Europa Analytics and its cookies
Europa Analytics is the corporate service which monitors and evaluates the effectiveness and efficiency of the EDPB and the European Commission websites, as well as the other websites the Commission data centre hosts.
It uses an open-source analytics platform, Matomo (formerly Piwik), fully controlled by the European Commission. This platform enables the protection of end-user personal data thanks to features such as IP address de-identification. On top of that, the EDPB has created a feature to manage users’ consent to the collection of users’ browsing experience for anonymised statistics.
Data protection information and measures in Europa Analytics
Europa Analytics is configured to use the second level domain europa.eu (used by the websites of European institutions) and to store first-party cookies.
Cookies (from Matomo) used by Europa Analytics enable the European Commission to track the following information about visitors. This information is used to prepare aggregated statistics reports of visitors’ activity, which do not contain any personal data:
- IP address (masked) ;
- Location: country, region, city, approximate latitude and longitude (Geolocation);
- Date and time of the request (visit to the site);
- Title of the page being viewed (Page Title);
- URL of the page being viewed (Page URL);
- URL of the page that was viewed prior to the current page (Referrer URL);
- Screen resolution of user's device ;
- Time in local visitor's time-zone;
- Files that were clicked and downloaded (Download);
- Links to an outside domain that were clicked (Outlink);
- Pages generation time (the time it takes for webpages to be generated by the webserver and then downloaded by the visitor: Page speed);
- Main language of the browser being used (Accept-Language header);
- Browser version, browser plugins (PDF, Flash, Java, …) operating system version, device identifier (User-Agent header);
- Language of the visited page;
- Site Search;
To improve the accuracy of the produced reports, information is also stored in a first-party cookie from our website and then collected by Europa Analytics:
- Random unique Visitor ID;
- Time of the first visit for the specific visitor;
- Time of the previous visit for the specific visitor;
- Number of visits for the specific visitor.
The European Commission retains full control of the data collected through first-party cookies by storing the data in servers fully owned and controlled by the European Commission itself.
Besides some session cookies, a random ID persistent cookie is generated by Matomo, which allows Europa Analytics to identify when a user returns to the site. This cookie has an expiration date of 13 months, after which it is automatically removed from the user's device.
- First party cookies are cookies set by the website you’re visiting. Only that website can read them. In addition, a website might potentially use an external service to analyse how people are using their site. Europa Analytics sets their own cookie to do this and does not use external parties.
- Persistent cookies are cookies saved on your computer which are not deleted automatically when you close your browser, unlike a session cookie, which is deleted when you close your browser. Persistent cookies are only used to re-identify you upon your next visit.
Consent to collecting your browsing experience, including personal data, for the production of anonymised statistics
By default, the browsing experience of our website visitors is NOT tracked by Europa Analytics. You may, though, choose to consent to our processing of any personal data collected during your browsing experience on our website to allow us to produce anonymised statistics.
If you enable the Do Not Track option (see below for an explanation) in your web browser, we will respect your choice and your browsing experience on our website will not be tracked for our anonymised statistics.
If you have not enabled the Do Not Track option, we will show you a cookie banner for you to make your choice and install a cookie called “edp_cookie_agree” to keep track of your choice. If you consent to the processing mentioned above, then Europa Analytics is activated and some relevant cookies loaded. You can always decide to withdraw your consent, or consent again at any time.
The “edp_cookie_agree” expires after 6 months: then, if your Do Not Track option is not enabled, you will be shown the cookie banner again to renew your choice.
In case you have disabled all cookies, you will be shown the cookie banner at each visit of our website.
If you wish to consent to (or withdraw your consent from) analytics:
Do not track preferences
Do Not Track is a function that allows visitors no to be tracked by websites. Do Not Track options are available in a number of browsers including:
Restricted access to information
All analytics data communication is encrypted via HTTPS protocol. The analytical reports generated by Europa Analytics can only be accessed through the European Commission Authentication System (ECAS) by authorised Commission staff dealing with Matomo, the relevant European institution staff or by duly authorised external sub-contractors, who may be required to analyse, develop and/or regularly maintain certain sites.
Masking of IP addresses
Note: institution, city and country of origin for statistical purposes are determined from the full IP, then stored and aggregated before a mask is applied. Europa Analytics uses an IP de-identification mechanism that automatically masks a portion of each visitor's IP (Internet Protocol), effectively making it impossible to identify a particular Europa visitor solely via their IP address.
Europa Analytics automatically deletes visitors' logs after 13 months. Aggregated data sets, containing no personal data, are stored for an indefinite period by the European Commission for analysis purposes.
If you have any questions concerning the processing of personal data, you can also contact the EDPB DPO.