Now that we have the data flow within your company, we need to highlight 2 aspects of LGPD that will help you determine the extent of your responsibility in relation to the many points listed in the company. I'm talking about the difference between Data Controller and Data Processor.

## How to determine the differences between the parties?

A simple example would be the roles between a company and its marketing agency. In this case, the company would be the data controller and the agency the data processor because their functions are distinct in the chain of services and responsibilities.

## Always put yourself in the Data Subject's position.

For example, when the Data Subject goes to an e-commerce website to purchase a product, from their perspective, who are they entrusting their personal data to in order to make that purchase?

Can they know if the agency receives the lead and then enters it into the email marketing tool? No. Therefore, the e-commerce website becomes the data controller and the agency becomes the data processor. Each has their own role under the law, but all are co-responsible, in their respective functions, for the proper handling of the data of the Data Subjects.

Therefore, in your data mapping that we mentioned a few lines back, what is your role: data controller or data processor? Or, depending on your business model, both depending on the stage?

It is important for you to highlight this because, just as your responsibilities differ based on the role you perform, the way you handle a request for data deletion or data download is different. You may have the data on hand and the capability to deliver it to the Data Subjects.

However, it may also happen that you can only refer this power to the data controller, after all, you are just a link in the chain and do not have direct access to the data, but to some encryption that only provides you with anonymized visualization.

## More Examples of Data Controller and Data Processor - LGPD
Other common examples where there are different roles but clear co-responsibility for the data and its use include:

**Company <> Third-party Accounting Firm. Real Estate Company <> Third-party Brokers. Investment Fund <> Independent Agents. E-commerce Website <>Logistics companies and delivery services. Law firms <> Customer and employee qualification data.**

In conclusion, it is clear the importance of an accurate listing of all data controllers and data processors within your company's data mapping. With this information in hand, it is advisable to link all parties involved in the process according to your privacy policy and terms of use.

In the future, we can discuss the obligations prescribed by the law.

However, you can also consult directly with your lawyer, especially if you have any legislation that supersedes the LGPD.

In our next article, we delve into the responsibilities of the Data Protection Officer or Data Controller. 
See you there.

The Differences Between Data Controller and Data Processor - LGPD

João Bruno Soares

Ignoring Terms of Use and their importance within a website, especially now with the [LGPD](https://goadopt.io/blog/en/lgpd-general-data-protection-law/), is a common error that both consumers and website owners often make.

Consumers tend to disregard them, while website owners often simply copy them from other sites and overlook the key points.

After all, who wants to waste time reading these documents or thinking about their development, right? Wrong! Of course, reading them doesn't promise a literary delight, I know that much.

However, it is necessary to ensure the safety of both the user and the page owner. It's not for nothing that they are present in most of those ubiquitous [cookie banners](https://goadopt.io/blog/en/why-the-cookie-banner/) out there...

So, don't waste any more time and read below to learn everything about them and how Terms of Use have become essential in the era of LGPD.

## Terms of Use: What are they?

Terms of Use correspond to a document that provides detailed information about how a website functions, the contracting of services/products offered (or the use of information present), and the limits of responsibilities for both parties.

In essence, it's a textual document containing rules for the operation and use of the website and its services. These services can be commercial, informational, service-oriented, and so on.

Terms like Terms of Use, LGPD, [Privacy Policies](https://goadopt.io/blog/en/what-is-privacy-policy/), data collection... there are so many terms that come up in discussions about data protection and website obligations that navigating the internet now requires a dictionary and a degree.

```markdown
Calma, mesmo que você já seja o [Encarregado de Dados](https://goadopt.io/blog/en/responsibilities-of-a-data-protection-officer/) do seu site, por livre espontânea pressão, estamos aqui para te ajudar! :D

Mas você não precisa disso tudo para entender como esses termos conversam e qual é a importância deles. Hoje veremos de forma simples e sem complicações que exijam termos técnicos sobre o assunto.

## And what are Terms of Use for?

Terms of Use serve as a contract!

Can you imagine signing a contract without reading it in advance? Or even copying any contract that concerns rules meant to protect you, without knowing if they apply to your case?

Well, that's why ignoring Terms of Use is no longer an option. In fact, it's a major irresponsibility, let's admit it.

It serves to establish rules for users or customers to use the website or platform. In other words, when you accept the terms, you accept the conditions set by the page. When you make a purchase on an e-commerce site, you're following the rules imposed there.

Of course, this document also follows rules like the Consumer Protection Code, but in general, the contract is imposed by the website. Therefore, it's the website's responsibility to develop it with quality, transparency, and accessibility (easy readability).

Similarly, it's the visitor's responsibility to read the terms, and if they don't agree with them, they should leave the site or stop using it. After all, if they agree, they should adhere to its limits (provided they're not abusive, but that's a legal matter).

In summary, Terms of Use serve to establish the limits of website use, its responsibilities, the correct use of services, the duties and rights of each party, and what is offered there.

It's also worth noting that each type of Terms is different. After all, a news website doesn't offer the same services (nor does it have the same responsibilities) as a page that sells products.

Therefore, thinking about this document is always very important for website owners. Similarly, it's important for you, the reader, as it indicates your rights and duties.

## What's the relationship between Terms of Use and LGPD?

Terms of Use are part of the transparency that websites owe to their visitors and users. They go hand in hand with Privacy Policies. These indicate how the treatment, collection, and security of data that may be collected there are carried out.

And it's precisely these documents that formalize the central themes of the [LGPD, the General Data Protection Law](https://goadopt.io/blog/lgpd-lei-geral-de-protecao-de-dados/). It is recent and came into effect in August 2020.

Therefore, more than ever, it's essential for websites to pay attention to the need to develop these documents that affect the privacy and rights of consumers/visitors in accordance with LGPD. Otherwise, they risk receiving significant penalties. Among these, quite significant fines.

Although many websites choose to present them in a single document, it is of paramount importance that they are available on the website in separate and unique documents. In other words, one for the Terms of Use and another for the Privacy Policy.

While the Terms of Use limit the use of data and services available there, responsibilities of the parties, rights, duties, and intellectual property, Privacy Policies provide information on the treatment and collection of data from users and visitors.

## How to develop the Terms of Use for my website?

When creating the Terms of Use in accordance with LGPD, there are some essential considerations.

Firstly, although the Terms of Use correspond to a contract for the use of the website and its services, it does not require legal language. In fact, the clearer it can be, the better!

After all, it's essential for all visitors to be able to understand the terms presented, as they relate to their rights and duties in using the page. Therefore, remember to keep it simple.

Another issue concerns the specificity of the terms. Remember that we mentioned the (terrible) habit of some websites that simply copy the Terms of Use from others? Well, that's wrong precisely because this document should relate specifically to what each page offers.

For example, an informational website, an e-commerce website, and one that offers online calculation tools will each have specific and different Terms of Use. Even among e-commerce websites, this varies.

Another point to consider is the LGPD's delineations regarding the roles of [Data Controller and Data Processor](https://goadopt.io/blog/en/differences-operator-controller-of-data-lgpd//). This is because these roles can often be confused or even inverted during the provision of services.

After all, they must contain information about the types of products they sell, the data required for purchase, among other issues that are extremely unique to each business.

Finally, remember that the Terms of Use must include, in addition to the delineation of services, limitations of responsibilities and obligations, as well as copyright and industrial property statements.

With all of this, it is possible to ensure LGPD-compliant, secure, clear, and complete Terms of Use! If you want, you can use the [AdOpt Terms of Use](https://goadopt.io/termos-de-uso) as a reference.

## Want to delve deeper into the subject?

We have another article that helps you with [tips for when you need to update your Terms](https://goadopt.io/blog/en/notification-to-users-terms-of-use/).


What are Terms of Use and their importance in the LGPD?

The Data Protection Officer, or DPO, is a new position that emerged all over the globe with the new privacy regulations, and more recently at the [LGPD](https://goadopt.io/blog/en/lgpd-general-data-protection-law/). Although it already existed in other international legislations, such as the [GDPR](https://goadopt.io/blog/en/website-needs-cookie-consent-gdpr-lgpd-ccpa/) of the European Union, it is still a novelty here since 2020. Along with it comes the possibility of outsourcing, known as DPO as a Service (DPOaaS).

Due to its novelty and the importance of its role, many companies and organizations are opting for outsourcing this activity. But is it really a good idea? What are the risks and advantages?

Find the answers to these questions and get to know the Data Protection Officer and their responsibilities as per LGPD regulations.

## What Is a DPO?

The DPO is an individual or legal entity established within Data Protection Policies as one of the agents involved in the processing and use of data subjects' information. Thus, their role is of utmost importance.

They can be either an individual or a legal entity. However, they cannot correspond to a department or team within the company. After all, documents related to data collection and processing must specifically indicate who is responsible as the DPO.

**### Learn more about the roles of data controller and data processor in LGPD**

The DPO's functions lie in mediating the relationship between data subjects, the data processor, and the National Data Protection Authority (ANPD).

They do not necessarily make decisions regarding data and its use. However, they assist in following and complying with the guidelines imposed by the data controller and the General Data Protection Law. Another one of the DPO's responsibilities is to provide guidance to employees who have access to third-party data, instructing them on how to adhere to LGPD guidelines and the consents that have been granted.

_### Their role is to educate, organize, and audit in accordance with ANPD regulations._

Some of the main activities that a DPO, whether outsourced or not, may perform include:

- Handling data subject complaints, providing clarifications, and taking necessary actions;
- Receiving communications from ANPD and taking appropriate actions;
- Handling consent revocations or changes in consent and taking appropriate measures;
- Ensuring the application of LGPD principles regarding personal data processing;
- Monitoring organizations' compliance with the General Data Protection Law, etc.

Thus, the DPO serves as an intermediary, mediating relationships and being one of the agents responsible for ensuring compliance with LGPD.

## When Can You Outsource the DPO?

Anytime a company or organization desires, they can outsource these services. The law does not require the DPO to be an internal employee. In fact, it does not even require the DPO to be an individual.

Therefore, any self-employed professional or company that provides services in this area can offer services to other companies. This involves the establishment of a service provision or outsourcing contract.

In the case of hiring an external person as a DPO as a service (DPOaaS), a service provision contract is established directly with the professional.

On the other hand, when a company is hired, there is an outsourcing of the DPO. The entity determined as the DPO within the Privacy Policies is the legal entity.

It provides professionals who will perform the typical duties of a DPO. However, they provide this service to a company due to their employer's hiring.

## Advantages of DPO as a Service

To determine whether outsourcing the LGPD DPO is worthwhile, it is necessary to consider the advantages it offers. Here are some of the main advantages:

First and foremost, it is essential for companies, organizations, and websites to have a clear determination of who the DPO is in order to comply with the [LGPD](https://goadopt.io/blog/en/ignoring-lgpd/). Currently, all companies must have one, although there are indications of a potential limitation of this requirement in the future.

### Below are some advantages of DPOaaS

### Agility
In this regard, note that it is not always easy to hire someone with the necessary knowledge for this role or to train them to fulfill the duties of a DPO. Therefore, compliance can be more rapid and straightforward through the outsourcing of such services.

### Speed
Once a qualified professional or even a company with multidisciplinary knowledge for the role is found, the adaptation process becomes much faster. This is because each company and market has its own specificities.

### Training and Qualification
Every new area and law requires extensive study and is subject to various short-term changes. Therefore, outsourcing this role also means outsourcing the responsibility of staying up-to-date and investing in the professionals' training.

### Autonomy
Roles involving oversight and audit can sometimes create conflicts with departments and even managers. It is essential for the DPO to have autonomy in their work and even stability, as prescribed by the law. After all, they cannot be threatened with job loss for overseeing processes within the company. Therefore, outsourcing this responsibility can lighten the organizational atmosphere.

### Flexibility
Just like any service provider, working with a contract makes it much easier to replace them compared to a full-time employee. Therefore, having a DPOaaS as a legal entity provides much more flexibility in case adjustments or replacements are needed over time.

### Lower Costs
Labor and social security charges are quite substantial in Brazil. Hiring a legal entity for this role can lead to reduced costs for the company while increasing the remuneration of the service provider.

**ATTENTION**: It is important to note that, regardless of how responsible a service provider may be for their role, they are still under the hierarchy of the employer. Therefore, ultimate decisions may be the responsibility of the company's administrators, even when using DPOaaS. Be cautious not to rely on outsourcing as a means of avoiding responsibility.

The same applies when the company does not appoint a DPO; the ultimate responsibility falls on the managing partners. When appointed, the professional acts on behalf of the company and its representatives before the national authority.

**### Do you know the difference between Data Mapping and [ROPA in LGPD](https://goadopt.io/blog/en/ropa-for-lgpd/)?**

## Hire Experts in the Field

Another interesting aspect of outsourcing the DPO is that this way, you can have an expert in the field. As mentioned above, it is not your company that is responsible for the training; it is the hired professional or company.

This ensures even greater security for operations to comply with LGPD and be in the hands of experts. It is even better when the professional is part of a network or multidisciplinary group that can assist with the specificities of your business and market.

## What Are the DPO's Functions When Outsourced?

In this case, the functions are the same as those of an internal DPO. After all, outsourcing only refers to the possibility that the activities are carried out by an external agent to the company.

As mentioned above, this agent can be a legal entity or a natural person. Either way, they must be specifically identified within the Privacy Policy and other documents related to consent, use, and data processing.

Any changes regarding who is responsible as the LGPD DPO must be reflected in policy changes. Failure to do so would result in a violation of the General Data Protection Law and the creation of risks such as [fines and even suspension of databases](https://goadopt.io/blog/en/fines-in-lgpd/).

Want to learn more about the [responsibilities of a Data Protection Officer](https://goadopt.io/blog/en/responsibilities-of-a-data-protection-officer/)? I've prepared this article for you!

Outsourcing the DPO (DPOaaS), Is It a Good Idea?

How do you deal with a profession that didn't even exist a few years ago and is now mandatory in companies? That's precisely the question that arises when we think of the [Data Protection Officer or DPO](https://goadopt.io/blog/en/responsibilities-of-a-data-protection-officer/).

This term, as well as the professional behind it, emerged with the enactment of privacy laws, in Brazil, the [General Data Protection Law - LGPD.](https://goadopt.io/blog/en/lgpd-general-data-protection-law/) This law was enacted in 2018 and only came into effect in 2020. According to the law, they are responsible for ensuring the correct treatment of data that the company may use, which belongs to third parties.

And this responsibility assigned by the law to the professional figure of the Data Protection Officer may lead to the assumption that they are the sole and exclusive responsible party for the care that applies to such data. Is that the case? Is the job of the Data Protection Officer solitary or should it be a team effort? Find out all of this in the following sections.

## Data Protection Officer and Their Responsibilities

You know those lists where we see "future professions"? Well, if we considered 2021 as the future, the figure of the Data Protection Officer would be on that list because, in professional terms, it's one of the newest and most modern roles in the market.

