In the Netherlands you may not place or read cookies on a visitor device without prior, informed consent, unless the cookie is strictly necessary for the service the visitor asked for or has no more than minor consequences for privacy. That rule is in article 11.7a of the Telecommunications Act (Fesootaiga Fa'atekonolosi), which implements the ePrivacy Directive; where the cookie also processes personal data, the GDPR applies on top of it and is enforced by the Autoriteit Personsgegevens. Consent is required regardless of whether the data is personal; the GDPR then adds requirements about how that data may be used afterwards.
Cookie banners are an active enforcement priority for the Dutch supervisor, which has repeatedly stated that a banner without an equally accessible refusal option does not deliver valid consent.
E tatau ona e maua se maliega talafeagai a'o le'i tu'uina kuki e siaki ai mea i lau 'upega tafa'ilagi, ma e le mafai e lau fa'ailoga kuki ona fa'aogaina pusa ua uma ona siakiina, fa'amau te'ena natia, po'o isi mamanu fa'asesē. O tulafono e sau mai le GDPR ma le ePrivacy Directive, lea e galulue fa'atasi e puipuia le le faalauaiteleina o tagata fa'aoga.
Afai e te fa'agasoloina fa'amatalaga patino e ala i kuki, e fa'aoga uma ia tulafono e lua i lau 'upega tafa'ilagi.
O lenei taʻiala e faʻamatalaina ai poʻo a ituaiga kuki e manaʻomia ai le maliega, pe faʻapefea ona faʻatulaga ni faʻailoga kuki e tausisia tulafono, ma mea e te manaʻomia e fai mo auʻiliʻiliga ma faʻasalalauga. O le a e aʻoaʻoina e uiga i manaʻoga o le tulafono faʻalilolilo a Holani , pe faʻapefea ona pulea lelei le maliega a tagata faʻaoga, ma pe faʻapefea ona ʻalofia mea sese masani e oʻo atu ai i lapataʻiga ma sala tupe.
Understanding cookies and their types
O kuki o ni faila tusitusia laiti e teuina e uepisaite i lau masini e ala i lau su'esu'ega uepi. E amata mai i faila taua e mana'omia mo galuega fa'avae a le uepisaite i meafaigaluega e siaki ai au amioga i le tele o uepisaite.
What are cookies and online identifiers?
E fa'agasolo ma teuina kuki e lau su'esu'ega uepi pe a e asia se upega tafa'ilagi. O kuki ta'itasi e iai fa'amatalaga e fesoasoani i upega tafa'ilagi e iloa ai lau masini ma manatua fa'amatalaga e uiga i lau asiasiga.
I le avea ai ma fa'ailoga i luga ole initaneti, e mafai e kuki ona teuina fa'amaumauga e lava e ono fa'ailoa ai oe o se tagata. Atonu latou te siakiina po'o fea itulau e te asia, o a so'otaga e te kilikiina, ou mana'oga, ma lou nofoaga.
E galulue fa'atasi kuki fa'ailoa ma isi fa'amaumauga e pei o tuatusi o le initaneti e fatu ai ni talaaga o au gaioiga i luga ole laiga. I lalo o le GDPR, e agavaa kuki o ni fa'amaumauga patino pe a fa'aaogaina e fa'ailoa ai tagata fa'aoga.
O lona uiga e tatau i uepisaite ona mulimulitaʻi i tulafono faʻatonutonu o le puipuiga o faʻamatalaga pe a faʻaaogaina. O loʻo taʻua faapitoa i le tulafono e mafai e faʻailoga kuki ona tuʻua ni faʻailoga e fesoasoani e fatuina ni talaaga ma faʻailoa ai tagata taʻitoʻatasi.
Duration and storage: session vs. persistent cookies
O kuki o le sauniga o faila le tumau e muta le aoga pe a e tapunia lau su'esu'ega i luga o le initaneti. E fesoasoani i uepesaito e manatua au gaioiga i le taimi o se su'esu'ega e tasi, e pei o mea i lau ato fa'atau.
E tumau pea kuki tumau i lau masini se'ia e tapeina pe o'o i le aso e muta ai. O nei kuki ua tusia i totonu o latou code aso fa'apitoa e muta ai.
Neither the ePrivacy Directive nor the Telecommunications Act sets a maximum lifetime for a cookie. What the law requires is that the retention period is proportionate to the purpose and disclosed before consent is given; supervisory guidance across the EU commonly treats a lifetime beyond roughly a year as something the controller must justify rather than assume. Persistent cookies allow websites to remember preferences across visits.
Latou te teuina faʻamatalaga e pei o au faʻatulagaga gagana, faʻamatalaga e te ulufale ai, ma mea e te fiafia i ai i le upega tafaʻilagi.
Kuki muamua ma isi vaega lona tolu
O kuki a le vaega muamua e tu'u sa'o i luga o lau masini e le upega tafa'ilagi o lo'o e asia. O le pule o le upega tafa'ilagi e pulea nei kuki ma fa'aaogaina e fa'aleleia atili ai lou poto masani i luga o lana 'upega tafa'ilagi.
O kuki a isi vaega e tuʻuina atu e vaega mai fafo e pei o faʻasalalauga poʻo auaunaga auʻiliʻiliga nai lo le upega tafaʻilagi o loʻo e asia. O nei kuki e siaki ai au gaioiga i luga o le tele o upega tafaʻilagi e fausia ai ni faʻamatalaga auiliili o au mea e te fiafia i ai ma amioga.
E sili atu ona lamatia le le faalauaiteleina o faamatalaga e ala i kuki a isi vaega ona e mafai ona latou aoina mai ni faamatalaga tetele e uiga i au masaniga i luga o le initaneti. E mafai e le tele o faalapotopotoga ona maua faamatalaga mai se kuki a se tasi vaega lona tolu.
Talu ona faʻamalosia le GDPR, ua faʻaitiitia le faʻaaogaina o kuki a isi vaega.
