The European data protection law known as the General Data Protection Regulation (GDPR) has been in force since May 25, 2018.
Carry out a data protection audit
We recommend that you carry out a data protection audit for your website or company. This will allow you to identify and systematically categorize all the personal data you collect from your users. The audit enables you to precisely record the type and scope of the data processed so that you can later present this information accurately in your privacy policy. This allows you to provide your users with comprehensive information about how their data is handled.
- Free website check: Use our free service to check your website or app for security vulnerabilities.
- Categorize data: Categorize the data you collect by type and define the legal basis for collecting it.
- Create a privacy policy: Use the results of the audit as the basis for your privacy policy to provide consumers with comprehensive information about data collection, storage and management.
Implement a Consent Management Platform (CMP)
The GDPR requires that voluntary, informed, unambiguous, revocable and verifiable consent is obtained from consumers prior to data collection. To meet these requirements, we recommend integrating a Consent Management Platform (CMP) on your website. This enables consumers to give or refuse their consent.
- Consent management via CMP: Implement a CMP to provide users with clear options to consent or decline.
- Link to privacy policies: Integrate references in your CMP to comprehensive privacy and cookie policies that comply with GDPR requirements.
- Flexible consent options: Allow consumers to change their decision or withdraw their consent at any time.
- Documentation and verification: Use the CMP to efficiently document the consent given and be able to prove it if necessary.
Create a GDPR-compliant privacy policy
If you collect personal data, you must provide data subjects with a privacy policy that contains the following information in accordance with Article 13 Chapter 3 of the GDPR.
- Identity and contact information of your company and, if applicable, your representative.
- Contact details of the data protection officer, if any.
- Purpose and legal basis of the data processing and an explanation of legitimate interests, if this legal basis is used.
- Recipients or categories of recipients of the data.
- Information about the transfer of data to third countries or international organizations and the corresponding protective measures.
- The period for which the data will be stored or the criteria used to determine that period.
- Rights of data subjects, including the right to lodge a complaint with a supervisory authority.
- Information on automated decision-making and profiling, if applicable.
Right to information
The GDPR emphasizes the importance of transparency in data collection. Individuals have the right to be informed in detail about the collection and use of their data.
Right of access
Consumers can request access to their personal data stored by a company. This enables them to check the completeness and accuracy of the data.
Right to correction & deletion
Consumers have the right to have inaccurate or outdated personal data corrected. They can also request that a company deletes their data, provided there are no legal retention obligations to the contrary.
Right to object
The right to object under the GDPR allows data subjects to object to the processing of their personal data at any time on grounds relating to their particular situation.
We implement the Usercentrics CMP for you
Usercentrics is the world's leading provider of Consent Management Platforms (CMP) and offers companies the optimal solution for handling user data in compliance with the law. As a proud partner of Usercentrics, we have already implemented numerous CMPs for companies around the world that comply with legal requirements.
The CMP integrates seamlessly into any technology stack, providing a customized solution for your business. Our expertise in consent and data management not only enables compliance with data protection regulations, but also optimal interaction with complementary technologies, such as server-side tagging. This ensures comprehensive and efficient data collection for a complete database that can be used specifically for marketing purposes.
