All-in-one GDPR complete package for your website and web shop
Cookie Popup, Consent Management, Privacy Policy and Legal Notice
legally compliant
cookie popup
Compliant with GDPR and E-Privacy.
Withdrawal Management.
Correct control of services & embeddings.
complete
privacy policy
Understandable legal texts from data protection lawyers.
Fulfillment of the requirements of courts and authorities.
correct
imprint
Incidentally, we also generate a legally compliant imprint for you.
25
Years
Experience
40000
satisfied
customers
42
recommend agencies
our solution
That is why legalweb is one of the TOP GDPR solutions
Legal certainty is our top priority. These points distinguish our product from other providers:
“There is no ruling by the ECJ on this” is the most common excuse for websites that violate data protection. Yes, maybe. The data protection authorities punish anyway. Do you want to finance a legal dispute up to the ECJ? No. None of our customers want that .
“Why don’t you have this feature? It’s my risk anyway!” – we are often asked this question. Our customers are not data protection rock stars. We do.
We take local legislation into account.
The EU E-Privacy Directive is implemented in a different law in each EU country. Therefore, data protection information from a German company must name a different legal basis than information from an Austrian company. The GDPR is uniform throughout the EU, but allows some adaptations by individual states. Depending on the country, this can also lead to deviations in the data protection information. The location of the company is decisive, not the language of the website.
The EU E-Privacy Directive is implemented in a different law in each EU country. Therefore, data protection information from a German company must name a different legal basis than information from an Austrian company. The GDPR is uniform throughout the EU, but allows some adaptations by individual states. Depending on the country, this can also lead to deviations in the data protection information. The location of the company is decisive, not the language of the website.
There are very detailed regulations and explanations in the GDPR, pages of brilliant white papers and well-founded decisions from the data protection authorities as well as numerous judgments by courts on data protection in Germany and Austria. We make it easy for ourselves.
All legal texts must be in the language of the website. The operator of a five-language website therefore needs legal texts in five languages. We do not use community translations . Any translation error can render the data protection information illegal. The risk would be too high. Our legal texts are translated exclusively by court interpreters, i.e. generally sworn, court-certified interpreters who specialize in legal texts.
“Nudging” is the technical term for the subtle influencing of people. Have you never heard of this? The data protection authorities do. Many privacy popups have a giant bright green “Agree” button and a tiny light gray “Disagree” link. In this way, the user is pushed in the direction of approval . This is illegal . We do not use nudging techniques in our popup.
Many tools only revolve around “Cookie Consent”. That is clearly not enough. We take into account all processes that require approval. The E-Privacy Directive regulates any storage on the user’s end device and any reading from the user’s end device. Examples are: Cookies, Local Storage, Session Storage, IndexedDB, Web SQL, Scripts, Tracking Pixels, Browser Fingerprinting . The GDPR also recognizes options that require consent. Examples are: processing of special data categories, profiling, unnecessary data transfer to third parties, data export to third countries .
Mere expressions of respect such as “We take your data protection seriously” or pseudo-witty slogans such as “Do you want cookies” do not lead to legally valid consent . Before giving consent, the user must recognize without a doubt that consent to the processing of personal data is involved.
The user’s consent must be given actively. Individual services must not be preselected. Our tool therefore offers no possibility for pre-selection .
The GDPR stipulates that different processing operations must not be coupled . It must therefore be possible to select each service individually. IMPORTANT: it is not enough if the individual selection is hidden behind a “More settings” link. We have therefore implemented the selection on the first level of the popup .
Refusing to give must be as easy as giving consent. We offer the user three options: Click on the “Reject” button, click on the X in the upper right corner of the popup, click in the overlay next to the popup.
The user must be able to revoke their consent. The possibility of revocation must be just as easy as the possibility of consent. On request, we load the popup again so that the user can change his settings at any time .
The GDPR requires informed consent. The user must therefore be informed of the scope of the data processing before consent is given. Does “Marketing” inform that data is sent to Google Analytics, processed by Google for its own purposes and ultimately exported to the USA? no Therefore, the approach of letting users consent to analysis or marketing is unlawful.
Anyone who obtains consent for necessary services has not understood e-privacy and data protection. Necessary services do not require the consent of the user. If the user were allowed to consent, the user would also have to be able to revoke the consent. So what? turn off site? Necessary services have therefore not lost anything in the data protection pop-up . The data protection information must of course provide information about these services. Generator also makes us automatic.
Before consent is given, the user must be informed who is processing their data. This requires the following minimum information on the first level : service, company, country of headquarters . The mere name of the service is not enough.
The user must be informed of the scope of the data processing before consent is given. For this purpose, we have a second level for each individual service, on which the user can find out about the purpose , the processing operations . the storage period , any joint controllers and processors , the legal basis , possible export to third countries and the possibility of revocation are informed in understandable sentences.
The user must be informed in clear and simple language . With cookie lists like “ _ga_< container-id> – 2 years – Used to persist session state ” this requirement of the GDPR is not met . We explain the scope of data processing in easy-to-understand sentences .
Many websites have conflicting information in the privacy pop-up and on the privacy page. These websites are therefore not legally compliant . Cause: Most of the pop-up and data protection information comes from different providers. Our tool generates pop-up and data protection information from a single source .
Our expertise – your advantage
Benefit from our expert knowledge and sit back.
Website data protection has never been easier with our complete GDPR package for your website and web shop.
Preconfigured Services.
Individually expandable.
Make your website completely legal today
The all-in-one GDPR complete package for your website and web shop. You can test our service for 14 days free of charge.
-
from €10,00 excl. Vat
from €12,00 incl. VatPlus 20% MwSt.
