European Union court decided to ban cookies in the EU

[sirfranz]

On Oktober 1, 2019 the JUDGMENT OF THE COURT (Grand Chamber) of the European Union decided to ban cookies in den EU, see Judgment number 56 following: http://curia.europa.eu/juris/document/document.jsf?text=&docid=218462&pageIndex=0&doclang=EN&mode=req&dir=&occ=first&part=1&cid=1438506

Now, cookies can only be placed after the visitor to a website agrees. If the visitor does not agree, cookies now are prohibited. The cookie treatment must be done through the website. But evo places cookies without asking the visitor.

Next is the planned new e-privacy directive of the European Union. The use of cookies will be further restricted in the future. In the future, visitors to a website will not only have to accept cookies, but also be able to choose which category of cookies will be set: technical cookies, tracking cookies, etc. In addition, machine communication should also be restricted.

It's terrible.
Hope you have a cookie solution for evo.

[modwebpl]

Damn.. :/

[leonie12]

It seems that technical necessary, especially session cookies, are excluded from the obligation to ask for consent before setting them. How I understand it Evo cokkies are falling under this exclusion.

[sirfranz]

Thank you leonie12

Article 5(3) of Directive 2002/58:
3. Member States shall ensure that the use of electronic communications networks to store information or to gain access to information stored in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned is provided with clear and comprehensive information in accordance with Directive 95/46/EC, inter alia about the purposes of the processing, and is offered the right to refuse such processing by the data controller. This shall not prevent any technical storage or access for the sole purpose of carrying out or facilitating the transmission of a communication over an electronic communications network, or as strictly necessary in order to provide an information society service explicitly requested by the subscriber or user.
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32002L0058&from=DE

Evo works without cookies, too. Only the access at protected areas is not possible. Cookies therefore not strictly neccessary to visit an evo website. So, evo cookies are not covered by the exemption. That's the problem.

[Dmi3yy]

I think we can create plugin for that with some def style

its not hard

[sirfranz]

Sounds great.
I don’t really have the time to do that right now.

My thoughts:

[technical]
The cookie-settings should be saved within the SESSION, like this structure:

$_SESSION['cookies']['permission']

under that:

['allow_technical'] bool [0|1] default 1 0=disabled 1=enabled
['allow_tracking'] bool [0|1] default 0 0=disabled 1=enabled
['allow_other'] bool [0|1] default 0 0=disabled 1=enabled

How long cookies can be stored is controversial. I think so far a maximum of 30 days.

[plugin]
If the user visit the website and no session cookie is set, a dialog opens to get the user exemption. This dialog have to include (by law)

a) an information that this website uses cookies
b) an link to the privacy policy
c) options to select which type of cookies the user want to allow
d) two buttons: "save and accept cookies" and "don’t accept cookies"

[snippet]
It has to do two things:

a) allow the site manager to include content, that set cookies (e.g. google ads)
b) show the "cookie-central"

a) could be like this [!cookie? cmode=set_content type=<the cookie type> content=<the content chunk> error=<the error chunk>!]

cmode the snippet mode
[set_content|cookie_central] default: set_content

type the type of the cookie the content will set
set [tech|tracking|other]

content the name of the chunk, that contains the content that set cookies

error the name of the chunk, that contains an error message if the user has chosen that he don't want to set cookies of the chosen type (see 'type' above)

The snippet returns the content of the applicable chunk.

b) Cookie-Central
By law, website visitors have to be able to change their choices. So we need a cookie-central where the user can change his exemption. The snippet call could be like this [!cookie? cmode= cookie_central!]

The Cookie-Central can be placed on a separate page.

[webkarli]

I am first and foremost a user of EVOLUTION. Unfortunately I am not a great developer. I do a few simple snippets myself. Other than that I use almost only the standard extras. I do not trust myself to develop plugins. But I urgently need a solution for cookies in the EU. It is European law and violations can be very expensive. I have been using MODX for many years and now I use EVOLUTION. In the meantime I have changed my projects completely to EVOLUTION 1.4 and 2.0. If I can not meet the requirements of the European Union court, I have a very big problem. Since I probably can't develop it myself, I have to rely on help. Please help.

Translated with www.DeepL.com/Translator (free version)

[Dmi3yy]

For example can use this:
https://www.cookiebot.com

I think i have time for that only in March (

[bossloper]

And also https://github.com/Nicola1971/DivasCookies-Plugin

[webkarli]

If I see this correctly, Nicola's solution in 2020 is no longer sufficient. I had created a similar solution, without administration in the backend, with a snipped.

[bossloper]

@webkarli - yes you may well be right.

[bossloper]

This might be an option when they release version 4.0:
https://github.com/osano/cookieconsent

v4 category opt out thread:
https://github.com/osano/cookieconsent/issues/556

[webkarli]

At osano 7500 hits are free, after that 99 $ per month are due. The 7500 hits are easily accessible even with small projects. This exceeds my budgets.

Oh, osanao on github is MIT. I'll try.

Other question: 90% of my projects have only the EVOLUTION-cookie. How can I prevent the setting of the EVOLUTION-cookie for normal website visitors. If this is practical for me, I try to make a cookie-consent for many of my own projects by myself, as a temporary solution.

[Dmi3yy]

I add task for developer do plugin for Evo, need some time for that

[risingisland]

As I too am looking for a solution, maybe this will be of help to others:
• https://www.jqueryscript.net/other/GDPR-Cookie-Compliance-Plugin.html
• https://github.com/osano/cookieconsent
• https://www.freeprivacypolicy.com/cookie-consent/