Websites and online shops come with duties that should be reviewed regularly: imprint and privacy policy, consent for cookies, maps, videos and third-party fonts, data processing agreements with hosts and service providers, mandatory information on prices and shipping, and the requirements of the German Accessibility Strengthening Act. This category puts those topics into practical order: what applies to whom, which details belong where, and which settings can be implemented technically without making the site unusable. We name typical error patterns and testing steps. The articles do not replace individual legal advice, but they prepare the conversation. We also add a review routine: which points belong back on the table after every relaunch, every new service and every change to the assortment?
On this page you will find all posts on the topic “Law & data protection”. The newest posts are at the top.
Below each title there is a short text about it. Click on a post. Then you can read the whole text.
Above the list you also see the other topics. At the bottom, a link takes you back to all posts.
Business emails count as business letters in Germany. Which mandatory details each legal form must put in the signature, with a sample and a year-end checklist.
Medical reports, ID copies and payslips sent as attachments are a risk. How to build an upload form: fields, storage, notification and a deletion period.
When a business in Hildesheim changes hands, the domain, Google profile and customer file do not move across on their own. Timeline and rules for the handover.
Reviews on your own website: what Section 5b(3) UWG requires, three practical ways to verify them and what the customer release has to cover.
If an energy certificate exists, every property listing needs five mandatory details. Here is how they become required fields in the record, appear in list, detail page and PDF, and flag their own expiry.
Services, titles, before-and-after images, appointment forms: what may go on a practice website, what is tied to conditions and what gets challenged regularly.
Which services behind a website count as processing on your behalf, what the Article 28 GDPR contract must contain and how the record of activities follows.
A business name can be covered at once by a registered mark, a company sign, a personal name right and a registered firm. How to check before you commit.
Have a negative or fake Google review removed: what the law really allows, how the removal process works and how local businesses protect their reputation.
Since 19 June 2026, Section 356a BGB requires an electronic withdrawal function. Who is affected, who is not - and how to implement it properly in your shop.
Section 5 DDG replaced Section 5 TMG: which details belong in your legal notice, who is obliged, how reachable it must be and what really applies to the W-IdNr.
From 2 August 2026 Article 50 of the EU AI Act applies: what chatbots, AI images and AI texts on your website must disclose - and what expressly need not.
What does Section 25 TDDDG require? When you need a cookie banner, how to build it GDPR-compliant and which mistakes get you fined - a practical guide.
The BFSG has applied since mid-2025; enforcement begins in 2026. Who is affected, who qualifies for the micro-enterprise exemption and what does a breach cost?