1) consider analytics part of the "contract legal" basis, arguing that analytics to improve the usability of the website is a fundamental part of running a website.
Sure, you can argue that, but it has no merit.
The only reason that you can write that sentence with a straight face is due to the current affairs of the web. You know the thing that GDPR tries to rectify.
And analytics do not need personally identifiable information.
Sure, you can argue that, but it has no merit.
The only reason that you can write that sentence with a straight face is due to the current affairs of the web. You know the thing that GDPR tries to rectify.
And analytics do not need personally identifiable information.
Try the three-part test suggested here: https://ico.org.uk/for-organisations/guide-to-data-protectio...
Purpose test: You can argue it has legitimate interest. And with a big enough loop-hole it might even pass despite it having no merit.
Necessity test: Absolutely not.
Balancing test: No chance.