What data do website owners need to manage?

[shaownhasan]

The regulation refers to personal data, that is, all information related to people (name, IP address, bank details, etc.) and in particular to the combination of data that can lead to the identification of individual users; this means that cookies used to process personal data also fall under the GDPR.

In fact, cookies, apart from technical ones, are among the third-party services that collect information on users and the data controller is required to offer visitors to their site clear indications chinese overseas europe data on how the data is stored and processed.

The GDPR therefore requires that all services that store data of European users be expressly described in the policy, making users aware of what they provide to the services and how to modify or delete it.

Even if it doesn't seem like it, there are many personal data that are stored when consulting a website (and even more so in e-commerce) from which derive multiple obligations related to security.

Let's think for example about the passwords stored by users in forums and online shops, about the encryption to be implemented to protect the transmission of payment data, about the policies to be drafted with expertise to ensure that they have integrity, correctness and exhaustiveness.

The GDPR entails a more rigorous and transparent approach to data processing, in particular:

try to store as little personal data as possible
make the purposes for which the data is stored more evident and easier to find
process the accumulated data only with specific authorization, making the purposes of the processing perfectly understandable to the users
Owners of websites located in the European Union must clearly display their privacy policies by indicating: