Map of Europe

Version 0.8.2 (August 2018)

General Data Protection Regulation

Privacy Notice Generator

"The controller shall take appropriate measures to provide any information referred to in Articles 13 and 14... in a concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child." - Article 12

European Union flag

GDPR Notice

Testing XML here . Go away

Privacy Notice Code

Copy this code into an html document.

You will also need to download the following Javascript and CSS files:
and place them in the js/ and css/ directories, respectively.


Article 13 (1)(a) & (b) Identity and Contact Details and Article 14 (1)(a) & (b)

Representative in the EU

See Article 27 for obligations to appoint a representative.

Data Protection Officer

See Article 37 for obligations to appoint a data protection officer.


Article 13 (1)(c) Purpose and Article 14 (1)(c)

What is the purpose for processing this personal data?

Add additional other purpose field


Article 13 (1)(c) & (d) Legal Basis and Article 14 (1)(c) and (2)(b)

What is your legal basis [Article 6(1)] for processing this personal data?

Add additional other purpose field


Article 13 (1)(e) & (f) Sharing of personal data and Article 14 (1)(e) & (f)

Who will personal data be shared with?

Add recipient of personal data

Select all countries, deemed adequate (under Article 45), to which personal data will be transferred

For countries not deemed adequate, select all safeguards under which personal data will be transferred

How may the data subject obtain a copy of the above safeguards?
Transfers under Article 49 subparagraph 2
Where a transfer could not be based on a provision in Article 45 or 46, including the provisions on binding corporate rules, and none of the derogations for a specific situation referred to in the first subparagraph of this paragraph is applicable, a transfer to a third country or an international organisation may take place only if the transfer is not repetitive, concerns only a limited number of data subjects, is necessary for the purposes of compelling legitimate interests pursued by the controller which are not overridden by the interests or rights and freedoms of the data subject, and the controller has assessed all the circumstances surrounding the data transfer and has on the basis of that assessment provided suitable safeguards with regard to the protection of personal data. The controller shall inform the supervisory authority of the transfer. The controller shall, in addition to providing the information referred to in Articles 13 and 14, inform the data subject of the transfer and on the compelling legitimate interests pursued.
Add additional other purpose field


Article 13 (2)(a) Retention and Article 14 (2)(a)



Article 13 (2)(b) Access and Article 14 (2)(c)

Inform the data subject of the right to request access, rectification or objection and the right to data portability

Article 13 (2)(c) Consent and Article 14 (2)(d)

Inform the data subject of right to withdraw consent

Article 13 (2)(d) Complaints and Article 14 (2)(e)

Inform the data subject of the right to lodge a complaint


Article 13 (2)(e) Required

Why is personal data required?


Article 13 (2)(f) Automated Decision Making and Article 14 (2)(g)

Describe the automated decision making


Article 14 (2)(f) Sources of Personal Data

Article 14 concerns personal data not obtained from the data subject. Article 29 Working Party's Guidelines on the right to "data portability" has some potentially related guidance on this.
Select all sources of personal data

Add additional source


Article 14 (1)(d) Categories of Personal Data

What categories of personal data are collected?








When you've completed the form, you can condense the notice to show how it will be displayed for the user.

Choose a default language
Choose CDN or Local files

to learn more.

      Your data is shared with:

        Your data is not shared by us with others.

        Some of your data may be sent outside the European Union and European Economic Area or to an international organization.

        Your data may be sent outside the European Union and European Economic Area in compliance with Article 49(1) paragraph 2 of the General Data Protection Regulation. Sharing your data, in this case, is needed to:

          You have the right to complain to an authority.

          Schools Schools



          Electronic DevicesElectronic

          Health Care ProvidersHealthcare Providers

          Insurance CompaniesInsurance

          Financial InstitutionsFinancial

          Social NetworksSocial

          Government RecordsGovernment

          Data BrokersData

          The Public InternetThe Public

          Monitoring EquipmentMonitoring