Essential and non-essential cookies
E manaʻomia kuki e matuā manaʻomia (e taʻua foʻi o kuki taua) mo galuega faavae o le upega tafaʻilagi. E mafai ai ona faʻaogaina vaega autu e pei o nofoaga saogalemu, ato faʻatau, ma le faʻaogaina o itulau.
E te lē tau tuʻuina atu se maliega mo nei kuki, ae e tatau i uepi ona faʻamatala mai mea latou te faia ma le mafuaʻaga e tāua ai.
O kuki e lē taua e aofia ai ni vaega se tele:
- Kuki fiafia manatua au filifiliga e pei o le gagana, itulagi, ma fa'amaoniga ulufale
- Kuki fa'amaumauga aoina faʻamatalaga e le o iloa ai oe e uiga i le auala e te faʻaaogaina ai se upega tafaʻilagi e faʻaleleia atili ai lana faʻatinoga
- Maketi kuki siaki au gaioiga i luga ole initaneti e faʻalauiloa ai faʻasalalauga faʻapitoa
E tatau ona e tuʻuina atu lau maliega manino aʻo leʻi faʻaaogaina e se upega tafaʻilagi kuki e le taua. E mafai e kuki maketi ona faʻasoa atu au faʻamatalaga i tagata faʻasalalau ma isi faʻalapotopotoga.
E masani lava o kuki faifai pea ma kuki mai isi vaega e fatuina ai ni talaaga auiliili o au amioga i luga ole initaneti.
The GDPR, the ePrivacy Directive and Dutch law
I Netherlands, e tatau i le au fa'agaoioia upega tafa'ilagi ona usita'ia le tele o vaega o tulafono fa'atonutonu o le le faalauaiteleina o fa'amatalaga e pulea ai le auala e te aoina ma fa'agasolo ai fa'amatalaga a tagata fa'aoga e ala i kuki ma tekinolosi siaki. O le General Data Protection Regulation (GDPR) e galulue fa'atasi ma le ePrivacy Directive ma tulafono fa'ale-atunu'u a Netherlands e fausia ai se fa'avae atoatoa mo le puipuia o le le faalauaiteleina i luga ole laiga.
European and Dutch data privacy laws
O le GDPR o le tulafono autū lea e puipuia ai faʻamatalaga e faʻaaogaina i atunuu uma o le Iuni a Europa, e aofia ai ma Netherlands. Na amata faamamaluina i le aso 25 o Me 2018 ma faʻaaogaina saʻo e aunoa ma le manaʻomia o le faʻatinoina i le atunuʻu atoa.
The ePrivacy Directive, often called the Cookie Law, specifically addresses electronic communications and tracking technologies. Unlike the GDPR, this directive required EU countries to incorporate it into national law.
Na faʻatinoina e Netherlands nei tulafono e ala i le Tulafono o Fesootaiga ( Telecommunicatiewet ). A feteenai nei tulafono, e sili atu le faʻamuamua o le ePrivacy Directive nai lo le GDPR mo mataupu e fesoʻotaʻi ma fesoʻotaʻiga faʻaeletoronika ma kuki.
E sili atu ona faigata le ePrivacy Directive i le tele o itu, aemaise lava e faatatau i manaoga o maliega mo kuki. E tatau ona e usitaia tulafono faatonutonu uma e lua pe afai e te faagaoioia se upega tafailagi e faatatau i tagata faaaoga i Netherlands po o le lautele o le European Economic Area (EEA).
The long-awaited ePrivacy Regulation is not coming in the form that was proposed. After years without agreement between the Council and the Parliament, the European Commission withdrew the proposal in its 2025 work programme. The ePrivacy Directive therefore remains the applicable instrument, and in the Netherlands article 11.7a of the Telecommunications Act remains the operative provision. Any claim that new cookie rules are imminent should be checked against the current legislative file rather than assumed.
The role of the Autoriteit Persoonsgegevens
O le Autoriteit Persoonsgegevens (AP) o le Pulega Puipuiga Fa'amaumauga a Holani e nafa ma le fa'amalosia o tulafono a le GDPR ma le ePrivacy i Holani. E iai le pule a le AP e su'esu'e ai fa'asea, faia su'esu'ega, ma tu'uina atu sala tupe mo le le usitaia.
For serious GDPR breaches the AP can impose the highest tier of administrative fine set out in article 83 of the Regulation. For breaches of the cookie provision in the Telecommunications Act the maximum is fixed by that Act and expressed as a set amount or a percentage of turnover, whichever is appropriate; those figures are amended from time to time, so take them from the current text of the Act rather than from a secondary source. The AP can also impose an order subject to a penalty payment, which in practice bites faster than a fine because it forces the banner to change.
E lomia e le AP ni pepa taiala ma ni faaiuga e faamanino ai le auala e tatau ona e faauigaina ai tulafono faalilolilo i le tulaga faa-Holani. E mafai ona e lipotia atu ni soliga e masalomia i le AP, ma e mafai e tagata faaaoga ona faila ni faitioga pe afai latou te talitonu ua sese lau taulimaina o a latou faamatalaga.
Key GDPR requirements for cookies
E tatau ona e maua se maliega aloaia a'o le'i tu'uina ni kuki e le taua i masini a tagata fa'aoga. E tatau ona tu'uina atu ma le saoloto le maliega, fa'apitoa, fa'amalamalamaina, ma manino.
O lona uiga o pusa ua uma ona siakiina ma le maliega fa'alilolilo e ala i le fa'aauau pea ona su'esu'eina e le ausia tulaga fa'atonuina o le GDPR.
