This first layer of information must appear on all forms with which you collect personal data from users. This is:
Contact forms
Subscription forms
Comment box on blog posts
Reservation forms, registrations…
Second layer: Detailed legal documentation
What should be on the second layer?
When we talk about "second layer" information , we basically mobile number nepal mean that it should be presented in a separate URL and in a detailed manner .
This second layer must therefore contain complete information regarding the Privacy Policy, the Cookies Policy and the Legal Notice (provided that the website has commercial activity).
1. Privacy Policy
This section should detail how the owner uses the information collected, the purpose, the period of conservation of said data, the transfer to third parties (if any), etc.
2. Notice and Cookies Policy
In the section corresponding to cookies you must include all the detailed information regarding the use of your own or third-party cookies and their purpose.
However, this information must be detailed from the moment the user accesses the website through a warning of the existence of these cookies (image) and a button for the user to give their consent with a link to this detailed information.
3. Legal Notice
This section should contain the minimum information necessary for the user to know who is behind the website. That is, who is the owner of the website and a contact telephone number and/or email address.
The Legal Notice will only be necessary if your website carries out commercial activity. That is, on those websites that facilitate, advertise or offer a certain product or service. Only blogs or websites that do not carry out any type of commercial activity will be excluded from this obligation.
Where should I include this second layer?
The second layer must be hosted on your website, in a separate URL, or in different tabs or in a single one with each of the sections well explained and detailed.
Obtain explicit consent
In addition to the above modifications and adaptations, in order to comply with the new GDPR we will have to obtain explicit consent for the use of the data on our part as well as acceptance of the new privacy policies.
To do this, apart from including a "tag" with information regarding the use of data, we will have to include a mandatory checkbox through which users can give their explicit consent to the processing of their data for the purposes we have outlined.