diff --git a/guides/development/monetization/Cookies & Privacy b/guides/development/monetization/Cookies & Privacy new file mode 100644 index 000000000..cb706ecd2 --- /dev/null +++ b/guides/development/monetization/Cookies & Privacy @@ -0,0 +1,23 @@ +# Cookies & Privacy + +Cookie compliance in storefront and checkout + +- Cookies may only be assigned to one of the following three categories and registered in the Cookie Consent Manager: + + - Technically required + - Only cookies that are explicitly necessary for the shop to function may be stored here. + + - Marketing + - Only cookies used for analytics or data collection + + - Comfort features + - Only cookies that don’t fit into either of the other two categories or are required for a specific feature + + +**Example:** +Setting a cookie for a pop-up is not technically required. It can be classified as a comfort feature or appended to the session cookie. + +**Privacy / personal data information available** +If personal data of the customers (store operator and/or his customers) are processed with the extension according to Art. 28 DSGVO, the following information of the data processing company must be stored in the field “Subprocessor”. + +If other companies are involved in the data processing of personal data, the same information must be stored accordingly for them in the field “Further subprocessors”.