GDPR and consent
Trackers before consent, missing legal pages, personal data sent to third parties.
Check method
Trackers before consent, missing legal pages, personal data sent to third parties.
Possible evidence type
Live observation when the check is compatible and authorized. This description does not mean your platform has been tested.
Access and limitations
Website address. Actual results and checks not run appear in your report. A check with no finding does not guarantee the absence of risk.
Concrete scenario
Tracking starts before a user makes a valid choice, or disclosures omit actual processing.
What to inspect
Compare visible consent behavior with network activity and the real data inventory; avoid treating a banner as legal certification.
Remediation approach
Align collection, disclosures and user choices and seek qualified advice for the applicable legal basis.
Connect visible behavior to a data-processing purpose
Privacy review starts with what personal data is collected, why it is needed, where it goes and how long it is retained. A privacy page or cookie banner does not by itself demonstrate a lawful basis, valid consent, vendor agreements or working user rights. Requirements depend on processing context and applicable law.
- Inventory forms, analytics, cookies, logs, AI inputs and third-party recipients.
- Compare actual collection and retention with the information given to users.
- Identify consent or another appropriate legal basis with qualified advice where needed.
Verify real user rights and minimize collection
Remove unnecessary data collection and make disclosures consistent with actual processing. A link labelled “delete account” is not proof that all personal data is erased, and a response deadline cannot be inferred from the interface. Operational and legal review remain necessary beyond the automated checker.
- Review consent choices before non-essential tracking starts.
- Test access, correction and deletion workflows with authorized test data.
- Document exceptions, recipients and retention; consult the official regulation for obligations.
Sources and further reading
These publications describe related practices and standards. They do not certify your platform or imply that Hackaiz executes every documented method.