After all, this position didn't even exist before LGPD or GDPR. The law created a new profession. This happened the moment the General Data Protection Law explicitly established the existence of this figure. At the same time, it laid out all of their responsibilities.

The Data Protection Officer or DPO (_Data Protection Officer_) is precisely a figure who must control and manage data processing - in other words, their use - in the day-to-day operations of the company. Thus, they are responsible for ensuring that all processes, flows, and actions respect the limits supported by the Legal Basis that underpins the use of that data by the company. Therefore, in the event of an inquiry from ANPD to the company, they are the ones who must respond on behalf of the institution.

### Learn more about the Legal Bases of LGPD.

Among the responsibilities of the DPO that are clearly stated in LGPD are:

- Execute tasks determined by the Data Controller and within the limits of that determination (and, of course, the law);
- Handle complaints from data subjects;
- Provide explanations about the use of data to data subjects;
- Communicate with data subjects whenever necessary;
- Take the necessary steps to reflect changes in data use and collection due to changes in the data subject's consent;
- Guide other professionals who handle this data and instruct them regarding security measures and the limits of consent and the application of this information.

By responding to the guidelines of the [Data Controller](https://goadopt.io/blog/en/differences-operator-controller-of-data-lgpd/), the DPO is not to be confused with this figure. While the controller refers to the one who defines the mode of treatment of information from its entry to its elimination, the Data Operator is the one who executes the process and ensures that it is strictly followed. When distinct, both the Controller and the Operator must have their respective DPOs.

### [Learn more about the responsibilities of the Data Protection Officer and how their work impacts companies in light of the General Data Protection Law](https://goadopt.io/blog/en/responsibilities-of-a-data-protection-officer/)

## All teamwork clichés become a reality in data treatment care as per LGPD.

There are several responsibilities that a DPO has within a company, as we've seen above. And this doesn't happen by chance, as data processing imposes specific limits and requires essential attention and care.

In this sense, it becomes clear that the Data Protection Officer accumulates a series of activities. But, no matter how well-equipped they are for their responsibilities and how up-to-date they are with the company's data processing activities, it's not enough.

_The isolated work of the DPO is something that is impossible to occur._

Or rather, it finds no possibilities of developing with the necessary quality and maintaining security against data leaks or improper use.

That's why when we talk about the work of the Data Protection Officer, we cannot understand that their activities are carried out in isolation or individually. The importance and number of responsibilities make their work a team effort.

To avoid any confusion, understand this: the DPO really is responsible for the issues involving data use. Thus, in the event of accidents or problems involving this information, they will be directly involved.

On the other hand, this does not mean that they should work alone. Quite the opposite! Ensuring that other employees and teams are involved in the care required by data processing due to LGPD is crucial.

The work of the Data Protection Officer is multidisciplinary. Legal, Technology, [Marketing](https://goadopt.io/blog/en/10-risky-processes-in-your-marketing/), Information Security, Process Management, Institutional Relations, etc. Since it's very difficult for one person to master all of these areas, the assistance of a support team is essential!

Only in this way is it possible to develop work in harmony, which takes place jointly to ensure the correct use of data. Therefore, don't isolate your DPO! Their work should take place close to other employees and with their assistance.

## Formation of a data security committee

One way to provide the Data Protection Officer with the support they need to carry out their activities successfully is to create a data security committee. It should be formed by various professionals representing the company's teams.

Moreover, they should represent the main interests involved when we are faced with data leaks or misuse. Therefore, it should have representatives from Human Resources, the Legal department, and Information Technology, at a minimum.

Likewise, they can include, regularly or in specific situations, representatives from the marketing team, as well as from the Communication, Sales, Finance departments...

With this, the DPO finds opportunities to jointly develop strategies, with each department's representatives helping with their implementation, as well as mapping the main problems that data processing encounters in various business processes.

