How Should Cookie Consent v2 Be Implemented in Türkiye?

⏱️ Reading time: 10 min · 📁 Category: KVKK & Digital Compliance

How Should Cookie Management (Cookie Consent v2) Be Implemented in Türkiye? (2026 Guide)

Cookie Consent v2 is a cookie management model that manages website cookies on the basis of users’ explicit consent and
complies with KVKK and international data protection standards. In Türkiye, cookie use falls directly under KVKK
and explicit user consent is required, especially for non-essential cookies.

Many companies still think a cookie banner consists only of an “Accept” button.
Yet proper cookie management requires privacy information, categorisation, obtaining consent and preference management to be established together.

Short answer: In Türkiye, implementing Cookie Consent v2 means categorising cookies,
obtaining explicit consent for non-essential cookies and enabling users to change their preferences. What is a cookie?

Cookies are small data files saved to your browser when you visit a website.
These files are used to remember user preferences, manage sessions, or analyze user behavior.

However, many cookies are considered personal data under KVKK because they can identify users.

What are the types of cookies? Essential cookies

These are necessary for the website to function. They support login, security and basic features.
These cookies do not require explicit consent.

Analytical cookies

These are used to analyse user behaviour. Tools such as Google Analytics fall into this category.

Marketing cookies

These are used to show personalised advertising. They are the highest-risk category and require explicit consent.

Functional cookies

These remember language choices or user preferences.

B10 insight: All cookies other than essential cookies
require explicit consent under KVKK. What is Cookie Consent v2?

Cookie Consent v2 is an advanced system that allows users to manage cookie preferences in more detail.
The user can choose which categories of cookies they allow, not just "accept" or "reject".

This model is particularly important for data minimization and user control.

How should cookies be used in Türkiye under KVKK?

According to the KVKK, the use of cookies must comply with the following principles:

Providing privacy information is mandatory

Users must be clearly informed which cookies are used and for what purposes.

Explicit consent is required for non-essential cookies

For analytics and marketing cookies, explicit consent must be obtained from the user.

Consent must be freely given

Users cannot be told, “You cannot use the site unless you accept.”

Consent must be withdrawable

The user should be able to change their cookie preferences at any time.

How should a proper Cookie Consent v2 system be set up?

A compliant cookie management system should include the following components:

Layered cookie banner

The first screen should provide brief information; the detailed view should list all cookie categories.

Category-based selection

Users should be able to select analytics, marketing and other cookies separately.

Default setting (opt-in)

Non-essential cookies must be disabled by default.

Cookie policy

The detailed cookie list and purpose of use should be presented on a separate page.

Consent must be recorded

Users’ consent must be logged so that it can be demonstrated when needed.

Practical point: If there is an “Accept all” button but no “Reject” option,
the system is probably not compliant with KVKK. Most frequent mistakes Using a single button banner

The user is not given a real choice.

Not categorizing cookies

All cookies are presented under one heading.

Running cookies without consent

Analytics and advertising cookies are automatically active.

Not offering consent management

The user cannot change their preferences later.

Not keeping cookie policy up to date

The cookies in use and the information provided about them do not match.

B10 approach: cookie management = data strategy

At B10 Digital Agency, we do not treat cookie management merely as a technical banner.
We design the process around KVKK compliance, user experience,
data accuracy and analytics needs
together.

An incorrectly configured cookie system leads either to data loss or a KVKK violation.

Conclusion

In Türkiye, implementing Cookie Consent v2 means more than obtaining user consent;
it means establishing a properly structured data management system.

Proper cookie management provides both KVKK compliance and forms the basis for reliable data collection.

Let’s Build a KVKK-Compliant Cookie Management System Together