Cookie Policy

A cookie policy regulates how cookies are processed on a website. Cookies are understood to be small text files that store information on the website's visitor's devices. Since most cookies can identify a website user, they are classified as personal data. A cookie policy must therefore comply with the data protection regulation (GDPR).

What is that something?
Personal data

Personal data is all information that can be directly or indirectly linked to a specific person. Examples of direct personal data are name, social security number and telephone number. Indirect personal data includes e.g. IP address and vehicle registration number.

Cookies

Cookies are used on websites to create a better user experience. Cookies are small text files with information that a browser automatically saves and stores on the user's device. With cookies, login details and previous settings, e.g. saved until the next time the user logs in.

There are two different types of cookies, timed and session cookies. Timed cookies are saved for a fixed longer period and remain between the times a visitor uses websites. Session cookies are only saved while a visitor is online and using the website. When the website/browser is checked off, these cookies are thus deleted.

Cookie policy

All websites that use cookies that are to be classified as personal data must establish a cookie policy that is in line with the GDPR. The policy must clarify how cookies are used on the website and what information is saved.

How does it work?
This document can be used by anyone who owns a website that uses cookies. In order for the use of cookies that save personal data to be permitted, the GDPR must be complied with, which i.a. implies that a consent must be obtained from all users. This is often done through a small information box directly on the website that the user can choose to accept.

A cookie policy must be transparent and easy to understand, it must give a clear picture of how cookies are handled on the website. Once the policy is finalized, it shall be published on the relevant website. The document must be easily accessible for everyone to take part in.

When creating a website, it is a good idea to also establish a policy for the use of personal data, i.e. a policy for how users' personal data will be processed, as well as terms of use, to set up frameworks for what the website's users may and may not act on.

Applicable law
General Data Protection Regulation (GDPR)