Cookies-what are they, what are they used for, and how do they relate to RODO?

09.01.2023
Data security

Each of us, when opening websites, often displays a very annoying message that wants us to accept “cookies.” So what are these “cookies”? Cookies are pieces of information that are sent by a website when we visit it. They are stored on the device we are currently using. Any website that requires login or authorization uses cookies, why? They simply make it function more efficiently. This begs the question: are cookies personal data, how to interpret them in the context of the RODO?

Cookies stick to the form of a series of letters and numbers. They contain key information that is needed for the proper functioning of websites. Sites that require authentication or logging in, such as an email account or an e-commerce site are most likely to use the help of cookies. Default parameters of cookies, lead to a more precise reading by the server of the information found on the website. Where else do we encounter cookies? For example, on the sites of government offices, public institutions and many others.

Cookie IDs

Cookies are designed to make various websites more pleasant to use, and to match them to our preferences, and expectations. Thanks to them, we encounter websites, surveys and online counters that are more personalized, and often annoying to us, ads begin to be attractive to us, due to their fit with our tastes. Cookies, however, are not personal data, only identifiers, and their purpose is to identify your computer and browser. There is no sensitive data in cookies, as they are encrypted for those who are not authorized. There is nothing to fear, as cookies do not cause any harm and do not lead to harmful changes on your computer, tablet or smartphone.

Cookies and telecommunications law

The amendment to the Telecommunications Law came into force in 2013. According to it, any person who owns a website is obliged to inform other users about the existence of cookies on his site. They may include tracking code, but it is not a necessity. Each person has the right to have information, regarding the purpose of serving cookies at a particular company.

Cookies and RODO

Not everyone has read the RODO regulation, and they get their knowledge of the matters contained therein from other people. 30 The RODO regulation tells how it relates to cookies, quoting “Individuals may be assigned online identifiers – such as IP addresses, cookie identifiers – generated by their devices, applications, tools and protocols, or other identifiers generated, for example, by RFID tags. This can result in leaving traces that, especially when combined with unique identifiers and other information obtained by servers, can be used to create profiles and to identify these individuals.” The conclusion from this is that any information that is stored under the RODO can become considered personal data. Whether this happens depends not on the method, but on the purpose, and the collection of information itself is something technically neutral.