Cookie statement — template + categorisation

Cookie statement = separate document alongside privacy statement (ePrivacy + Dutch Telecoms Act 11.7a). See our article What are cookies. Mandatory content: (1) Per cookie: name, purpose, type (first-party/third-party), retention, category (functional/statistics/marketing). (2) Category build: functional (no consent), statistics (consent unless privacy-friendly configured), marketing (always consent). (3) Third-party cookies: Google Analytics, Meta Pixel, Hotjar, LinkedIn — refer to their own privacy policy. (4) Management instructions: how to block cookies via browser + your cookie banner. (5) Withdraw consent: easy route + link back to cookie banner. Tw 11.7a + AP enforcement: cookie banner must have "Accept All" + "Reject" equivalent. No pre-checked boxes. No "pay or accept" without free alternative (see cookie wall). Consent Mode v2: for Google Analytics + Ads mandatory since March 2024 (see Consent Mode v2). Tools: Cookiebot, OneTrust, Consentmanager — automatic scans + statements. Open-source alternative: Klaro.