E tuusaunoa kuki e matuā manaʻomia lava mai manaʻoga o le maliega. E aofia ai kuki e taua mo:
- Tausia o le fa'amaoniga a le tagata fa'aoga
- Manatuaina o mea o lo'o i totonu o le ato fa'atau
- Fa'amautinoaina o le saogalemu o le upega tafa'ilagi
- Paleni o avega i luga o 'au'aunaga
E tatau ona e tuʻuina atu faʻamatalaga manino e uiga i le faʻamoemoega o kuki taʻitasi, le umi, ma le faʻagasologa o faʻamaumauga aʻo leʻi mauaina se maliega. O nei faʻamatalaga e tatau ona faʻaaogaina se gagana faigofie e mafai e tagata faʻaoga masani ona malamalama i ai.
E tatau i tagata faʻaoga ona mafai ona faaui i tua le maliega e pei ona latou tuʻuina atu. E le mafai ona e teena le ulufale atu i lau 'upega tafaʻilagi ona ua teena e se tasi kuki e le taua.
E tatau fo'i ona e fa'amaumauina ma teu fa'amaumauga o maliega uma e te mauaina.
Obtaining and managing consent
I lalo o tulafono a le GDPR, e tatau i uepisaite o loʻo faʻagaoioia i Netherlands ona maua se maliega aloaia aʻo leʻi tuʻuina kuki e le taua i luga o le masini a se tagata faʻaoga. O lenei mea e manaʻomia ai se fesootaiga manino e uiga i le faʻaaogaina o kuki, faʻaoga faigofie ona faʻaoga, faʻamaumauga talafeagai o filifiliga maliega, ma le mafai e tagata faʻaoga ona suia a latou mea e fiafia i ai i soʻo se taimi.
Valid consent under the GDPR
O le Mataupu 7 o le GDPR ua fa'atulagaina ai mana'oga faigata mo mea e ta'ua o se maliega aloaia. E tatau ona tu'uina atu lau maliega ma le loto i ai, patino, fa'amalamalamaina, ma manino.
O lona uiga e manaʻomia e tagata faʻaoga ona malamalama lelei i le mea o loʻo latou malilie i ai aʻo leʻi faia se filifiliga. O le maliega e tuʻuina atu ma le saoloto o lona uiga e mafai e tagata faʻaoga ona fai atu leai e aunoa ma le leiloa o le avanoa i galuega autu a lau 'upega tafaʻilagi.
E le mafai ona e fa'amalosia tagata e talia kuki ina ia na'o le matamata i au anotusi. O pusa ua uma ona siakiina e le faitaulia o se maliega aloaia aua e tatau i tagata fa'aoga ona faia se la'asaga malosi e malilie ai.
E tatau ona fa'aogaina se gagana faigofie e malamalama i ai so'o se tasi i lau talosaga mo se maliega. 'Alo'ese mai fa'aupuga fa'aletulafono po'o ni fa'aupuga fa'apitoa e ono fenumia'i ai tagata asiasi.
E tatau ona e taʻu atu i tagata faʻaoga poʻo a ituaiga kuki e te faʻaaogaina, o a faʻamatalaga e te aoina, ma le auala e te faʻaaogaina ai na faʻamatalaga. E tatau ona e teuina ni faʻamaumauga auiliili o gaioiga uma o maliega.
E aofia ai po'o ai na tu'uina atu le maliega, o anafea na latou tu'uina atu ai, o a fa'amatalaga na latou mauaina, ma po'o a kuki patino na latou taliaina pe teena.
Consent banners and user experience
O lau fa'ailoga o le maliega kuki e avea ma meafaigaluega autū e talosagaina ai le fa'atagaga mai tagata asiasi. E tatau ona manino lelei le fa'ailoga pe a taunuu muamua se tasi i lau 'upega tafa'ilagi, ae e le tatau ona poloka atoa ai le avanoa i le 'upega tafa'ilagi.
E tāua le mamanu mo le tausisia o tulafono ma le fua faatatau o le liua. E manaʻomia ona tutusa le iloga o au faamau 'talia' ma le 'teena'.
O le fa'aitiitia o le fa'amau teena, natia, po'o le fa'aaogaina o mamanu mamanu fa'a'ole'ole e solia ai tulafono a le GDPR ma fa'aleagaina ai le fa'atuatuaga o tagata fa'aoga. Tu'uina atu ni filifiliga fa'alilolilo e mafai ai e tagata fa'aoga ona filifili i le va o vaega eseese o kuki.
Atonu e talia e se tasi kuki taua ma kuki auiliiliga ae teena ni mea e siaki ai faasalalauga. O faatulagaga masani uma e tatau ona avanoa pe seti e filifili e le auai.
E tatau ona aofia i lau fa'ailoga se so'otaga tuusa'o i lau faiga fa'avae auiliili mo kuki. Ia faigofie ma sa'o le gagana.
Fa'aali le fa'ailoga i le gagana e fiafia i ai le tagata fa'aoga pe a mafai.
Consent management platforms (CMPs)
O se fa'avae e pulea ai maliega e otometi ai le faagasologa o le mauaina ma le faamaumauina o maliega mo kuki. O nei meafaigaluega e su'esu'e lau 'upega tafa'ilagi mo kuki, poloka mea e le taua se'ia o'o ina tu'uina atu le maliega, ma pulea mea e fiafia i ai tagata fa'aoga i lau 'upega tafa'ilagi atoa.
E taulimaina e CMP ia faigata fa'atekinolosi o le pulega o maliega kuki a le GDPR. Latou te taofia otometi lava tusitusiga fa'amaumauga mai le fa'agaoioia a'o le'i faia e tagata fa'aoga a latou filifiliga.
Latou te faʻafouina foʻi lisi o kuki pe a suia lau 'upega tafaʻilagi, ma ia mautinoa e te talosagaina pea se maliega mo ni tagata siaki fou. O le tele o faʻavae e aofia ai foliga o le geolocation e fetuʻunaʻi ai manaʻoga o maliega e faʻatatau i le mea o iai au tagata asiasi.
