2. Share information about who the data controller is and about the DPO (if you have one)

What is required?

The Article 29 Data Protection Working Party (WP29) has issued an updated Guidelines on transparency under Regulation 2016/679 (wp260rev.01). According to this, and Article 13 of the GDPR, it should be clear to the website user - at the time when the user is asked for consent regarding the use of his personal data - who the data controller is and how the data controller can be contacted. Most often, the data controller will be the company behind the website.

If the company makes use of a representative, this info should also be included. If the company has a Data Protection Officer (DPO) this and contact information should also be included.

How can I implement it? 

If you have already included this information in e.g. your website’s Privacy Policy in a clear way, then you can choose to link to your Privacy Policy from the cookie consent banner to make this available to the user. Alternatively, you can insert the information directly in the banner to make it clear to the user.

See How can I customize the content in the cookie consent banner?

Examples of text you can use if you have included the needed information in your Privacy Policy and would like to link to it from the cookie consent banner: 

EN: Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

DA: Få mere at vide om, hvem vi er, hvordan du kan kontakte os, og hvordan vi behandler persondata i vores Privatlivspolitik.

DE: Erfahren Sie in unserer Datenschutzrichtlinie mehr darüber, wer wir sind, wie Sie uns kontaktieren können und wie wir personenbezogene Daten verarbeiten.

FR: En savoir plus sur qui nous sommes, comment vous pouvez nous contacter et comment nous traitons les données personnelles veuillez voir notre Politique confidentialité.

IT: Scopra di più su chi siamo, come può contattarci e come trattiamo i dati personali nella nostra Informativa sulla privacy.

ES: Obtenga más información sobre quiénes somos, cómo puede contactarnos y cómo procesamos los datos personales en nuestra Política de privacidad.

Please note that if you have enabled bulk consent on multiple domains, then the same banner text will be displayed on all the domains. It may therefore be necessary to include multiple links to the different places where the relevant information about the data controller(s), representatives (if relevant) and DPOs (if relevant) can be found.

For further details, see the Annex of wp260rev.01 and Article 13 of the GDPR.

Last updated: 16 May 2018