GDPR: What You Need to Know for Your Website

You may have heard the term General Data Protection Regulation or GDPR being bandied about recently. You know that it’s some kind of new EU regulation but what exactly does it mean and how does it affect you as a website owner?

We’ve prepared a short overview to help you understand the new regulation a bit better and how it affects your website. At Jimdo we’re also preparing to get everything ready and are confident we’ll meet the GDPR regulations for May 2018. Find out more about what’s coming.

Please note: None of the information contained herein is intended as legal advice. Jimdo cannot and does not provide legal advice in accordance with the German law as regards the provision of legal services. Should you have any questions at any point we encourage you to consult a legal expert.

What is the GDPR?

The GDPR is a European Union (EU) privacy law that aims to strengthen and unify privacy laws across Europe and protect citizens’ personal data. The regulation will come into force on May 25th, 2018. The most important change for you to know about the GDPR is that the rules for processing personalized data are now standardized across the EU.

I’m based outside the EU, does this still apply to me?

It depends! If you’re an organization that does business with European Union citizens, provides goods or services to the EU or has a website that tracks EU users’ behavior, then yes. If you’re not, then you can go ahead and watch funny cat videos on YouTube :)

What is Jimdo doing?

We’re reviewing our website builder and ensuring that the basic framework for your website is GDPR compatible. These are some of the features we will finalize in time for May that can be used for your Jimdo Creator website:

  • The possibility to insert a link to the privacy policy in the contact form
  • The possibility to insert a link to the terms and conditions and privacy policy in the shop order form
  • The possibility to insert links with editable text fields in the shop order form

All of these features will help you clearly display your website Privacy Policy anywhere you want, in accordance with the GDPR. We’ll inform you as soon as these features are available.

A Privacy Policy is like a personal letter to your customer in which you specify and describe how you intend to handle your site visitor and customers’ personal information. What is contained in that letter is, of course, similar to your Jimdo site and entirely up to you. Here are some useful guidelines to follow.

How does this affect me?

If you have a regular Jimdo website you’ll need to review your Privacy Policy, data collection policies and then decide what info you’re legally obliged to inform your site visitors of and where you need consent first to make sure it is compliant with GDPR principles.

If you do have any widgets, cookies, Google Analytics or elements (such as a contact form or a comments section on your website etc.) that collect, transmit, store or otherwise use the personal data of EU citizens, you’ll need to check these comply with the GDPR. If they don’t, we recommend removing them from your website. You can try out this self-assessment tool to give you a better idea of what you need to check.

How can I ensure that widgets on my website comply with the GDPR?

If you’re not sure not whether the widgets you’ve added meet the requirements we suggest checking the company website for info or contacting them directly to find out if they comply with the GDPR.

Help! I don’t know what widgets or elements I have on my website?

There are several browser add-ons that can assist you such as Ghostery or Privacy Badger that will display the cookies being used on your website plus all the services you have integrated.

How can I ensure that my Privacy Policy complies with the GDPR?

You’re going to need to review your Privacy Policy. Here are some resources that can help you do it. The tools below are a great starting point, but if you have additional questions it’s always a good idea to consult a legal or privacy expert.

Where can I learn more about the GDPR?

Here are some helpful resources that can provide more information…

To make sure that the privacy policy of your Jimdo site meets all legal requirements please feel free to consult our notes above, the Jimdo Privacy Policy, our help page on privacy and your own website. We also recommend you consult a data protection expert for any further questions.

Admittedly, these guidelines may sound a bit general because they can’t be tailored to every website but we still want to provide you with the gist of what will change.

As the owner or manager of the content on your Jimdo page, you should now check whether your content complies with the new regulations. In the meantime, here at Jimdo, we’ll also continue to get everything ready from our side.