Latou te teuina fa'amaumauga ua fa'ailogaina i taimi o gaioiga ta'itasi o maliega, e aofia ai fa'amatalaga o masini, ituaiga o su'esu'ega i luga o le initaneti, ma mea e fiafia i ai kuki patino ua filifilia. O CMP lelei e ofoina atu filifiliga fa'apitoa ina ia fetaui lau fa'ailoga maliega ma lau fa'ailoga.
Latou te tuʻuina atu foʻi auʻiliʻiliga e uiga i au fua faatatau o le filifiliga, e fesoasoani ia te oe e faʻaleleia atili ai lau fuafuaga o le maliega aʻo faʻatumauina pea le tausisia o tulafono.
Changing and withdrawing consent
E tatau i tagata faʻaoga ona mafai ona faaui i tua le maliega pe sui a latou mea e fiafia i ai i kuki i se auala faigofie e pei ona latou tuʻuina atu. O loʻo taʻu manino mai i le Mataupu 7 o le GDPR e tatau ona faigofie le faaui i tua o le maliega e pei o le tuʻuina atu.
Tuu se so'otaga tumau i fa'atulagaga kuki i se mea e mafai ona va'aia i lau 'upega tafa'ilagi. O le tele o 'upega tafa'ilagi e fa'aogaina se fu'a la'ititi i le pito i lalo o itulau ta'itasi po'o se fa'ailoga e mafai ona maua a'o fa'aogaina e tagata fa'aoga.
A kiliki e se tasi lenei so'otaga, e tatau ona latou va'aia loa a latou mea e fiafia i ai i kuki. E mana'omia e lau CMP ona fa'agasolo vave suiga o le maliega.
Afai e faaui i tua e se tagata faʻaoga le maliega mo kuki faʻasalalauga, e tatau i na tagata siaki ona taofi loa le aoina o faʻamatalaga. Faʻamaumau nei suiga i le tulaga lava e tasi o faʻamatalaga auiliili na e faʻaaogaina mo le maliega muamua.
E te lē tau fesili pe aiseā e manaʻo ai se tasi e sui ana mea e fiafia i ai. E tatau ona itiiti se taumafaiga e manaʻomia i le faagasologa ma e leai se faʻamatalaga.
Teu mea ua fa'afouina ina ia fa'aoga i asiasiga i lau 'upega tafa'ilagi i le lumana'i.
Types and purposes of cookies in analytics and advertising
O ituaiga eseese o kuki e fa'atinoina ni galuega fa'apitoa i luga o upega tafa'ilagi, mai le fuaina o amioga a tagata asiasi i le tu'uina atu o fa'asalalauga fa'apitoa. O le malamalama i nei vaega e fesoasoani ia te oe e iloa ai po'o fea kuki e mana'omia le maliega ma le auala latou te fa'agasolo ai fa'amatalaga patino.
Analytics cookies and data processing
Analytics cookies collect information about how visitors use your website. These tracking cookies record which pages you visit, how long you stay, and where you click.
O faʻamaumauga e fesoasoani i ē ana upega tafaʻilagi e malamalama i amioga a tagata faʻaoga ma faʻaleleia a latou 'upega tafaʻilagi. O kuki faʻatinoga e pa'ū i lalo o lenei vaega.
Latou te aoina faʻamatalaga e uiga i le saoasaoa o le 'upega tafaʻilagi, savali sese, ma faʻafitauli faʻapitoa. O nei faʻamatalaga e masani ona tuʻufaʻatasia ma faʻalilolilo, o lona uiga e le mafai ona faʻailoaina tagata faʻaoga taʻitoʻatasi.
O le fa'aaogāina o kuki mo au'ili'iliga e masani ona aofia ai auaunaga a isi vaega e pei o le Google Analytics. O nei meafaigaluega e fa'agasolo fa'amaumauga ua aoina e fatu ai lipoti ma fuainumera.
However, even anonymised data can qualify as personal data under GDPR if it could potentially identify you when combined with other information. Dutch law contains a narrow carve-out that many website operators over-read. Article 11.7a of the Telecommunications Act does not require consent for cookies used exclusively to obtain information about the quality or effectiveness of the service delivered, provided the consequences for the visitor privacy are no more than minor. The Autoriteit Persoonsgegevens applies that exemption strictly: the analytics must be configured so that the provider does not use the data for its own purposes, identifiers are truncated or pseudonymised, nothing flows on to advertising, and a processing agreement is in place. A standard, out-of-the-box installation of a commercial analytics package almost never meets those conditions, which is why most Dutch websites do need consent for analytics.
O le tele o kuki auiliiliga o kuki tumau ia e tumau i lau masini se'ia o'o ina muta pe e te tapeina.
Advertising and marketing cookies
E siaki e kuki maketi au gaioiga i luga o le initaneti i luga o le tele o uepisaite e fausia ai se talaaga auiliili o mea e te fiafia i ai. E faʻaaogaina e kuki faasalalauga nei faʻamatalaga e faʻaali atu ai ia te oe faʻasalalauga faʻapitoa e faʻavae i luga o lau talafaasolopito o suʻesuʻega ma mea e te fiafia i ai.
O nei kuki e siaki ai e toetoe lava o taimi uma o kuki a isi vaega e tuʻuina e tagata faʻasalalau poʻo fesoʻotaʻiga faʻasalalauga, ae le o le upega tafaʻilagi o loʻo e asia. Latou te mulimuli ia te oe mai le tasi 'upega tafaʻilagi i le isi, e aoina faʻamatalaga e uiga i au amioga ma mea e te fiafia i ai.
O le fa'aaogāina o kuki i fa'asalalauga e fa'atapula'aina ai fo'i le tele o taimi e te va'aia ai le fa'asalalauga lava e tasi. A aunoa ma nei kuki, e te ono va'aia pea lava pea fa'asalalauga tutusa i luga o 'upega tafa'ilagi eseese.
O le fa'agasologaina o fa'amatalaga patino e ala i kuki fa'asalalauga e mana'omia ai lau maliega manino i lalo o le GDPR. O nei kuki e masani ona tumau i lau masini mo se vaitaimi umi, o nisi taimi masina po'o tausaga, se'i vagana ua e tapeina ma le lima.
