You land on a supplier's website, you like their service… and the first thing you see is a confusing cookie banner with a huge "Accept all" button and no real way to refuse. You close the tab. That small box can cost you customers —and, if done wrong, fines too.
At aatsoft, a web development agency in Manresa (Barcelona), we audit corporate websites where the cookie banner only half-complies: it blocks analytics without notice, does not save preferences, or contradicts the privacy policy. In this guide we explain what GDPR requires, which cookie types your site uses, and how to set up clear consent without killing conversion.
What a cookie banner is and why it matters
The banner (or consent layer) tells visitors your site uses cookies and lets them accept, reject, or configure what data is collected. It is not decoration: it is the legal mechanism to activate analytics, advertising, or personalisation scripts.
- Trust: a transparent website signals professionalism.
- Legal compliance: GDPR requires informed consent for non-essential cookies in the EU.
- Useful data: without analytics consent, you lose metrics in Google Analytics or similar tools.
- User experience: an intrusive or misleading banner increases abandonment.
Cookie types most business websites use
- Strictly necessary: session, cart, security. No consent required, but must be documented.
- Analytics: Google Analytics, Matomo, Hotjar. Measure traffic and behaviour; require consent in the EU.
- Advertising: Meta Pixel, Google Ads, remarketing. Most restrictive; must not load without explicit consent.
- Preference: language, theme. Case-dependent; group them clearly.
Before choosing a plugin, do a real inventory: many sites activate third-party cookies unknowingly through embedded videos, chatbots, or maps.
What GDPR requires
European data protection authorities set clear requirements:
- Prior information: which cookies you use, why, and who is the data controller.
- Free, specific, informed consent: pre-ticked boxes or hidden reject options are not valid.
- Granularity: users must be able to accept analytics and reject marketing, for example.
- Proof of consent: keep records of what was accepted and when.
- Easy withdrawal: users must be able to change their mind without hunting through menus.
"Accept all" can exist, but "Reject all" or equivalent must be at the same visual level. Hiding reject is one of the practices that triggers the most fines.
Signs your banner is non-compliant or hurting conversions
- Google Analytics loads before the user accepts.
- No visible link to the cookie policy.
- The banner reappears on every page despite a previous choice.
- Only an accept button, with no settings or reject option.
- The site loads slower due to incorrectly blocked scripts.
- Contradictions between the banner and your privacy policy.
How to configure a banner that complies and converts
- Audit real cookies: use browser reports or specialised scanners.
- Classify by purpose: technical, analytics, marketing, preferences.
- Choose a CMP or custom solution: Cookiebot, Complianz, Osano, or bespoke implementation with pre-consent blocking.
- Block scripts until consent: showing the banner is not enough; loading must be prevented.
- Write a clear cookie policy: linked from the banner and footer.
- Test on mobile: most visits come from phones.
- Review after every change: a new chat plugin or YouTube embed can add cookies silently.
Common mistakes on business websites
- Copying generic legal text without adapting it to actual cookies.
- Installing a plugin and forgetting it: updates change behaviour.
- Confusing legal notice with cookie consent.
- Using Google Analytics without reviewing IP anonymisation or international transfers.
- Prioritising compliance only and ignoring UX: a full-screen banner scares visitors away.
Cookie banners and SEO
The banner does not directly penalise Google rankings, but poor design affects metrics that matter: bounce rate, time on page, and trust. Misconfigured analytics cookies also distort your data and lead to wrong decisions about landing pages or campaigns.
Conclusion
A well-configured cookie banner protects your business, respects visitors, and lets you measure what works. It is not a one-afternoon task: review it when you add tools, change analytics providers, or launch conversion pixel campaigns. At aatsoft we help businesses align legal compliance, web performance, and user experience without giving up useful data.
