Cookies and GDPR on a company website: what you need to handle

A small company website usually does not have to deal with complicated things, but two rules almost always apply: consent for cookies and information about how personal data is handled. This article is only an overview, not legal advice.

Cookies

Cookies are small files a site stores in the browser. Those strictly necessary for the site to work do not need consent. Those used for statistics or advertising need the visitor's consent in advance. That is why there is a cookie bar on which refusing is as easy as accepting.

Can you do without the bar?

Yes: if the site uses no tracking or advertising cookies, no bar is needed. For a small informational site that is often enough. If you need statistics, there are tools that work without cookies.

Personal data and the form

A form collects a name and contact, so a short notice belongs with it: who processes the data, why, for how long and who to contact.
A link to the policy belongs visibly next to the form and in the footer.
Send data only where necessary and do not store more than you need.

Company details

The site should show details of the operator: name, address, contact. If you have a company ID, it is shown. Online stores have a larger scope.

What to do

When we build a site we set up the bar and the policy page according to what the site really uses. For your specific case, though, talk to a lawyer. Related running questions are in domain and hosting.

Send us your web address.

In two days you get one page back.

Free, no obligation. We do not need access to any of your accounts.

How we handle your data

Matyáš Musela · 733 230 308 · Filip Berčík · 774 915 200 · aetheron@aetheron.cz · Prague

What people in your trade actually search for
How much of it reaches you today
What we would do first, and why