1. Help Center
  2. Technical
  3. ➕ Data protection and privacy

All about Foleon and GDPR

Since its very founding, Foleon has focussed on protecting its customers’ data and keeping up with the latest standards and industry best practices.

In this article, we discuss the General Data Protection Regulation (GDPR) laws and how they relate to Foleon.

💡 We also wrote a blog post on this subject, check it out here.

 

 

What is GDPR?

On May 25, 2018, the General Data Protection Regulation (GDPR) came into effect. The GDPR is a set of laws aimed at enhancing the protection of EU citizens’ personal data and increasing the obligations of organizations to deal with that data in transparent and secure ways.

More information about the GDPR can be found here, on the official EU website. Before diving into what this means for the Foleon product, let’s start with some definitions.

  • GDPR - in full the General Data Protection Regulation. This is the EU rule that aims to protect the Data Privacy of EU citizens.

  • Consent - Permission to activate a certain feature.
    - Opt-in: A user explicitly has to take action to activate a certain feature.
    - Opt-out: A user has the ability to block permission and disable a feature.

  • CMP - a Consent Management Platform is a software platform that lets you customize your consent message and options, e.g. double opt-in and default values.

  • Functional Cookies - These are needed to have the web page properly function. No consent is required, but it is mandatory to ‘Inform’.

  • Analytical Cookies - These are focused on the performance of the web page. The data that is gathered has to be anonymized. Consent is required and the ability to opt-out is mandatory.

  • Marketing Cookies - These cookies track the activity of an individually identifiable user/visitor (eg MAP Tracking code). Consent through Opt-in is required to activate this.

  • 1st Party Cookies: Cookies are available to the domain that created them. (eg a Foleon cookie on www.foleon.com)

  • 3rd Party Cookies: A third-party cookie is accessible by the website that loads the third-party server’s code. (eg a Google Analytics cookie on www.foleon.com)

The Foleon product

Every Foleon Doc has cookies, and according to the GDPR regulation, you need to inform your readers about these cookies. Additionally, when using Marketing Cookies customers are obligated to have an Opt-in consent.

To be clear, No marketing cookies should be executed until consent is given, which is how the Foleon-built consent manager is exactly designed. Since other types of cookies only require an ‘Inform’ and option to Opt-out these are enabled by default.

One way to inform and ask consent from your readers would be with our built-in cookie consent pop-up. This built-in feature is fully GDPR compliant, and users are able to configure the following settings:

  • Add descriptive text

  • Link to a privacy policy

  • Allow your audience to change their cookie preferences

  • Allow your audience to update consent at any time

Cookies in Foleon — an overview

Below you can find a list of all cookies that can be placed in Foleon Docs.

There are different types of cookies, as you can see in the category column of the table below. Functional cookies are necessary to ensure your content works as expected — meaning they can't be disabled. When it comes to analytical or targeting cookies, the cookies actually being placed depends on your cookie consent setup, and which cookies your visitor decides to decline.

To learn how to allow your audience to change their cookie preferences and what happens when they decline cookies, read our article All about cookie consent. 

Keep in mind that video platforms such as YouTube or Vimeo will also drop cookies.

💡 When you have allowed your audience to change their cookie preferences, and they have not accepted the targeting and analytical cookies, the cookies from YouTube and Vimeo will not drop, and the videos will not show.

Name Platform Description Expires Category Type

_gat_im

Google Analytics

Used to throttle request rate.

1 minute

Analytical

Third-party

_ga

Google Analytics

Used to distinguish users.

2 years

Analytical

Third-party

_gat

Google Analytics

Used to throttle request rate.

1 minute

Analytical

Third-party

_gid

Google Analytics

Used to distinguish users.

24 hours

Analytical

Third-party

ia-client

Foleon Analytics

Used to distinguish users.

1 year

Analytical

First party

ia_session

Foleon Analytics

Used to log session data

30 minutes

Analytical

First party

cc_status

Foleon Doc

Used to store a users cookie preference (accepted)

1 year

Functional

First party

cc_date

Foleon Doc

Used to calculate when a user needs to renew their cookie preferences (1 year)

1 year

Functional

First party

cc_settings

Foleon Doc

Used to store specific cookie preferences (about preferences,

statistics, marketing)

1 year

Functional

First party

whitepaper.userHasAccess

Foleon Doc

Used to identify users who already subscribed

None

Functional

First party

 

referrerParamsFromUrl

 

Foleon Doc

Used to parse attribution information to hidden form fields

30 minutes

Analytical

First party

ugid

Unsplash

Used for enabling image and video content when using Unsplash.

1 year

Functional

Third party

 

Consent Management Platforms

The Foleon consent pop-up complies with all GDPR requirements. However, since these options are not the main focus of our product, there are limitations to how far you can customize this feature.

If you have the need to customize your cookie consent options, we recommend purchasing a dedicated CMP that you implement into Foleon. Some customization examples would be:

  • Double Opt-in requirements

  • Customized consent text

  • Branding requirements for the consent pop-up

Most cookie banner platforms integrate with Google Tag Manager (GTM) and they often provide detailed instructions on how to implement it. Read all about it in our article Consent Manager Platforms and Foleon. You can also check out this article from CookieBot to check out how they help you with the integration.

Additionally, using the GTM script field in the product allows Foleon to be fully compatible and have the platforms connect seamlessly. The advantage of using a script manager such as GTM is that you can easily control which script to fire and when to fire it.