E sili ona lamatia le le faalauaiteleina o faamatalaga e ala i kuki maketi ona e aoina mai ai le tele o faamatalaga e uiga i au masaniga i luga ole initaneti ma e mafai ona faasoa atu na faamatalaga i le tele o faalapotopotoga.
Functional and performance cookies
E manatua e kuki fa'atino au filifiliga ma mea e te fiafia i ai i luga o upega tafa'ilagi. Latou te teuina fa'amatalaga e pei o lau filifiliga gagana, fa'atulagaga o itulagi, po'o fa'amaoniga e te ulufale ai.
O nei kuki e fa'afaigofie ai lau su'esu'ega e ala i le fa'atumauina o ou mana'oga i asiasiga uma. O kuki fa'atinoga e fuaina ai le lelei o le fa'agaoioiga o se upega tafa'ilagi.
Latou te faʻailoaina itulau lauiloa, iloa faʻafitauli o le faʻatautaia, ma siaki taimi e uta ai. E le pei o kuki faʻataʻitaʻi, o nei kuki e taulaʻi tonu lava i le faʻatinoga faʻapitoa nai lo mamanu o amioga a tagata faʻaoga.
O le tele o kuki aoga o kuki muamua ia e setiina sa'o e le upega tafa'ilagi e te asia. E masani lava o kuki o sauniga e muta le aoga pe a e tapunia lau su'esu'ega i luga o le initaneti, e ui o nisi e umi se taimi e manatua ai au mea e te fiafia i ai mo asiasiga i le lumana'i.
E te lē manaʻomia ona tuʻuina atu se maliega mo kuki faʻatino e matuā manaʻomia lava mo le faʻagaoioiga o le upega tafaʻilagi. Peitaʻi, o kuki e faʻaleleia atili ai le faigofie nai lo le faʻagaoioia o galuega autu atonu e manaʻomia pea le maliega i lalo o tulafono a le GDPR.
Transparency, cookie policies, and user rights
E tatau i upega tafaʻilagi o loʻo faʻagaoioia i Netherlands ona tuʻuina atu faʻamatalaga manino e uiga i le faʻaaogaina o kuki ma tuʻuina atu i tagata faʻaoga le pule i a latou faʻamatalaga. E manaʻomia e faiga faʻavae kuki ona faʻamatalaina poʻo a faʻamatalaga e te aoina, pe aisea e te aoina ai, ma pe faʻapefea ona pulea e tagata faʻaoga a latou mea e fiafia i ai.
Cookie policy requirements
E tatau i lau faiga fa'avae kuki ona lisiina kuki uma e fa'aaogaina e lau 'upega tafa'ilagi a'o le'i maua lau fa'atagaga. E tatau ona e fa'amatalaina mea e fai e kuki ta'itasi i se gagana faigofie e mafai e se tagata masani ona malamalama i ai.
E tatau i le tulafono ona fa'ailoa mai pe o kuki o se vaega muamua pe o se vaega lona tolu, pe o le a le umi e tumau ai lo latou aoga, ma po'o a fa'amatalaga patino latou te aoina. E le mafai ona e fa'aogaina ni fa'amatalaga le manino e pei o le "e fa'aleleia atili ai le poto masani a le tagata fa'aoga" e aunoa ma le fa'amatalaina tonu o le uiga o lena mea.
Fa'amaoti mai pe manatua e se kuki tulaga o gagana, siaki itulau na asia, pe mata'ituina kiliki fa'asalalauga. E tatau ona faigofie ona maua lau tulafono fa'avae, e masani ona fa'afeso'ota'i i le vae o lau 'upega tafa'ilagi po'o le fa'aaliga fa'ataga kuki.
E manaʻomia e le faiga faʻavae ni faʻafouga faifai pea pe a e faʻaopoopoina ni kuki fou pe suia le auala e te faʻaaogaina ai kuki o loʻo iai. E tatau ona e faʻamaumauina nei suiga ma faʻailoa i tagata faʻaoga pe a iai se aʻafiaga tele o nei faʻafouga i lo latou le faalauaiteleina.
Privacy notices and data transparency
lau faiga faavae faalauaiteleina and cookie policy work together to meet GDPR transparency requirements. The privacy policy should explain how cookie data connects to other personal information you collect.
E manaʻomia ona e faʻailoa mai vaega uma lona tolu o loʻo mauaina faʻamatalaga kuki, e pei o kamupani e tuʻuina atu auʻiliʻiliga poʻo fesoʻotaʻiga faʻasalalauga. O puipui kuki e poloka ai le ulufale atu i lau 'upega tafaʻilagi seʻi vagana ua talia e tagata faʻaoga kuki uma e solia tulafono a le GDPR.
E tatau ona e fa'atagaina tagata fa'aoga e maua au tautua tusa lava pe latou te teena kuki e le taua. O au fa'aaliga fa'ataga kuki e mana'omia ni filifiliga manino mo le taliaina pe te'ena o vaega eseese o kuki.
E le mafai ona e siaki muamua pusa o maliega pe fa'aaoga ni gagana fenumiai e fa'asesēina ai tagata fa'aoga. E tatau ona faigofie ona maua ma fa'aoga le filifiliga "teena" e pei o le filifiliga "talia".
User rights and cookie preferences
E iai le aia tatau a tagata faʻaoga e faʻaleaogaina ai le maliega mo kuki e pei ona latou tuʻuina atu. E tatau ona e tuʻuina atu se auala vaaia mo i latou e suia ai a latou mea e fiafia i ai i kuki i soʻo se taimi, ae le naʻo le taimi muamua na latou asiasi mai ai.
