Legal and GDPR

What duties do website operators have?

The legal requirements arise primarily from the GDPR. Which duties apply in detail depends on which data are processed on the website.

Important: Even if you do not actively collect data yourself, a web server technically always processes data – e.g., IP addresses in log files.

Imprint

An imprint is mandatory in any case. It contains contact details about the operator of the website. Depending on the profession, additional data may be required, e.g., information about the supervisory authority or chamber affiliation. In many cases a liability insurance is also mentioned. If applicable, a data protection officer must also be named.

Privacy policy

This is also mandatory. It lists all data processed on the website and how they are used. It also contains all external services used and which data are collected and stored.

Cookie-Consent

Before loading content that requires consent, it must be clearly shown which data are recorded, to which services they are transmitted and which cookies are used. For such data explicit user consent is required.

This consent is provided via so-called consent tools. They enable you to give consent in a differentiated manner and to revoke it at any time. Without consent, the corresponding services may not be loaded.

Encrypted data transmission

Whenever data is transmitted over a website – for example via a contact form – it must take place over a secure internet connection. Technically this is implemented via HTTPS using an SSL/TLS certificate.

Regardless, an encrypted connection is now standard: search engines also rate it as a ranking factor.

What challenges exist in ongoing operation?

The legal requirements for running a website are complex and constantly changing. For operators, that means you must stay continuously up to date – otherwise risks quickly arise.

• Changes in the law must be continuously monitored
• Changes often require direct adjustments to the tools used
• Commercial services and plugins must be regularly updated and checked
• New content or external services require adjustments to the privacy policy and consent tool

This leads to a variety of potential sources of error. In the worst case, these have legal consequences - from cease-and-desist notices to fines.

How is GDPR compliance implemented in practice?

Compliance with the GDPR is not a single measure but a structured process. This process arises from the interplay of legal clarification, technical implementation and ongoing control.

1. Legal clarification
Based on the content and functions of the website, it is determined which requirements apply. Which data are processed determines which measures are necessary – for example whether a consent tool is required.

2. Technical implementation
The defined requirements are concretely implemented: suitable tools are selected, correctly configured and integrated into the website.

3. Ongoing control
The implementation is not a one-time state. Changes to content, used services or the legal situation require regular checks and adjustments.

Many mistakes arise not from missing implementation but from changes to content and functions of the website made during ongoing operation.

How we can support you

Creation of imprint and privacy policy

The legal texts are created via the legal portal eRecht24. This ensures they are formally and substantively correct. The privacy policy is specifically supplemented with all passages relevant to your website.

Consent tool

All websites created with the lilac-CMS include an integrated consent tool. Users can grant consent in a differentiated way and revoke it at any time. Services without consent are automatically blocked – no data transfer takes place.

Regular checks of imprint and privacy policy

We regularly check for you, on request, the up-to-dateness of your legal texts and update them for you

Regular content review of your website

We offer as a service within the lilac-CMS a regular review of content for changes that necessitate an adjustment of the privacy policy. For example, if you first add a new external service to your lilac-CMS-created page, our system detects this and enables updating the privacy policy accordingly.

Mehr zum Thema "Website creation":