Yandex.Metrica and the GDPR: Additional data processing conditions

Disclaimer: This blog post does not provide legal advice. If you require legal advice, please contact a lawyer directly.

We have introduced a new section in the tag settings called "Additional data processing conditions". This section is intended for those Yandex.Metrica users who need to comply with the General Data Protection Regulation (GDPR). In this post, we will discuss what the GDPR is and who should take note of the new section in the tag settings.

What is the GDPR and how do I know if my site is affected by it?

The General Data Protection Regulation is new European legislation that governs the collection, processing and storing of data of users from the European Economic Area (EEA). It is applicable to all companies registered in the EEA, as well to all other companies that handle the data of EEA users. The GDPR goes into effect on May 25, 2018. To know for sure if your company ought to comply with the GDPR, it is best to consult a lawyer.

Yandex.Metrica has always been committed to safeguarding site users' privacy, and you can learn more about this in our GDPR compliance statement.

What are additional data processing conditions?

Additional data processing conditions are the main options that will allow Yandex.Metrica to handle your tag's data in compliance with the GDPR.

The first option is acceptance of the Data Processing Agreement. It describes the procedures of handling data in Yandex.Metrica that are GDPR-compliant. It is only necessary to accept the Agreement if your company has to comply with the new law.

The second option is disabling the storing of full IP addresses of site users in Yandex.Metrica. By default, Yandex.Metrica stores the full IP address of a site user, but site owners can only see part of it in Yandex.Metrica reports. This is a necessary measure to ensure the data privacy of site users. If storing full IP addresses is disabled, Yandex.Metrica will replace the last octet of an IP address with zeroes. Learn more.

This second option is necessary not only for businesses that have to be GDPR-compliant, but also for other companies if such an option is required by their online privacy policy or applicable law. Please make sure that disabling the storing of full IP addresses is necessary for your tag, as using this option may make it difficult to determine the users' region.

What other steps can I follow to ensure my use of Yandex.Metrica is GDPR-compliant?

If you need to comply, we recommend activating some additional options – the complete list of which can be read in our Help section.

If you have questions concerning Yandex.Metrica usage and the GDPR, please feel free to ask. We will be happy to help!