The privacy notice is the information with which a controller informs data subjects about the processing of their personal data, typically on a website.
Mandatory information
The content follows from the information obligations under the GDPR. It includes in particular:
- name and contact details of the controller and of the data protection officer
- purposes and legal bases of the processing
- legitimate interests, where the processing is based on them
- recipients and transfers to third countries
- retention period
- data subject rights and the right to lodge a complaint with the supervisory authority
Form and maintenance
The information must be concise, transparent, intelligible and easily accessible. On websites, it should be reachable with one click from every page.
A privacy notice is only as good as it is up to date. New tools, plug-ins or service providers require it to be updated.
Legal provisions
- Art. 12 GDPR
- Transparent information and form.
- Arts. 13 and 14 GDPR
- Content of the information obligations where data is collected from the data subject or from other sources.
Related terms.
Information obligations Information obligations require controllers to inform data subjects transparently about who processes their data, for what purpose and on what basis. Art. 12 GDPR 
Cookies Cookies are small text files that a website stores on the user's terminal device in order to recognise the user or save settings. Section 25 TDDDG Consent management Consent management refers to obtaining, documenting and managing consent, typically through a consent management platform on websites and in apps. Section 25 TDDDG
All terms from A to Z Cookies Cookies are small text files that a website stores on the user's terminal device in order to recognise the user or save settings. Section 25 TDDDG Consent management Consent management refers to obtaining, documenting and managing consent, typically through a consent management platform on websites and in apps. Section 25 TDDDG 