Cookies, which are one of the most basic building blocks of websites today, can also pose a great threat to users. Cookies created by the websites you visit and basically aiming to improve the experience, record your browsing information on the sites.
With the new regulations, while it was obligatory for websites to inform users about cookies, there was also a lack of up-to-date information on this subject in our country. Today, the Personal Data Protection Authority (KVKK) has updated its guide on ‘cookies’ and provided a guide for both website owners and users.
What does the guide cover?
The guide, which was prepared as practical advice for all data controllers operating the KVKK’s website, covers the processing of personal data through cookies. The guide begins by describing what cookies are and their types:
What is a cookie?
A cookie is a type of text file placed on the user device by the website operators and is transferred as part of the HTTP(S)3 (Hyper Text Transfer Protocol) request.
According to another definition, cookies are low-size rich text format text formats that allow some information about users to be stored on users’ terminal devices when a web page is visited.
Types of cookies:
Cookies by duration:
Session Cookies
Session cookie, also called temporary cookie, is used to ensure the continuity of the session. Session cookies are also deleted when the user closes the internet browser.
Persistent Cookies
A permanent cookie that is not deleted when the internet browser is closed is automatically deleted on a certain date or after a certain period of time. By means of this cookie, the processed data of the user is transmitted to the server every time the user visits a website. For this reason, persistent cookies are also sometimes called tracking cookies. For example, advertisers can save and use information about a user’s web browsing habits for a long period of time. They can also be used to ensure that users do not re-enter their login information each time they log into their accounts on websites.
Cookies according to their intended use:
Strictly Necessary Cookies (Mandatory Cookies)
These cookies are necessary for the operation of the website. These cookies are used as mandatory to fulfill an information society service requested by the user (such as logging in, filling out forms, remembering privacy preferences). Cookies used for purposes covered by Criteria A and B discussed below can be presented as examples of strictly necessary cookies. In general, they can be considered as types of cookies that go to processing conditions other than express consent. If mandatory cookies are blocked, some parts of the website will not work and these cookies should not be used for marketing purposes.
Functional Cookies:
These are cookies used for personalization and remembering preferences used in websites or applications (including applications on desktop, mobile or IOT devices). These cookies are used to provide functionality other than mandatory cookies. In cases where it is not obvious that the person concerned has explicitly requested an information society service, explicit consent will have to be relied upon.
Performance- Analytical Cookies:
These are cookies that allow statistical measurement to analyze the behavior of users on websites. These 11 cookies are frequently used to improve the site, including measuring the impact of advertisements on relevant people. They are used by website owners to estimate the number of unique visitors, identify the most important search engine keywords that lead to a website, or monitor website browsing.
Advertising/Marketing Cookies:
With cookies for advertising and marketing purposes, it is aimed to monitor the online movements of the users on the internet, to determine their personal interests and to display advertisements to the users on the internet for these interests.
Although there are many types of advertisements on the Internet, the main reason why the most preferred type of advertisement is online behavioral advertising is that it can be advertised according to people’s tendencies and preferences, and time and financial resources can be used more efficiently for the advertiser.
Online behavioral advertising practices; It consists of monitoring the activities of people on the internet, analyzing and profiling these activities, matching the profiled person with the appropriate advertisements and showing the said advertisements to the relevant person.
Cookies by Party
Whether the cookie is first party or third party varies according to the cookie placed by the website or domain.
First-party cookies are placed directly by the website visited by the user, ie the URL displayed in the address bar of the browser (example.com.tr).
Third-party cookies are placed by a different third party than the website (or domain) the user is visiting.
You can reach the full guide of KVKK about cookies by clicking this link.