This template can be used to create a Privacy Policy . This also meets the requirements of the General Data Protection Regulation (GDPR). The General Data Protection Regulation is a EU law, which came into force on May 25, 2016 and thus also applies to all EU member states.
Data protection describes the protection against the improper processing of personal data as well as the protection of the right to informational self-determination. Data protection in Germany is mainly regulated by the two laws General Data Protection Regulation (GDPR) and Federal Data Protection Act (BDSG-new).
For the lawful processing of personal data, a legal basis in accordance with the GDPR or a declaration of consent from the data subject is required. This applies mainly to data traffic on the Internet.
WHAT SHOULD BE CONSIDERED?
What is the GDPR?
The General Data Protection Regulation is a EU law that sets new standards for data protection in the European Union. This has been mandatory for everyone since May 25, 2018. Basically, in the new General Data Protection Regulation All processes and requirements for data protection management in companies are regulated. Thus the General Data Protection Regulation replaces the Federal Data Protection Act and other regulations that previously applied to website operators.
The GDPR affects all companies, that collect and store personal data from employees or customers. This includes medium-sized companies with their own newsletter as well as agencies, online shops, hosters and freelancers who, for example, track users on their website.
WHY A PRIVACY STATEMENT?
A Privacy Policy (also called a Privacy Policy ) describes measures that an organization takes to protect the privacy of its customers or users. Personal data collected in this way is particularly worthy of protection. Personal data can be, for example, name, e-mail address and address.
In addition, it is usually explained how this data is collected, used and whether it is passed on to third parties, if any. For example, personal information (name, address, etc.), social media (Facebook, Twitter, etc.), payments (PayPal, Klarna), registrations, newsletters, data analysis and cookies are regulated.
In general, a high level of data protection should be set to ensure that the requirements of the law are met.