O le tele o uepisaite e faʻaopoopoina se soʻotaga "Faʻatulagaga Kuki" i totonu o latou vae poʻo se faʻamau e faʻasolo i luga o itulau taʻitasi. E manaʻomia ona e teuina faʻamaumauga o le maliega a le tagata faʻaoga , e aofia ai le taimi na latou tuʻuina atu ai ma mea na latou malilie i ai.
O nei faʻamaumauga e fesoasoani e faʻamaonia ai le tausisia o tulafono pe afai e suʻesuʻeina e le au faʻatonutonu lau 'upega tafaʻilagi. E mafai e tagata faʻaoga ona talosagaina ni kopi o nei faʻamatalaga o le maliega i lalo o aia tatau a le GDPR.
E tatau i lau nofoaga autu e te fiafia i ai ona fa'atagaina tagata fa'aoga e pulea eseese vaega o kuki. E le mafai ona e fa'amalosia tagata fa'aoga e talia kuki maketi e fa'aaoga kuki e te fiafia i ai.
Risk management, compliance, and best practices
O le puleaina o tulaga lamatia e manaʻomia ai iloiloga masani o au gaioiga faʻagasologa o faʻamaumauga ma le tausisia o le tausisia o kuki. E tatau foʻi ona e saunia ni faʻatulagaga manino mo le tali atu i soliga o faʻamaumauga pe a tutupu.
Data protection impact assessments
O le Iloiloga o Aafiaga o le Puipuiga o Faʻamaumauga o se matafaioi faaletulafono i lalo o le GDPR pe afai o au gaioiga faʻagasologa e ono iʻu ai i ni lamatiaga tetele i aia tatau ma saolotoga o tagata taʻitoʻatasi. E tatau ona e faia se DPIA aʻo leʻi faʻatinoina ni tekinolosi fou e siaki ai, meafaigaluega auʻiliʻili, poʻo ni faiga faʻasalalauga e faʻagasolo ai le tele o faʻamatalaga patino.
E tatau i lau DPIA ona faʻailoa mai po o a faʻamaumauga e te aoina mai kuki, pe aisea e te manaʻomia ai, ma po o a tulaga lamatia o loʻo iai. Faʻamaumau pe o e faʻalagolago i le maliega, aia tatau, poʻo se isi faʻavae faaletulafono mo le faʻagasologaina.
Ia aofia ai ni fuafuaga e faʻaitiitia ai tulaga lamatia, e pei o le faʻaitiitia o faʻamaumauga, faʻafoliga sese, poʻo le faʻaaogaina o le HTTPS e puipui ai faʻamaumauga aʻo feaveaʻi. E tatau ona e faʻafesoʻotaʻi lau Ofisa Puipuiga o Faʻamaumauga pe afai e iai sau tasi.
Afai e faʻaalia e se DPIA ni tulaga lamatia maualuluga e le mafai ona e faʻaitiitia, e tatau ona e faʻafesoʻotaʻi pulega talafeagai o le puipuiga o faʻamatalaga aʻo leʻi faʻaauauina. Ia faʻafouina au iloiloga pe a e suia au metotia e siaki ai pe faʻaopoopo ni faʻavae fou o auʻiliʻiliga.
Ensuring ongoing cookie compliance
E manaʻomia ona e siaki soo lau 'upega tafaʻilagi e faʻamaonia ai o kuki uma e fetaui ma mea e te faʻaalia i lau faʻailoga kuki ma le faiga faʻavae e uiga i le le faalauaiteleina. Siaki pe o galue lelei auala e tausisia ai maliega kuki ma ia faaaloalo i filifiliga a tagata faʻaoga.
Toe iloilo lau fa'avae e pulea ai kuki i masina ta'itasi e fa'amautinoa ai e poloka kuki e le taua se'ia o'o ina tu'uina mai e tagata fa'aoga le maliega. Fa'ata'ita'i lau fa'ailoga i masini eseese ma su'esu'ega i luga o upega tafa'ilagi.
Ia fa'amaonia e le utaina kuki o auiliiliga ma kuki fa'asalalauga a'o le'i faia se maliega. Mata'ituina suiga i mana'oga o le tausisia o le GDPR ma ta'iala mai pulega o le puipuiga o fa'amatalaga.
Fa'afou au faiga e fa'atagaina ai oe pe a suia tulafono faatonutonu. A'oa'o au 'au maketi ma atina'e i mana'oga o le tausisia o le le faalauaiteleina.
Fa'amaumau uma gaioiga tau le tausisia o tulafono , e aofia ai le taimi e te fa'afouina ai meafaigaluega mo maliega, iloilo lisi o kuki, pe suia tusitusiga e siaki ai. Tausia fa'amaumauga o mea e fiafia i ai i maliega ma ia mautinoa e mafai e tagata fa'aoga ona fa'aleaogaina le maliega i se auala faigofie e pei ona latou tu'uina atu.
Responding to data breaches
E tatau ona e lipotia nisi o soliga o faʻamaumauga i le Dutch Data Protection Authority i totonu o le 72 itula talu ona e iloa. O se soliga e aofia ai faʻamaumauga kuki poʻo faʻamatalaga auʻiliʻili e ono manaʻomia le faʻailoa atu pe afai e lamatia ai aia tatau ma saolotoga o tagata taʻitoʻatasi.
Fausia se fuafuaga e tali atu ai a'o le'i tupu se soliga. Fa'ailoa po'o ai o le a iloiloina le soliga, fuafua pe mana'omia le lipotia, ma fa'afeso'ota'i ma pulega.
Fa'amaumau po'o a fa'amaumauga na a'afia, to'afia tagata fa'aoga, ma la'asaga o lo'o e faia e fo'ia ai. Afai e a'afia lau kamupani su'esu'ega po'o le fa'avae fa'asalalauga i se soliga, e te nafa pea i le avea ai ma pule o fa'amaumauga.
Fa'afeso'ota'i vave i latou ina ia malamalama i le lautele o le mataupu. Iloilo pe e te mana'omia le logoina sa'o o tagata fa'aoga, aemaise lava pe afai o le soliga e aofia ai fa'amatalaga taua e uiga i le siakiina pe ono o'o atu ai i le gaoia o fa'asinomaga po'o le taufaasese.
