”Loopholes” in Google Analytics for third-party cookies
Are you aware if your site uses third-party cookies, and if that's the case which? At kruso we experience that a lot of sites use third-party cookies like "DoubleClick", without the editors being aware of it. Certain options in Google Analytics grants permission to these types of third-party cookies on the website, which can be a huge problem GDPR-wise.
Cookies like "DoubleClick" can exist on website that (previously) have activated remarketing-tracking in Google Analytics. DoubleClick is Google's advertising network, and by having a "DoubleClick" cookie you share data about your visitor's behaviour and demography with a third party. The users therefore must give permission to allow this cookie according to GDPR. If you are not aware that a third party have access to your user's data, you won't ask for abovementioned permission - and thus arises the problem.
Luckily it's simple to deactivate access for third parties like "DoubleClick" if you dont want to use them and ask your users for permission. We therefore recommend that all editors complete two steps in order to get a clear picture over the active cookies and close the loopholes.
Check your site and get a clear picture of your cookies
An easy way to check what cookies your site uses is by using a tool like ”Attacat Cookie Audit Tool”, which is a Google Chrome extension. Enable it, surf around on the site, disable it and check the report. If you spot cookies of which you have doubt, you are very welcome to contact us. We would love to help you scan your site and find a solution, so you don't break the rules of data protection and/or cookie consent.
Close the loopholes for third-party cookies like ”DoubleClick”
If you don't actively use remarketing and therefore dont ask your users permission to place remarketing cookies like "DoubleClick" at them, you should deactivate the possibility to use them in your Google Analytics setup. Even though you have never used remarketing you should still check if these options are correctly set up.
All it takes is that you open Google Analytics, click on "Administrator" -> "Tracking Info" -> "Data Collection" and deactivate both parimeters "Remarketing" and "Advertising Reporting Features" (if they are not already deactivated) and finally save the new options.