If your website uses analytics or advertising cookies, you must get the visitor’s permission before they run. The cookie guide published by Turkey’s Personal Data Protection Authority (KVKK) also explains how that permission should be obtained.
Which cookies require consent?
Explicit consent is not required for cookies that are strictly necessary for the site to work (such as session, security and shopping cart cookies). Analytics, personalization and advertising cookies, however, should only run after the visitor has given permission.
What to watch for in your consent banner
- Equal choices: Rejecting should be as easy as accepting. The “Reject” button should not be hidden or made less prominent.
- No pre-ticked boxes: Non-essential categories should be switched off by default.
- No cookie walls: Making access to the site conditional on consent does not count as freely given consent.
- Clear information: Explain in plain terms which cookies are used and for what purpose.
Record consent and make withdrawal easy
Keep a record of the consents you receive; when needed, you should be able to show who gave consent, when, and with which choices. Visitors should also be able to change their mind easily at any time.
This article is for general information only and is not legal advice.