Privacy policy and imprint

What we check

On the home page we look for links with typical labels such as "Privacy", "Privacy policy", "Privacy notice", "Imprint", "Legal notice" or "Impressum", also in German, French and Italian. Then we open the linked pages and check:

• Is there a link? A missing link to the privacy policy is a serious defect. A missing imprint is a warning in markets that require one (Germany and Switzerland); elsewhere we do not check for it.
• Does it work? If the page returns an error, we treat it like a missing link.
• Does the page have content? If it contains fewer than about 400 characters of text, it is probably a placeholder. This results in a warning.

The rules follow the market you start the check in: the international version and the versions for the United States, the United Kingdom, Germany and Switzerland. This is an automatic preliminary check, not legal advice.

Why it matters

Almost every website processes personal data: the IP address of every visitor, form input, data sent to analytics, maps, videos or fonts. Data protection laws require the operator to say who is responsible, which data is processed for what purpose, to whom it goes and to which countries.

Without these pages the website also looks less trustworthy. Many visitors look for the legal notice to check who is behind the website.

Rules by market

• European Union (GDPR): Articles 13 and 14 of the GDPR require a privacy notice. In Germany section 5 of the Digital Services Act (DDG) also requires an imprint with name, postal address and contact details; Austria has a similar duty.
• United Kingdom (UK GDPR): a privacy notice is required. There is no imprint duty, but companies must show their registered name, number and address.
• United States: there is no federal privacy law, but state laws such as the CCPA in California and CalOPPA require a privacy policy as soon as a website collects personal data from residents of that state.
• Switzerland (revised FADP): a privacy policy is required, and the Federal Act against Unfair Competition requires an imprint for business websites.

How to fix it

Privacy policy

1. List which services the website uses: hosting, contact form, analytics, maps, videos, fonts, newsletter, booking tools.
2. Create the policy for the markets you serve, with a generator or the help of a professional.
3. Note the date ("Last updated: October 2026").
4. Link it in the footer of every page.

Imprint or legal notice

Where required, and good practice everywhere:

• full company name with legal form,
• postal address (no P.O. box),
• email address,
• if available: company register entry and VAT number.

Link it prominently

The links belong in the footer of every page, clearly labelled. Do not hide them in a menu that has to be opened first.

WordPress and website builders

WordPress has a function under "Settings › Privacy" to define a privacy page. Wix, Squarespace and Jimdo offer templates for legal texts. Check whether they fit the law of your market and name all services used.

How to check it yourself

Scroll right to the bottom of the home page. Do you find the links to the privacy policy and, where required, the imprint at once, and do they open a page with full content?

Frequently asked questions

Does a small website really need a privacy policy?

As a rule, yes. Even a contact form, analytics, embedded maps or fonts from Google process personal data such as the IP address. The data protection laws of the EU, the UK, Switzerland and many US states require the operator to inform about this.

Which countries require an imprint?

Germany, Austria and Switzerland require business websites to name the operator with a postal address. The UK and the US have no imprint duty, but company and contact details are expected there too, for example under the UK Companies Act.

Is this check legal advice?

No. We check automatically whether the pages exist and are reachable, not whether their content is legally complete. For binding information, contact a professional.