Each representative acts as a direct extension of the DPO in their department(s), so it is important that they have a good understanding of the processes and autonomy in investigating flows and details.

## Knowledge of the company's data processing-based processes

As we've seen, the DPO is responsible for ensuring that data use occurs in accordance with the [legal basis](https://goadopt.io/blog/en/legal-bases-of-lgpd/) that supports the use of user data and within the limits of LGPD. Also, they must faithfully follow the instructions of the Data Controller.

There are numerous types of activities that occur simultaneously within a company that involve data processing. Consider, in this regard, an online sale. In this case, data such as address, CPF, phone number, and full name are collected, which should be used for:

- Billing;
- Generating invoices;
- Communicating the completion of the sale to the customer;
- Logistics for the separation and forwarding of the product;
- Offering tracking;
- Post-sale contact.
- ...

And these are just some of the activities that require data in a sales process. Therefore, it is necessary for the Data Protection Officer to be familiar with these processes, how they work, the data they use, how they are stored, discarded, and other such information.

Only in this way is it possible to know where the company is succeeding and failing in data processing, as well as to develop security strategies and ensure that data processing takes place within its limits and regulations.

## Establishing Limits and Rules for Data Use by Teams

Ideas and possibilities abound.
But to try to conclude this topic, one last tip.

When the DPO is in contact with the teams, they also become capable of guiding them so that, in their day-to-day activities, data processing occurs correctly. This can be done in various ways, such as through the development of a manual, training, etc.

It is crucial that everyone who in some way works with data processing has access to such standards and knows exactly what the limits of information use are.

With this, the teamwork of the Data Protection Officer not only becomes possible but also brings effective improvements to the company and makes it secure in compliance with LGPD guidelines.

Have you heard of [ROPA in LGPD](https://goadopt.io/blog/en/ropa-for-lgpd/), do you know what this document is?

Here, we talk a bit more about it, to help you with [compliance processes](https://goadopt.io/blog/en/10-risky-processes-in-your-marketing/).

Data Protection Officer and LGPD, a Solitary or Teamwork Job?

Have you ever noticed that every time you sign up for a service to access information or register on a website for purchases, you need to give consent? If you're wondering why you have to give consent on every website you visit, you'll find the answer here.

Even though this consent is often "automatic" and happens without you thinking about it (which it shouldn't), it is very important. After all, it is a legal requirement that applies to the website and pertains to the security of your data.

Since data is becoming increasingly important and data breaches can cause significant harm, understanding what you're consenting to and what it means is indispensable. So don't miss the opportunity to learn more about this topic!

## With LGPD, Silence Doesn't Imply Consent

To understand how consent has become so important regarding data collection and use in the online environment, we need to go back to August 2020. That was the month when the [General Data Protection Law (LGPD)](https://goadopt.io/blog/en/lgpd-general-data-protection-law/) came into effect.

It was introduced as a response to the need to protect data shared on websites and collected by web pages, as well as to regulate their processing. Notably, in recent years, massive data breaches of personal information, such as the Facebook breach, have alarmed users.

Therefore, privacy laws like [GDPR, LGPD, CCPA](https://goadopt.io/blog/en/gdpr-lgpd-and-ccpa-what-are-these-laws-similarities-and-differences/) have consolidated the notion of consent for data usage. In other words, all websites that use cookies and collect data from their users for any purpose (such as marketing) not only need to inform but also ensure agreement.

This happens when you access a website and need to grant permissions for cookies, for example. Even though cookies are just one form of information collection, they are a good example of consent.

The same thing happens when you access a page where you need to enter personal data. For example, when subscribing to a newsletter and landing pages. Similarly, when registering for a purchase. In these cases, there's always a box that says "I agree to the [terms of use](https://goadopt.io/blog/en/terms-of-use-lgpd/) and [privacy policies](https://goadopt.io/blog/en/what-is-privacy-policy/), " right?

Know that in all these cases, consent is given for the use of your data. It relates to the company's security and information treatment policies, as well as which data is used, when, how, and for how long.