Tausia fa'amaumauga auiliili o soliga uma, e aofia ai ma soliga e le mana'omia ai le lipotia i pulega o le puipuiga o fa'amaumauga. O lenei pepa e fa'aalia ai au taumafaiga e tausisia le GDPR i taimi o su'esu'ega.
Soo fesili
O le malamalama i manaʻoga o le maliega i kuki, aoina o faʻamaumauga, ma faʻasalalauga i lalo o le GDPR i Netherlands e manaʻomia ai tali manino i fesili masani e uiga i le tausisia o tulafono . O le Pulega Puipuiga o Faʻamaumauga a Netherlands e faʻamalosia tulafono faʻapitoa e uiga i auala e faʻatagaina ai maliega, manaʻoga manino , ma faiga taliaina o le siakiina.
O a manaʻoga mo le mauaina o le maliega mo le faʻaaogaina o kuki i Netherlands i lalo o le GDPR?
E tatau ona e maua se maliega manino mai tagata faʻaoga aʻo leʻi tuʻuina ni kuki e le taua i luga o a latou masini. O lona uiga e le mafai ona e faʻaaogaina pusa ua uma ona siakiina pe manatu o le filemu o lona uiga o le malilie.
E tatau i lau fu'a fa'atagaga ona fa'aalia uma filifiliga i luga o le vaega e tasi. E tatau i tagata fa'aoga ona mafai ona talia pe teena kuki ma le faigofie tutusa.
Ua fa'asa e le Pulega o le Puipuiga o Fa'amaumauga a Holani ni mamanu e mana'omia ai tagata fa'aoga e kiliki i itulau e tele e teena ai kuki a'o fa'atagaina le taliaina i le kiliki e tasi. E mana'omia ona e tu'uina atu fa'amatalaga manino e uiga i mea e fai e kuki ta'itasi.
E sili ona lelei le gagana faigofie, 'alo'ese mai fa'aupuga fa'apitoa e fenumiai ai tagata fa'aoga. E tatau ona iloa lelei le fa'amoemoega o vaega kuki ta'itasi a'o le'i faia e tagata fa'aoga a latou filifiliga.
O nisi kuki e lē manaʻomia se maliega. E aofia ai kuki e matuā manaʻomia mo le faʻagaoioia lelei o lau 'upega tafaʻilagi.
E mafai fo'i ona pa'ū i lenei vaega kuki fa'ata'ita'i e itiiti sona a'afiaga i le le faalauaiteleina, ae o lenei tuusaunoaga e iai ona tapula'a fa'apitoa.
E fa'apefea ona fa'amautinoa e fa'alapotopotoga o lo'o tausisia e a latou faiga fa'asalalauga i luga ole laiga tulafono faatonutonu a le GDPR?
E tatau ona e maua se maliega a'o le'i fa'aaogaina kuki e siaki ai tagata fa'aoga mo fa'amoemoega fa'asalalauga. E fa'atatau lea i kuki siaki a le vaega muamua ma le vaega lona tolu e fa'aaogaina e fa'alauiloa ai fa'asalalauga fa'apitoa.
E manaʻomia foʻi e au paʻaga faʻasalalauga ona usitaʻia le GDPR. E te tumau pea i le nafa ma le faʻamautinoaina o loʻo mulimulitaʻi vaega lona tolu o loʻo e galulue faʻatasi ma i latou i faiga talafeagai o le puipuiga o faʻamatalaga.
O lona uiga o le toe iloiloina o konekarate ma maliega o le fa'agaioiga o fa'amaumauga ma feso'ota'iga fa'asalalauga. E le mafai ona e fa'asoa atu fa'amaumauga patino i tagata fa'asalalau e aunoa ma ni fa'avae faaletulafono talafeagai.
O le maliega o loʻo tumau pea le faʻavae masani mo gaioiga faʻasalalauga, e ui e tatau ona e faʻamaumauina lenei maliega ma faʻafaigofie ona toe faaui i tua. O le faʻavasegaina o tagata faʻaoga e faʻavae i luga o latou manaʻoga, manaʻoga faʻapolokiki, poʻo uiga patino e manaʻomia ai le maliega manino.
O kuki e siaki ai tagata faʻaoga i luga o le tele o upega tafaʻilagi e fausia ai ni talaaga auiliili e pa'ū i lalo o lenei manaʻoga. E tatau ona e faʻamatalaina manino lenei aoina o faʻamatalaga i au faʻasilasilaga faʻalilolilo.
O a laasaga e tatau ona faia e faatumauina ai le manino i auiliiliga o faamatalaga a o faamamaluina ai le le faalauaiteleina o tagata faaaoga?
E manaʻomia ona e faʻailoa i tagata faʻaoga poʻo a faʻamatalaga e te aoina mai e ala i meafaigaluega faʻataʻitaʻi. E tatau i lau faiga faʻavae e uiga i le le faalauaiteleina ona faʻamatalaina poʻo a auaunaga faʻataʻitaʻi e te faʻaaogaina ma poʻo a faʻamatalaga latou te aoina mai.
O kuki au'ili'ili e itiiti sona a'afiaga i le le faalauaiteleina atonu e le mana'omia i taimi uma se maliega. Peita'i, e fa'aoga lava lenei tuusaunoaga pe a fa'atapula'aina fa'amatalaga e aoina e kuki ma e le mafai ona fa'ailoa tagata fa'aoga ta'ito'atasi.
O le tele o meafaigaluega fa'ata'ita'i masani e le agavaa mo lenei tuusaunoaga e aunoa ma ni suiga i le fa'atulagaga. E tatau ona e fa'atulagaina meafaigaluega fa'ata'ita'i e puipuia ai le le faalauaiteleina o tagata fa'aoga.
