Sep 30, 2026, 1:53 PM@luap42 But what about consent banners?
- Sep 30, 2026, 1:53 PM
Replies
Sep 30, 2026, 1:54 PM@jak2k hm?
- Sep 30, 2026, 1:55 PM
@jak2k do you mean "what about cookies needed to run the consent banner?"?
- Sep 30, 2026, 1:57 PM
@luap42 Let's say my site doesn't use any cookies but logs (including IPs) are sold to Palantir. The flow chart says I wouldn't need a cookie banner.
- Sep 30, 2026, 1:59 PM
@jak2k that is correct, you wouldn't need the user's consent pursuant to Art. 5(3) of the Directive 2002/58/EC.
You would, however, need consent pursuant to Art. 6(1)(1)(a) of the Regulation 2016/679, but that's not a cookie banner (but the spirit of it still applies: "wuuh why are you doing that please f- off")
- Sep 30, 2026, 2:01 PM
@luap42 So I'd display a consent banner?
(I'm not sending the logs to Palantir. They are stored on a cute little SSD at home and used to recognize bots and ban them.)
- Sep 30, 2026, 2:03 PM
it depends, attack recognition might be justifiable under legitimate interests per Art. 6(1)(1)(f) GDPR, in which case you wouldn't need to ask for consent (you'd still need to make the processing and its purposes transparent per Art. 13 GDPR though)