What is GDPR and how does it affect e-commerce?
The GDPR or General Data Protection Regulation is the set of European rules that refer to the protection of personal data of individuals. It came into force on May 25, 2016, but was not applied until 2018, two years in which companies, organizations and institutions had to adapt to the new regulations for their subsequent compliance. The rules cover the entire European Union, so any company that belongs to the union is obliged to follow the rules imposed in the new data protection regulation. The sanctions imposed for non-compliance with the GDPR can amount to a high amount of money for those who do not comply. Subsequently, in 2020, the Spanish Data Protection Agency (AEPD) has carried out new updates in relation to the use and application of cookies on websites. But... How does the GDPR affect e-commerce? The introduction of the new data protection regulation (RGPD) in e-commerce implies a broader barrier to the use of more personal data for commercial purposes. This regulation has as its main objective to look more for the rights of citizens. Therefore, e-commerce must preserve the rights that consumers have in reference to data security, and therefore ensure the legal security of the company.Cookie Law Update 2020
The update of the GDPR Cookie Law requires those who own websites to be transparent with the use of Cookies, always having to obtain the consent of the users who visit their pages. In this way, it is no longer just necessary to inform that the website uses cookies, but whoever browses the web must expressly accept the use of cookies, also having the opportunity to choose what type of cookies can be stored in their browser. The new law thus focuses primarily on the use of cookies, which must be based on the principle of transparency and mandatory consent . Thus, as we have already mentioned, users must be informed in advance about the types of cookies used by the website they are visiting and for what purpose the data obtained from them will be used. Of course, those who visit the website must give their consent explicitly, for example, through an acceptance button or by checking a check box . It is also prohibited to include on the page the option to "continue browsing" to validate consent to the use of cookies; and so-called "cookie walls" cannot be added, a term that refers to when browsing through a website is linked to the acceptance of its cookies.How to comply with the new GDPR Cookie Law?
Team formation
The team must be trained to have a thorough understanding of and a strong commitment to data protection . This way, they can best help to comply with data protection and preserve the rights of customers.
Incorporating data protection from the design
Data protection must be integrated from the earliest stages of the product or service, both on websites and mobile apps . This means that, when designing any website through which personal data of those who visit it will be processed, it is necessary that this task is done taking into consideration the security of those users, guaranteeing the privacy of their data . Thus, privacy laws must always be taken into account from the first moment that such a website is conceived, whatever its type.
Analyze and increase customer trust based on data research
In most cases, you can get more information from customers who visit your e-commerce site by engaging with them and asking them questions directly, rather than by simply working with their personal data.
Always be transparent with customers
It is necessary to explain to customers everything related to what has been implemented to comply with the GDPR and, in this way, a relationship of trust will be achieved with them. Likewise, by increasing communications with customers, it will help them to better understand how data is used. Therefore, do not forget to provide users with a very precise description of how cookies will be used at all times.
What type of Cookies does Prestashop use?
A first differentiation of cookies can be made into two fundamental groups:- Functional or necessary: they must be activated for the correct operation of the website, so users will always have to activate them to continue browsing that page. They are used, for example, to save sessions or products in the shopping cart.
- Optional: These cookies are not necessary for the proper functioning of the website, but they improve usability and data collection. These include, for example, analytics or behavioural advertising.
- Own cookies: These are sent to the computer of the user who visits the page from the page's own editor, from where the service requested by the user is also provided.
- Third-party cookies: they reach the user from a computer or domain through another entity that processes the data obtained by the cookies, but which is not the manager or editor of that page.