Viewing 1 post (of 1 total)
  • Author
    Posts
  • #1486463

    Problem Description:
    When users reject cookies and only accept essential cookies, Enfold video elements redirect users to the external video platform (Vimeo/YouTube) in a new window. This violates GDPR as it establishes connection to third-party servers without user consent.
    Current Behavior:
    User rejects all cookies (accepts only essential)
    User clicks on video element
    Video opens in new window: https://vimeo.com/%5Bvideo-id%5D
    External tracking cookies may be set without consent
    IP address is transmitted to third-party (USA) without permission

    GDPR Compliance Problem:
    Personal data (IP address) transmitted to unsafe third countries (USA)
    Potential tracking cookies set without explicit consent
    Violates Art. 6 GDPR and ePrivacy Directive
    Makes website non-compliant with European data protection laws

    Expected GDPR-Compliant Behavior:
    With cookies rejected: Video should show placeholder/blocked message only
    No connection to external video platform should be established
    No data transmission to third parties without consent
    Only after cookie acceptance should external videos load

    Configuration:
    Privacy Setting: “User must accept and must opt in, only essential cookies selected”
    Video Element: Enfold Video Element (ALB)
    Privacy Controls: [av_privacy_video_embeds] implemented in cookie modal

    How can I fix this?

Viewing 1 post (of 1 total)
  • You must be logged in to reply to this topic.