The General Data Protection Regulation (GDPR) came into force on 25 May 2018 and affects, on the one hand, all organisations that are based in the EU and, on the other hand, all organisations that process personal data of individuals who are based in the EU. The new guidelines give users new rights in relation to the handling of their personal data, for example user data on a website.
The players
Data source
Responsibility holder
Data processing
Legal notice
The information on this page is not binding legal information and should not be confused with legal advice from a lawyer. MD Systems and Kampaweb GmbH do not assume any liability. Due to the different possible uses of the systems and the different organisation-specific processes, the conformity to the applicable law must be checked individually.
New laws and obligations
The new regulation also applies retroactively to data already collected, which must therefore be reinterpreted.
Duty to inform
Consent
Right to information
Transferability
Authorization
Deletion
Primer is ready for GDPR
MD Systems and Kampaweb GmbH have dealt intensively with the topic of GDPR in recent months. Primer meets all the technical requirements so that you can set up your website in compliance with GDPR.
Here are the most important ones at a glance:
To ensure secure data transmission, all Primer websites are already on https / SSL. With Let's Encrypt, there are no recurring costs for certificates these days. In addition, Google also favors secure sites in the search results.
With the start of the GDPR, consent must also be obtained for web tracking before it starts. This means that every website needs an element where the website visitor is given the opportunity to explicitly agree to the tracking or to reject it.
In order to comply with the information obligation, there must be a notice on each form stating what happens to the data collected. We create a generic text that is attached to each form. The text can be adapted by the customer per form if necessary.
On this page, we compile information for customers and develop approaches for the GDPR-compliant use of Primer. We do our best to ensure that this information covers the most important areas of the GDPR. However, please note the legal notice.
We are happy to implement even more extensive, customer-specific measures for individual customers. We also offer support in the development of individual solution proposals.
Consents must be verifiable.
Forms in Primer have an export function to help customers comply with the right of access and the right to data portability.
Frequently asked questions
The GDPR is already enforced since 24 May 2016 and its application is mandatory from 25 May 2018.
If you process data of European users on your website (cookie tracking) or in your CRM, you must comply with the EU GDPR.
No. So far, double opt-in is not mandatory. What is prescribed, however, is a clear, active and informed consent.
In the GDPR, this reads as follows:
"Consent should be given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of personal data relating to him or her, such as by a written statement, including by electronic means, or an oral statement. This could include ticking a box when visiting an internet website, choosing technical settings for information society services or another statement or conduct which clearly indicates in this context the data subject's acceptance of the proposed processing of his or her personal data. Silence, pre-ticked boxes or inactivity should not therefore constitute consent. Consent should cover all processing activities carried out for the same purpose or purposes. When the processing has multiple purposes, consent should be given for all of them. If the data subject's consent is to be given following a request by electronic means, the request must be clear, concise and not unnecessarily disruptive to the use of the service for which it is provided."
No, data may continue to leave the EU area. Under the GDPR, the rules regarding the transfer of personal data outside the EU do not change. As long as personal data is "adequately protected", it can also be transferred outside the EU. However, the person transferring the data must be informed about a transfer of the data.