Consent management policy

3

min

quiz

What is legal consent ?

Processing personal data is generally prohibited, unless it is expressly allowed by law, or the data subject has consented to the processing: this is legal consent.

Kameleoon provides flexible options to define the level of consent management required by your website, in compliance with the latest privacy legislation updates (GDPRCCPA).

How to choose your consent management policy

For A/B testing

  • You should have either the option “CONSENT NOT REQUIRED/INFORMATIONAL BANNER” or “CONSENT REQUIRED” enabled.
  • If you run A/B tests using custom data that collects behavior data, you should use the “CONSENT REQUIRED” option.

To know more about it (for France): GDPR states that A/B testing does not require explicit consent except if you need behavioral data. Yet, an information banner is necessary to warn visitors. You must implement it directly on your website (and not via Kameleoon).

For Personalization

You should always have the option ”CONSENT REQUIRED” enabled.

However, those choices depend on your use of Kameleoon. Your Customer Success Manager is there to help you choose the policy that best suits your website.

How to define your consent management policy

The consent management policy settings are accessible in the “Settings” > “My websites” > “Configuration” section of the back office.

You can set up the fields relating to consent management in each of the two blocks (“A/B Test” and “Personalization”). It can be defined differently for A/B and Personalization.

3 dropdowns allow to define:

  • The consent management policy;
  • The behavior of Kameleoon when consent is unknown;
  • The behavior of Kameleoon on optout.

Consent policy

Whether consent is required or not

You can choose between 2 options.

Consent not required/Informational banner

Select this option if:

  • you are not subject to the GDPR;
  • or if you only run simple A/B tests that don’t use any personalized data, geolocation data or IP addresses.

If you select this option, all experiments will run and data will be collected without consent.

We recommend to display an information banner to let the visitor know you run experiments on your page. You must implement it directly on your website (and not via Kameleoon).

Consent required

Select this option if you run complex A/B tests that use personalized data, geolocation data or IP addresses.

If you select this option, you are required to display a consent banner through which the visitor can give their consent before Kameleoon is launched. Please implement it directly on your website (and not via Kameleoon). Next you must make a call to the KameleoonAPI to send through the visitor’s consent.

Behavior when consent is unknown

Kameleoon’s behavior when consent has not yet been granted

You can choose between 3 options.

Completely block Kameleoon

Kameleoon will not run at all, no data will be collected or sent to an analytics platform until consent has been given.

Partially block Kameleoon

Kameleoon will only run the experiments you tagged “Technical”, no data will be collected or sent to an analytics platform until consent has been given.

How to tag an experiment as “Technical”?

If the second option is selected, the tag “Technical” must be added to each experiment you would like to run. There are several possibilities for this:

  • When creating an A/B test or a personalization, associate the “Technical” tag with it.

  • In the case of an already created A/B test, on the A/B dashboard, on its card click on the pencil icon to edit. In the “Tags” field write “Technical”.

If you use the graphical editor, click on the burger menu at the top left, then “Test currently being edited” then “Tags and descriptions”. Enter “Technical”.

        If you use the code editor, go to the “Test” tab and then “Tags and descriptions”. Enter “Technical”.

  • In the case of an already created personalization, on the Personalization dashboard, on its card click on the pencil icon to edit. Once on the personalization configuration form click on “Create a tag” and enter “Technical”.

Do not block Kameleoon (don’t write / send anything)

Experiments will run but no data will be collected without consent.

Behavior on opt-out

Kameleoon’s behavior when the visitor refuses consent

You can choose between 2 options.

Block Kameleoon partially

The visitor sees only one variation of the experiments tagged as “Technical” (to comply with the law, these experiments must only be used for the proper functioning of your website) ; no data is collected.

Block Kameleoon completely

In this case, no experiment runs and no data is collected by Kameleoon.