Drupal CMS comes to you with privacy features out of the box, you don't have to do all the difficult pieces to
find out how to setup your site in a compliant way. It's right there for you.
[go to the Privacy Intro site]
Drupal CMS comes to you with privacy features out of the box.
There is the consent management, which is enabled by default on all new sites.
And there is an optional part, that helps your protecting your user's sensitive data and comply with their consumer rights to know about their stored data and that data to be removed.
And there is an optional part, that helps you protecting your user's sensitive
data and comply with their consumer rights to know about their stored data and
that data to be removed on request.
Now, let's be honest ...
Most people, and probably also you, if you think about privacy on the web, you think about ...
Most people think about privacy on the web, as ...
- cookie banners
-EU (European Union law makers)
-annoyance
-annoyances
-law makers from the EU
Like for example this site ... {go to https://www.spiegel.de/ and switch to English}
Like for example this site ... [go to https://www.spiegel.de/ and switch to English]
A popup blocks the content, which is not much different from a paywall. Instead of cash, you pay with your personal data.
A popup blocks the content, which is not much different from a paywall.
Instead of cash, you pay with your personal data.
And there are similar annoyances around the web, that most people already believe are there due to legal requirements.
Is this because of legal requirements?
But it's not. Those implementations are just doing it wrong.
NO, it's not. Those implementations are doing it wrong.
And that's why this is NOT what you get with Drupal CMS!!! Think again ...
Drupal CMS does it right, though ...
{Go to https://drupal-cms.dev.jurgenhaas.de}
[Go to https://drupal-cms.dev.jurgenhaas.de]
- there is no banner
- there is no popup
- and still, this site respects the user's privacy
- and the user is in control
{Go to the bottom of the page}
[Go to the bottom of the page]
- there is the link to the user privacy settings
- the visitor can check their settings at any time, save their preferences and even make changes later on
- there are some required cookies like the user's consent selection or session data when they login
- the visitor can check their settings at any time, save their preferences and
even make changes later on
- there are some required cookies like the user's consent selection or session
data when they login
- other services are optional, and disabled by default
- only when a visitor saves their preferences, allowed cookies will be stored in the browser and other services will be loaded
- only when a visitor saves their preferences, allowed cookies will be stored
in the browser and other services will be loaded
For now, we've only accepted the required services. Let's go to a site that embeds a video from YouTube.
For now, we've only accepted the required services. Let's go to a site that embeds
a video from YouTube.
{Go to the Driesnote page}
[Go to the Driesnote page]
- up to this point, the user's privacy is respected and no data is sent to any external service
- up to this point, the user's privacy is respected and no data is sent
to any external service
- the user can decide to either accept the external content once, or always
Accept the video once, the video will be loaded. If we navigate to another site and come back ...
The video is blockaed again.
Accept the video always, the video will also be loaded, just like before. But this time, is we navigate away and come back again ...
Our browser remembers our consent and the video is displayed right away, without further decisions from our site.
If we select always, the video loads and our preference is being stored
in our settings as well.
This consent is now also reflected in the privacy settings, where it can also be changed again. {Open the settings from the footer again}.
[Open the settings from the footer again]
----------------------
You as the site owner, can of course tailor the default settings for privacy and data protection when you're logged in.
You as the site owner, get it all when you're logged in:
{Go to the logged in tab in the browser}
[Go to the logged in tab in the browser]
There you find a second link in the footer right next to the Privacy Settings: the Privacy Policy.
Here you find a second link in the footer right next to the Privacy Settings:
the Privacy Policy.
You need to edit and publish that page before going live with your website
{Click on Privacy Policy}
[Go to Admin / Config / User Interface / Klaro!]
This is a page that's currently unpublished. You need to fill in your privacy policy as it applies to your countrie's
legislation. Drupal CMS will provide some guidance on how you can get to the right content or where to find legal advise
to help you with this.
{Go to Admin / Config / User Interface / Klaro!}
If you need the consent management to be more forthcoming, e.g. to get your visitors to accept tracking or maybe
advertising features, then you can enable an always visible widget. Or you can disable the grouping of services, if
you feel that's confusing your users.
{Save the settings and show the widget}
The settings for consent management are detailed and well organised, that
you can adjust if you need to.
----------------------
The optional protection of sensitive user data will be implemented in the next vouple of weeks. So, stay tuned.
The optional protection of sensitive user data will be implemented in the
next couple of weeks. So, stay tuned.
----------------------
{Go back to the anonymous browser tab and open the team page}
All of this has been researched, discussed and implemented by a team of Drupal experts - together with lots of people
around the world who helped us with interviews in understanding the requirements and preferences in different countries.
[Go back to the anonymous browser tab and open the team page]
What's interesting to see, that privacy and data protection are no longer the unloved topics that nobody wants, and
everybody at least finds annoying. Instead, it's more and more understood that the Open Web is based on respect of
user's choice and freedom. Drupal CMS is brought to you with that in mind and satisfies both parties: you can offer
a beautiful website with a great user experience, without having to annoy or disrespects your visitor's rights.
All of this has been researched, discussed and implemented by a team of
Drupal experts - together with lots of people around the world who helped
us with interviews in understanding the requirements and preferences in
