Skip to content
Personal, from the Hildesheim region

Law & data protection

Websites and online shops come with duties that should be reviewed regularly: imprint and privacy policy, consent for cookies, maps, videos and third-party fonts, data processing agreements with hosts and service providers, mandatory information on prices and shipping, and the requirements of the German Accessibility Strengthening Act. This category puts those topics into practical order: what applies to whom, which details belong where, and which settings can be implemented technically without making the site unusable. We name typical error patterns and testing steps. The articles do not replace individual legal advice, but they prepare the conversation. We also add a review routine: which points belong back on the table after every relaunch, every new service and every change to the assortment?

Withdrawal button since 19 June 2026: what the website must doDecision path: do I need the function?1 Contract via online interface?website, order form, booking tool, appSec. 356a (1)2 Consumer as contracting party?pure B2B orders are not coveredSec. 13 BGB3 Right of withdrawal exists?check exemptions (Sec. 312g (2))Sec. 312g BGBall three answers: yesfunction is mandatoryat least one nono function neededCancellation button under Sec. 312k BGB applies since 1 July 2022 -separate duty, separate label, separate confirmation.Withdrawal flow: four steps to confirmation1Button: withdraw from contractpermanently available, prominentSec. 356a (1)2Enter the contract detailsname, contract reference, contactSec. 356a (2)3Confirm: confirm withdrawala second button sends it offSec. 356a (3)4Acknowledgement in the inboxtext form, date and timeSec. 356a (4)Sent in time counts as received in time (paragraph 5).The period is 14 days without giving reasons (Sec. 355 (2) BGB).Timeline of the rule13 exemptions: Sec. 312g (2)22 Nov 2023Directive (EU) 2023/267319 Dec 2025transposition deadline for member states19 Jun 2026Sec. 356a BGB becomes applicable
Law & data protection Jul 27, 2026

Withdrawal Button 2026: What Your Website Now Needs

Since 19 June 2026, Section 356a BGB requires an electronic withdrawal function. Who is affected, who is not - and how to implement it properly in your shop.

13 min read
Legal notice check: Section 5 DDG in practiceMandatory details under Section 5 (1) DDG1Name, address, legal form, representation2Fast electronic means of contact3Supervisory authority where licensed4Register and registration number5Chamber, professional title, rules6VAT ID or W-IdNr, where one exists7Notice of winding-up or liquidation8Audiovisual media: country, regulatorReachable within two clicksAny subpageFooter linkLegal noticeClick 1Click 2Typical legacy issues foundCites Section 5 TMG, not Section 5 DDGLink to the ODR platform, gone since 2025P.O. box instead of a serviceable addressiW-IdNr: where one exists, not from a deadline.Once assigned, it belongs on the checklist.50,000 EURmaximum fine (Sec. 33 DDG)8 itemsmandatory details in Sec. 5 (1) DDG2 clicksmaximum distance to the notice
Law & data protection Jul 22, 2026

Legal Notice 2026: Check Your DDG Details Correctly

Section 5 DDG replaced Section 5 TMG: which details belong in your legal notice, who is obliged, how reachable it must be and what really applies to the W-IdNr.

19 min read
AI labelling from 2 August 2026: who labels what?Website of a local businessArt. 50(1)Chatbot: recognisable as AIdisclosure on direct interactionArt. 50(2)AI image in the gallerymarked machine-readablyArt. 50(4)Convincingly real depictionvisible notice requirednot affectedMood shot, no real personno deepfake, no disclosureWho has to do what?Providermaker of the AI system(1): chatbot recognisable(2): machine-readableDeployeryour business(4): disclose deepfakevisible on the page78%generate texts, imagesor code with AI43%use AI in customercontact and supportDIHK Digitalisation Survey 2026 (4,686 companies)AI Act timeline1 Aug 2024AI Act in force10 June 2026Code of Practice published2 Aug 2026Art. 50 applies to websites2 Aug 2027full applicability
Law & data protection Jul 20, 2026

AI Labelling from August 2026: What Websites Must Do

From 2 August 2026 Article 50 of the EU AI Act applies: what chatbots, AI images and AI texts on your website must disclose - and what expressly need not.

13 min read
Day-Care Website: fill vacant places fasterOccupancy plan for day care todayoccupiedfree - bookable now6 free places - visible on the website at onceFrom the website to a booking request1Relatives search onlinemostly mobile and evenings (Bitkom)2Website shows free placescurrent occupancy visible3Daily routine and transportclearly explained4Booking request submitteda visit becomes contact70.5%day-care occupancy, Oct. 2023 (pflegemarkt.com)86%of people in need of care live at home (Fed. Stat. Office)89.7%residential care occupancy, 2023 (Statista)Show free places | Explain the daily routine | Show transport | Build trust | Booking request
Law & data protection Jul 15, 2026

Cookie Banners 2026: Getting GDPR Right Online

What does Section 25 TDDDG require? When you need a cookie banner, how to build it GDPR-compliant and which mistakes get you fined - a practical guide.

13 min read
BFSG: When Your Website Must Be AccessibleMandatory since 28 June 2025 - active enforcement from 202628 Jun 2025law takes effectfrom Aug 2025first warning letters2026active enforcementAffected: must be accessibleonline shops and product salesbinding online appointment bookingbanking and telecom servicescontract conclusion on the websitebooking and travel portalsMicro-enterprise exemptiononly if ALL three points apply:1fewer than 10 employees2at most EUR 2m annual turnover3services only, no productsselling a product online voids the exemptionFines up to EUR 100,000for severe or repeated violationsAccessibility statementa separate duty - often forgottenMost common WCAG errors on home pages (WebAIM Million 2025)Low text contrast79.1 %Missing image alt text55.5 %Form fields without labels48.2 %

BFSG 2026: When Your Website Must Be Accessible

The BFSG has applied since mid-2025, and enforcement begins in 2026. Who is affected, who qualifies for the micro-enterprise exemption and what does a breach cost?

13 min read