Pay attention to data protection risks on websites: Here’s how [Anzeige]

If you operate a homepage or other online presence, you should not forget one important aspect: data protection. Above all, if tools from third-party providers are integrated, they must be checked in accordance with data protection law and integrated in accordance with the legal requirements.

One of the biggest challenges is the transmission of IP addresses and other (user) information to US providers. These transmissions take place, for example, as soon as the service and software are used to operate a company website.

In particular, this applies, among other things, to the use of Google’s services and software. Probably the most well-known service for user analysis is Google Analytics. However, among other things, YouTube and Google Fonts are also part of Google services, which people like to use when operating websites.

Website operators receive reminders or claims for damages

There are currently more and more reports of letters from lawyers or claims for damages to website operators. The claim for damages is due to a violation of law in the context of data transfer to the USA.
The companies are mainly accused of transferring user data to the USA without an appropriate legal basis and thus violating the “client’s right to informational self-determination”.

It is not uncommon for the claim for damages to be put under pressure with a reference to different court decisions (in which the plaintiff was actually awarded damages in a similar situation).

Every website operator is obliged to check

Regardless of whether you receive such a letter or not, every company and every website operator is responsible for its own homepage and thus for the data protection check and data protection-compliant use of the respective tools and is therefore accountable for their legality.

It is also important to mention that the obligations mentioned are not only to be taken into account for “official” and “ready” websites. These requirements and obligations apply to all websites that can be accessed via the Internet.

Have you received such a warning letter?

How to react when receiving such a letter and whether or to what extent such letters should be taken seriously cannot be assessed in general. If you receive such a letter, it is best to sit down contact your external data protection officer immediatelyin order to coordinate the further procedure and planning together.

Nevertheless, it should be checked whether you are actually passing on data to third parties (possibly even from third countries) such as Google without justification, or whether the accusation and the claim were made without justification. This is the only way to avoid the risk of fines and possible claims for damages under data protection law in the best possible way.

Do you need support with operational data protection?

The team of experts at Aigner Business Solutions will be happy to support you with all questions relating to data protection:

site: aigner-business-solutions.com
Phone: +49 (0) 8505 91927 – 0