Personal data: information to prepare for your website

Privacy information should match the website’s actual processing. Start with an inventory of forms, accounts, orders, measurement and external services.

Describe each use

Identify purpose, necessary data, recipients and appropriate retention. Determine the applicable legal basis with the responsible person. Consent is not automatically the basis for every processing activity.

The CNIL explains how to inform people. Information should be accessible at the relevant moment, including near forms, and match actual behaviour.

Plan requests and provider relationships

Organise a rights-request contact route and handling procedure. Identify hosting, messaging and other providers. Review processing arrangements and any transfers for the services actually used.

Update alongside the website

A new measurement tool or feature can change the inventory. Update information and checks accordingly. Our technical privacy review guide compares published information with site behaviour.

This guide prepares questions for review; specific situations may require the organisation’s privacy owner or qualified advice.

How Belentia can help

Belentia offers assessments of an authorised web scope, with findings and remediation priorities. Specialist or certification audits require a separate scope.

Explore web security assessment services · Describe your project