Working with Legal Bases
The consentmanager.net CMP allows you to set the legal basis per vendor and purpose. Depending on the setting, the behavior of the CMP will be different.
Behaviours & legal bases
When assigning a legal basis to a vendor or purpose, you do not only change the text that is displayed in the consent layer but also the behaviour how the system will activate/deactivate the purpose or vendor. The following scenarios exist:
-
Opt-In
Displays a toggle that is not preselected (empty checkbox). The visitor can enable this toggle via click on accept all or via the custom settings page. -
Opt-out
Display a toggle that is preselected (checked checkbox). The visitor can disable the toggle via click on reject all or via the custom settings page. A click on "Save" will not automatically disable the toggle. -
Always on
Display a toggle that is preselected (checked checkbox) and cannot be disabled. The visitor cannot disable the toggle. -
Explicit Opt-in
Displays a button that is disabled by default. The system will only activate vendors if the vendor is specifically accepted. A click on "Accept all" button, will not accept this vendor (same for a group button or enabling a purpose). A visitor needs to explicitly go into the custom settings page and click on the accept button next to the vendor. -
Explicit Opt-out
Display a toggle that is preselected (checked checkbox). The visitor can disable the toggle only via the custom settings page. A click on "Reject all" or "Save" will not automatically disable the toggle. -
Policy Opt-out
The vendor or purpose is hidden by default but treated as preselected (see Explcit Opt-out). The vendor is only visible when the visitor accesses the consent layer via the privacy policy integration.
GDPR
| Legal basis | Description |
| [Default legal basis] | If you do not set any legal basis for a vendor or purpose, the default legal basis will be used. In this case, the system will use consent as the legal basis for this purpose or vendor unless stated differend by other settings (see below). |
|
Consent (GDPR 6.1.a) |
The system will only activate vendors if the visitor accepted it (e.g. by clicking on "Accept" button or enabling the vendor in the preference center). |
| Contract (GDPR 6.1.b) | The system will always activate a vendor with this legal basis. The user is not presented with a choice. |
| Legal obligations (GDPR 6.1.c) | The system will always activate a vendor with this legal basis. The user is not presented with a choice. |
| Vital interests(GDPR 6.1.d) | The system will always activate a vendor with this legal basis. The user is not presented with a choice. |
| Public interests (GDPR 6.1.e) | The system will always activate a vendor with this legal basis. The user is not presented with a choice. |
| Legitimate interests (GDPR 6.1.f) | The system will activate a vendor with this legal basis as soon as legitimate interests have been established. This is the case, as soon as the consent layer is shown to the visitor. Important: Clicking on the "Save" button will not disable the vendor. In order to opt-out from this vendor, the visitor must either click on "Reject all" or go into the preference center and disable the vendor manually. |
| Legitimate interests (no opt-out possible) (GDPR 6.1.f) | The system will always activate a vendor with this legal basis. The user is not presented with a choice. |
| Explicit Consent (GDPR 6.1.a) | The system will only activate vendors if the vendor is specifically accepted. A click on "Accept all" button, will not accept this vendor (same for a group button or enabling a purpose). A visitor needs to explicitly go into the custom settings page and click on the accept button next to the vendor. (Note: This legal basis can only be used with vendors and not with purposes)
|
Please note: When using the IAB TCF v1 or v2, only default, consent and legitimate interests are supported in the signals sent to vendors.
Combining legal basis
If a purpose and a vendor are set to a legal basis other than the default legal basis, the setting of the vendor takes precedence:
| Vendors legal basis not set (default) | Vendors legal basis set | |
| Purposes legal basis not set (default) | Consent is used as legal basis | Vendors legal basis is used |
| Purposes legal basis set | Purposes legal basis is used | Vendors legal basis is used |
Displaying Consent and LI toggles
The default setting is, that the CMP will always display only one toggle for each vendor and each purpose. Enabling or disabling a toggle will always enable/disable consent AND legitimate interest for this vendor or purpose. If you wish to offer two separate choices, you can do so under Menu > CMPs > Edit > Legal Settings > Legal Bases:
Once enabled, the CMP will show two toggles for each vendor/purpose when you click on the questionmark icon.
Default settings (one toggle for each purpose):
Design settings with two separate purposes:
