The perils of letting third party trackers use your CNAME / subdomain.
by Cristiana Santos, Nataliia Bielova and Célestin Matte
includes 22 legal and technical requirements for valid cookie banners!
(e.g. see page 15)
The Spanish guidance is much more relaxed than the ones from UK, France, and Germany – adding to the somewhat different expectations across the EU member states.
incl. also interesting links to other EU papers (e.g. on cloud)
Sadly from Nov 2016, so with GDPR in mind, but not in force, yet.
Covered technologies include
Web caching mechanisms
HTML5 local storage
“Canvas fingerprinting” and “Evercookies”