nopCommerce not in compliance with EU GDPR Cookie law? V2

5 months ago
Hi All,

Referring to this Thread

https://www.nopcommerce.com/de/boards/topic/86984/nopcommerce-not-in-compliance-with-eu-gdpr-cookie-law/page/2

a work item was created
https://github.com/nopSolutions/nopCommerce/issues/5810

I can not understand why this was closed "shortly"

with the comment

--> After some consideration we've decided not to implement this functionality out of the box and leave it for customization. <--

I can not understand this, as it is a major issue in EUs GDPR and has to be a part of every Website driven by an EU legal Entity.

With this decision to not implement it, and leave it open for customization. NopCommerce can not be used within EU.

Is there at leased any advice how to handle this with customisation ?

A customisation must be able to Disable/Enable selected cookies. and i guess, as Cookies are a core part of nopCommerce , for me a customisation could not handle this, and has to be a part of nopCommerce .

My be please let me know what was the reason for this decision , and may be you have an advice for a working and customisation wich is in harmony with EUs GDPR

And we know all that the majority does klick accept all, and does not like this popup, but never the less it is a mandatory thing for Websites to be legal in EU.

Regards & Thx
Peysche
5 months ago
I fully agree that NopCommerce should do this out of the box. However, there are a lot of third party solutions.

I did start writing a customisation for NopCommerce that made it GDPR compliant. However, it soon became clear that it was going to be a massive task. I expect that this is why the NopCommerce team have decided not to implement it themselves.

We decided to partner with CookieBot in order to deliver GDPR compliant sites. Their solution works with Google Consent Mode and can be deployed with Google Tag Manager (GTM) along with any other scripts e.g. Google Analytics, Facebook Pixel. There are other installation options, but GTM is by far the easiest.

Google Tag Manager then uses the consent from CookieBot to determine which scripts it's allowed to install (and also what those individual scripts are allowed to do).

CookieBot scans the site for cookies (monthly by default but you can also run manual scans) and then categorises them automatically, with the option for you to amend or add cookies manually. It also automatically produces a cookie declaration for your site which is automatically updated when new cookies are found (just include a script tag where you want it to appear).
5 months ago
Hi Purplepiranha,

THX 4 Feedback !

I will checkout Solutions like this, it is not satisfying, but it looks like we will get no other Solution.

Maybe we are lucky and nopCommerce Team will share their thoughts about this with us.

THX & Regards
Peysche
5 months ago
purplepiranha wrote:
I did start writing a customisation for NopCommerce that made it GDPR compliant. However, it soon became clear that it was going to be a massive task. I expect that this is why the NopCommerce team have decided not to implement it themselves.

Absolutely agree with you here.

And thanks a lot for your suggestion about CookieBot
5 months ago
Hi Andrei, Purplepiranha

I thought already it would go in this direction...

So i will look at a 3rd party solution like https://www.cookiebot.com already mentioned by Purplepiranha..

As i am in Austia, there is also a local one https://www.clickskeks.at covering also local Austrian Dataprotection topics

And do not forget the most downloadet cookie consent banner on Github...
https://github.com/osano/cookieconsent

Maybe the good already existing nopCommerce documentation on
https://www.nopcommerce.com/en/blog/how-to-prepare-your-nopcommerce-site-for-gdpr
shuld also give some hints in that direction ...

Regards & Thx
Peysche
4 weeks ago
purplepiranha wrote:

We decided to partner with CookieBot in order to deliver GDPR compliant sites. Their solution works with Google Consent Mode and can be deployed with Google Tag Manager (GTM) along with any other scripts e.g. Google Analytics, Facebook Pixel. There are other installation options, but GTM is by far the easiest.

Google Tag Manager then uses the consent from CookieBot to determine which scripts it's allowed to install (and also what those individual scripts are allowed to do).

CookieBot scans the site for cookies (monthly by default but you can also run manual scans) and then categorises them automatically, with the option for you to amend or add cookies manually. It also automatically produces a cookie declaration for your site which is automatically updated when new cookies are found (just include a script tag where you want it to appear).


Hi, could you tell me from who / which one Google Analytics 4.0 plugin you use? Somebody set this for you?

All marketplace solutions works with API, and there is a problem...
We need load Cookie Consent at first and receive Permission to storage, or denied. All plugin which i tested... works via API, and don't wait until receives cookie consent.

How you solve this? and track ecommerce events? We know how to set GA4 in GTM, but events via GTM not working :/

Somebody can help here?