Webagentur lilac-media | Webdesign und Programmierung
You are here: Website creation > Legal and GDPR
Author: with the help of ChatGPT | Reading time approximately: 4 min | last modified: 14.07.2025
Legal and GDPR
The most important thing you need to know is: As a website operator, you are responsible for data protection and legal safety!
We are not lawyers and therefore cannot provide legal advice. But when we create a website for you, we see it as our duty to provide you with information about legally relevant technical and content-related details that you may not know or be able to know.
If you operate a website, you should do so in a legally compliant manner! Otherwise, you provide competitors and cease-and-desist seekers with an attack surface.
We support our clients in creating and operating their website in a legally compliant way. To this end, we are eRecht24 agency partners for legally compliant websites.
"Do I need to know all these details?"
Generally, it is good if a website operator is familiar with the subject matter himself. However, it is so dynamic and complex that it is difficult to do in addition to the actual business activities, especially since one must delve deeper into the topic. It involves issues such as data protection, copyright law, usage rights, and the right to one’s own image. This concerns every website operator. Furthermore, there are professional groups that are subject to advertising restrictions, which naturally also apply to the website.
On the safe side: Review of the website by a lawyer
It is recommended to have the website checked by a lawyer before publication. Also, legal departments of chambers and associations you belong to can be the right contact persons.
Creating a legally compliant website
A new website must include the necessary legal texts upon publication, i.e., a correct privacy policy and a complete imprint. We support our clients in creating these legal texts via our agency access at erecht-24.de.
GDPR
The GDPR is actually a sensible framework if you detach yourself from the hype surrounding this topic and think about it calmly. It is good and right to clearly understand what personal data you collect and process for which purpose. Above all, you should create a process for deleting this personal data when it is no longer needed. This is documented in a processing register, which you simply need to follow.
"But I don't collect any data at all!"
If you offer an email link or a contact form on your website, you are collecting data via the website. IP addresses of visitors are also considered data. So probably no website exists that does not collect data.
You must inform your users about all data processing activities on your website and educate them about their rights regarding their data. Besides the data processing you perform yourself, functions embedded from third-party providers (e.g., Google) also need to be considered. You definitely need the expertise and care of your web agency here, as the technical details are often beyond your knowledge.
Encryption of data from website to server with SSL certificate
If you offer a contact form, your website needs an SSL certificate. This encrypts data entered by the user during transmission between the browser and the server, so it cannot be intercepted. This is recognizable by the green lock in the browser's address bar.
SSL certificates are available paid (with authenticity check, issued by certification authorities) and free (without certification authority and without authenticity check).
Copyright
Do you have publishing rights for all texts and images incorporated into your homepage? Texts and images are protected by copyright, and there are various regulations for their use. These need to be carefully checked and applied, especially when using images from image portals and archives.
Maintaining legal compliance of your website long-term
If a website was legally compliant when published, that doesn't have to stay the same. Changes in the legal situation or legal interpretation may necessitate updates to your legal texts; likewise, new content added by you or your staff. The scope of this is often not fully clear.
We inform our clients during the maintenance training about these aspects and offer to keep an eye on your website through regular reviews. With our tips and suggestions, as well as the agency access at e-recht-24.de, we support our clients. Our measures cannot replace legal advice or website review by a lawyer.