Right to be informed

Abstract

Guide to implementing a privacy notice and a terms and conditions checkbox on your Sitecore website.

Warning

This Privacy Guide provides technical guidance on how your developers can choose to configure your Sitecore product implementation to support you on your data privacy compliance journey. This guide does not provide exhaustive guidance, and should not be construed or used as legal advice about the content, interpretation, or application of any law or regulation. You, the customer, will always be in the best position to assess your own risks, and must seek your own legal counsel to understand the applicability of any law or regulation to your business, including how you process personal data. Your resulting implementation is based entirely on your own configuration choices.

The right to be informed concerns the data subject’s right to fair processing of information. In the context of a website, this typically happens through a privacy notice or cookie consent banner. This topic describes how the Sitecore product facilitates adding a privacy notice or cookie consent banner to your website.

For more information about storing and acting on customer consent, please see:

Within your Sitecore implementation, you can:

  • Use the layout engine implement a custom rendering to display a privacy notice or cookie consent banner on a Sitecore website. You control the rendering logic.

  • Customize and extend the basic privacy notice available with Sitecore Experience Accelerator (SXA).

The organization is responsible for the following:

  • Implementing a privacy notice or cookie consent banner that complies with privacy laws, including active opt-in. This includes websites that use the Federated Experience Manager.

  • Storing customer consent choices.

  • Acting on a customer’s choice to opt out of certain processing activities.

  • Ensuring that all processing - including personalization and tracking - is disabled until consent is given.

If you are creating a form that captures personal data, you can use a checkbox element to request consent for collection and processing of that data.