the most common mistakes to avoid.
Contrary to popular belief, it is not the GDPR that directly regulates cookies, but ratherArticle 82 of the Data Protection Act, which transposes the ePrivacy Directive into French law.
This provision requires youto inform your visitors about all the cookies you use and to obtain their consent before setting any cookie that is not strictly necessary for the website to function.
The GDPR, on the other hand, comes into play as soon as these cookies are used to collect personal data (email, purchase history, etc.). In summary:Article 82 governs the placement of cookies, wh GDPR governs what you do with the data they collect.
In practice, your website must list all of its cookies in a dedicated policy (Purpose, duration Data retention, issuer), whether they are essential or not.
To find out exactly what your obligations are, consult the CNIL (National Commission for Information Technology and Civil Liberties) ’s fact sheet on cookies and trackers.
Once you've customized your sample cookie policy, the footer of your website is the ideal place to display it: a link to yourcookie policy must appear there on every page, permanently and in a clearly visible location.
The consent banner must also link directly to the full policy so that visitors can review the details before making their choice.
This sample cookie policy is a fully drafted Word document with clearly identified fields that need to be customized. All you have to do is fill in your information—you don't have to start from scratch.
PurposeData c Data retention periods, user rights, transfers outside the EU, and contact information for the DPO: our sample cookie policy already includes all the information required by regulations.
Our sample cookie policy follows a comprehensive template drafted by our legal experts specializing in GDPR. From the definition of a cookie to how users can control them, including details on each category of cookies: a comprehensive template designed to cover every possible scenario, with ready-to-use alternative paragraphs tailored to your specific situation.
Clear explanations, free of legal jargon, so that your visitors can easily understand their rights and exercise them with ease: this is as much a matter of building trust as it is a legal obligation.
Having a cookie policy is the first step: it explains to your visitors which cookies are used on your site, by whom, and for what purpose.
The second step is the cookie banner: it allows you to collect your visitors’ preferences. And its configuration is crucial! The “ CNIL (National Commission for Information Technology and Civil Liberties) ” can verify this remotely in just a few clicks, without even needing to conduct an in-depth audit of your site.
In particular, you must ensure that opting out is just as easy as opting in, that the “Accept” and “Reject” buttons are presented equally, that the user’s choice is re-confirmed after 6 months, and that cookies requiring consent are not set before consent is given.
Download our checklist and verify that your cookie banner is compliant in just 6 minutes. Or , let Dipeeo draft your cookie policy and set up your cookie banner: we’ll handle your compliance from start to finish.
Contact Dipeeo, an external DPO for more than 600 companies.
Failure to comply with the rules governing cookies may result in penalties from the French Data Protection Authority ( CNIL (National Commission for Information Technology and Civil Liberties)), which can amount to up to 2% of global revenue, and can damage your website’s reputation. The cookie banner is one of the most frequently penalized violations, as it can be controlled remotely with just a few clicks.
Yes, whenever you change your tracking tool (new ad pixel, new ad network, new analytics tool) and at least once a year.
A policy that no longer reflects the cookies actually placed on your site loses all legal validity, even if it was compliant at the time it was drafted.
The Privacy Policy covers all processing of personal data by your company (forms, clients, HR, etc.).
TheCookie Policy is a separate document dedicated solely to the trackers placed on your website and the consent rules that apply to them.
The two documents complement each other; neither replaces the other.
No. Cookies that are strictly necessary for the website to function (shopping cart, session, authentication) are exempt from the consent requirement, as are certain statistical cookies that meet the strict conditions set by the CNIL (National Commission for Information Technology and Civil Liberties) (anonymization, no cross-referencing of data).
Advertising, social sharing, or statistical cookies that are not exempt require prior consent.
Unique support from a dedicated GDPR expert combined with the power of a powerful, intuitive SaaS platform for simplified compliance.
At Dipeeo, our GDPR experts - specialized lawyers and former in-house counsel - take care of your compliance from A to Z.
A dedicated legal expert
An outsourced DPO registered with the CNIL (National Commission for Information Technology and Civil Liberties))
Unlimited, tailor-made advice
Cutting-edge expertise
No more stress, no more wasted time, we manage everything for you.
Access an innovative, intuitive tool that centralizes all essential information and facilitates the compliance process.
