Tagged: vimeo embed privacy gdpr dsgvo
Problem Description:
When users reject cookies and only accept essential cookies, Enfold video elements redirect users to the external video platform (Vimeo/YouTube) in a new window. This violates GDPR as it establishes connection to third-party servers without user consent.
Current Behavior:
User rejects all cookies (accepts only essential)
User clicks on video element
Video opens in new window: https://vimeo.com/%5Bvideo-id%5D
External tracking cookies may be set without consent
IP address is transmitted to third-party (USA) without permission
GDPR Compliance Problem:
Personal data (IP address) transmitted to unsafe third countries (USA)
Potential tracking cookies set without explicit consent
Violates Art. 6 GDPR and ePrivacy Directive
Makes website non-compliant with European data protection laws
Expected GDPR-Compliant Behavior:
With cookies rejected: Video should show placeholder/blocked message only
No connection to external video platform should be established
No data transmission to third parties without consent
Only after cookie acceptance should external videos load
Configuration:
Privacy Setting: “User must accept and must opt in, only essential cookies selected”
Video Element: Enfold Video Element (ALB)
Privacy Controls: [av_privacy_video_embeds] implemented in cookie modal
How can I fix this?