How to make my Webflow Privacy Policy GDPR compliant?

According to the GDPR, organizations must provide people with a privacy notice that is:

• In a concise, transparent, intelligible, and easily accessible form
• Written in clear and plain language, particularly for any information addressed specifically to a child
• Delivered in a timely manner
• Provided free of charge

‍

If an organization is collecting information from an individual directly, it must include the following information in its privacy notice:

• The identity and contact details of the organization, its representative, and its Data Protection Officer
• The purpose of the organization to process an users personal data and its legal basis
• The legitimate interests of the organization (or third party, where applicable)
• Any recipient or categories of recipients of an individual’s data
• The details regarding any transfer of personal data to a third country and the safeguards taken
• The retention period or criteria used to determine the retention period of the data
• The existence of each data subject’s rights
• The right to withdraw consent at any time (where relevant)
• The right to lodge a complaint with a supervisory authority
• Whether the provision of personal data is part of a statutory or contractual requirement or obligation and the possible consequences of failing to provide the personal data
• The existence of an automated decision-making system, including profiling, and information about how this system has been set up, the significance, and the consequences

‍

Get a free downloadable template for a GDPR compliant Privacy Policy.