Improvements ?

Hi @bonaldi,

The GDPR requires that the privacy policy must contain the identity and contact details like address, phonenumber, email or social media, so a link to the contact form won’t suffice.

Hi Bonaldi,
Art. 13 GDPR may not prescribe the format or modality by which such information as the email address should be provided to the data subject but does make it clear that it is the data controller’s responsibility to take “appropriate measures” in relation to the provision of the required information for transparency purposes. WP29 recommends that where a data controller has an online presence, an online privacy statement/notice should be provided.

WP29 also recommends the following:

Both Articles 13 and 14 GDPR refer to the obligation on the data controller to “provide the datasubject with all of the following information…” The operative word here is “provide”. This means that the data controller must take active steps to furnish the information in question to the data subject or to actively direct the data subject to the location of it (e.g. by way of a direct link, use of a QR code, etc.). The data subject must not have to actively search for information covered by these articles amongst other information, such as terms and conditions of use of a website or app. (…) WP29 recommends that the entirety of the information addressed to data subjects should also be available to them in one single place or one complete document (e.g. whether in a digital form on a website or in paper format) which can be easily accessed should they wish to consult the entirety of the information.

So not mentioning the email address in the privacypolicy at all or “hiding” it somewhere else on the website is not a good thing in my point of view.

That being said, inserting (optionally) a link in the privacypolicy to the contact form of the site would be a nice extra for some users, and I will ask @rogierlankhorst to put it on our backlog.