E aofia ai le tapeina o vaega e aoina atoa ai tuatusi IP, tape le faasoaina o faamatalaga ma le kamupani e tuuina atu auiliiliga mo a latou lava faamoemoega, ma faatapulaaina vaitaimi e taofia ai faamatalaga. E tatau ona faalautele atu manaoga o maliega kuki i au meafaigaluega auiliiliga.
A teena e tagata faʻaoga kuki e le taua, e tatau ona taofia lau suʻesuʻega o auʻiliʻiliga. E te manaʻomia ni fuafuaga faʻapitoa e faʻamautinoa ai e tupu otometi lenei mea.
O a ni tulafono patino e faʻatatau i le faʻaaogaina o kuki ma mea e siaki ai mea a isi vaega mo faʻamoemoega tau maketi?
E manaʻomia e kuki siaki a isi vaega le maliega manino a le tagata faʻaoga aʻo leʻi tuʻuina atu. O nei kuki e mulimuli i tagata faʻaoga i luga o upega tafaʻilagi ma polokalama eseese, ma fatuina ai ni faʻamatalaga auiliili o amioga mo faʻamoemoega tau maketi.
E tatau ona e fa'ailoa mai tagata uma e siaki mai isi vaega i lau 'upega tafa'ilagi. E tatau i lau faiga e pulea ai maliega ona lisi manino mai nei mea ma fa'ataga ai tagata fa'aoga e talia pe teena ta'ito'atasi pe e ala i vaega.
O le tu'ufa'atasia o mea e siaki ai i lalo o vaega e le o mautinoa e solia ai mana'oga o le manino. O pixels tau maketi ma tekinolosi siaki fa'apena e pa'ū i lalo o tulafono lava e tasi e pei o kuki.
E aofia ai pixels o le siakiina o ala o faasalalauga faaagafesootai, trackers o le liua, ma pine o le toe fa'atatauina. E mana'omia lou maliega mo nei tekinolosi uma a'o le'i mafai ona latou aoina fa'amatalaga a tagata fa'aoga.
E mata'ituina faapitoa e le Pulega Puipuiga Fa'amaumauga a Holani le tausisia o kuki. I le 2024, na latou fa'alauiloa ai le fa'ateleina o asiasiga o uepisaite e siaki ai auala talafeagai e fa'atagaina ai.
O le afa o uepisaite na latou suʻesuʻeina e leʻi ausia tulaga manaʻomia.
E faʻapefea ona faʻailoa atu e kamupani i tagata faʻaoga e uiga i a latou faiga e aoina ai faʻamatalaga e tusa ai ma le GDPR?
E tatau i lau fa'ailoga kuki ona fa'aogaina se gagana manino ma faigofie e mafai e tagata fa'aoga ona malamalama i ai. Alo'ese mai fa'aupuga fa'aletulafono ma fa'aupuga fa'apitoa e fa'anenefu ai mea e te faia moni i fa'amatalaga ua aoina.
E tatau ona faigofie ona maua faʻamatalaga e uiga i kuki. E mafai ona e faʻafesoʻotaʻi atu i se faiga faʻavae auiliili o kuki mai lau faʻailoga, ae o faʻamatalaga taua e tatau ona aliali mai i luma.
E le tatau i tagata faʻaoga ona suʻe ni faʻamatalaga autu e uiga i mea ua latou malilie i ai. E tatau ona e lisiina faʻamoemoega patino mo le aoina o faʻamatalaga.
General statements like "improving user experience" do not meet transparency requirements. Instead, explain exactly what you will do with the data and who will have access to it.
E manaʻomia ni faʻafouga masani i au pepa faʻamatalaga e uiga i le le faalauaiteleina o faamatalaga. A e faʻaopoopoina ni kuki fou pe suia le auala e te faʻagasolo ai faʻamatalaga, e tatau ona e logoina tagata faʻaoga ma maua se maliega fou pe a manaʻomia.
O a ni fa'asalaga mo le le usita'ia o le GDPR e tusa ai ma kuki ma fa'asalalauga i luga ole initaneti?
E mafai e le Pulega o le Puipuiga o Faʻamaumauga a Holani ona faʻasala tupe tetele mo soliga o le GDPR. O nei sala tupe e mafai ona oʻo atu i le €20 miliona poʻo le 4% o lau tupe maua faaletausaga i le lalolagi atoa, poʻo le ā lava le aofaʻi e maualuga atu.
O fa'ailoga kuki e le tausisia tulafono e tosina mai ai le mafaufau o tulafono faatonutonu. Ua fa'ailoa mai e le Pulega ni auala e fa'asesē ai maliega o se vaega e fa'amuamua i le fa'amalosia.
O faamau teena natia, o kiliki e le mana'omia e teena ai kuki, ma fa'amatalaga le manino e faitaulia uma o ni soliga.
E ese mai i fa'asalaga tau tupe, e ono feagai oe ma poloaiga e taofi ai gaioiga fa'agasolo. E mafai e le Pulega ona fa'atonuina oe e taofi loa le fa'aaogaina o kuki e le tausisia tulafono ma tape fa'amatalaga na aoina e aunoa ma se maliega talafeagai.
O faʻasalalauga faʻalauaʻitele o soliga tulafono ma sala tupe e mafai ona faʻaleagaina ai lau faʻailoga ma faʻaitiitia ai le talitonuga o tagata faʻatau i au faiga faʻamaumauga.
Le mea e fai nei
Start with a cookie scan of your own site, run on a clean browser profile, and compare what actually fires before consent with what your banner and policy say. In most audits the gap is not the policy text but the tag manager: a script that loads on page view regardless of the choice the visitor made. Fix the loading order first, then the wording.
Law & More advises companies in the Netherlands on cookie banners and consent flows, processing agreements with analytics and advertising partners, cookie and privacy policies, and on responses to enquiries or investigations by the Autoriteit Persoonsgegevens. If you would like your set-up reviewed before the supervisor does it, please contact us.