Of course, there are other [legal bases](https://goadopt.io/blog/en/legal-bases-of-lgpd/) that also ensure the correct use of citizens' data. However, for many, consent ends up being the quickest and most accessible option in their business flow.

[**### Discover how to adapt your digital marketing to LGPD.**](https://goadopt.io/blog/en/how-to-adapt-digital-marketing-to-lgpd/)

## What is the importance of the consent policy for the website and the visitor?

The consent that you might be tired of giving - but shouldn't, as it concerns your security - is important for both websites and you, as well as other visitors and users.

Well then, let's start with the visitors because the preference is theirs! For them, consent is important because it's only through it that the companies behind the websites can use their data. They can use it only within the limits stipulated, both in terms of time and application.

So, if you have the habit of giving consent to websites without carefully reading the terms beforehand, it's time to change that approach! The use of your data is important and relates to your security (including financial security!).

Therefore, it's important to be aware of what you're allowing and what the company's policies are for protection purposes.

In this sense, it's necessary to pay attention to two different text documents: the Terms of Use, regarding the rules of service utilization responsibility and limits of duties and rights; also, the Privacy Policy, which concerns the treatment of information and security details.

On the other hand, the consent you give to websites is also important for them, obviously. After all, this is the only way they can really use the data (within the informed and consented limits) in accordance with LGPD.

Learn more about [how the cookie banner work](https://goadopt.io/blog/en/operation-of-cookie-banner/)!

Moreover, LGPD imposes significant [penalties](https://goadopt.io/blog/en/fines-in-lgpd/) on those who violate it. In this regard, it can impose warnings as well as [fines](https://goadopt.io/blog/en/fines-in-lgpd/) that can be quite high! It can also lead to restrictions on data collection and the banning of the page.

## What types of pages need to obtain visitor consent?

The vast majority of websites that collect data in some way and use cookies need to obtain consent from their users. There are various types of data collection, ranging from cookies to voluntary information acquisition through page registrations.

In this sense, all pages that use tools for analyzing results and metrics, such as Google Analytics, already have a duty to obtain consent from their visitors for this.

Similarly, landing pages, contact pages with user information disclosure, and other data registration forms will always need policies of agreement regarding data collection and usage.

Especially when, according to the company's business model, other [legal bases](https://goadopt.io/blog/en/legal-bases-of-lgpd/) are weaker in terms of data usage rationale. Thus, consent ends up being an excellent option.

## Cookie Banner

Firstly, one of the methods for obtaining consent is through the Cookie Banner, right on the page.

In this case, the page's opening must clearly inform the use of cookies and allow the visitor to configure their preferences and give their permission. Only after consent, the cookies can be triggered.

[### **How to configure third-party cookie blocking in AdOpt?**](https://goadopt.io/en/support/essential-setups/3rd-party-cookie-blocking/manual-third-party-tag-blocking/)

For this purpose, your website can rely on AdOpt. With our tool, your cookie usage policies are always clear to the user. In addition, alongside the banner, you can configure the blocking of third-party cookies, multi-languages and legislations, text customization, positioning, colors, and images.

[_Have you heard of the ROPA document in LGPD? 
It's essential and can help you a lot in your compliance!_](https://goadopt.io/blog/en/ropa-for-lgpd/)

## Terms of Use and Privacy Policy Notices

The other method of applying consent policies on a website is precisely on pages dedicated to contact forms, landing pages, and site registration. Using those "I have read and accept" checkboxes.

In this case, it is essential that the user has access to the documents that reveal them and that they must allow the use of such information before continuing their online action.

Therefore, always make sure that these notifications halt the process. This way, only data that truly has the visitor's consent is collected.

If you are an [AdOpt](http://goadopt.io/) customer, our technology allows this online form consent collection to be integrated into the platform as a whole. This means that your CRM has another field fueled by visitor consent.

Want to know how? Just chat with us or schedule a presentation conversation [here](https://calendly.com/valquiriaadopt).

The Differences Between Data Controller and Data Processor - LGPD

What are Terms of Use and their importance in the LGPD?

Outsourcing the DPO (DPOaaS), Is It a Good Idea?

Data Protection Officer and LGPD, a Solitary or Teamwork Job?

Why Give Consent on Every Website I Visit?