Project description
TranslatedWe have a working website that collects personal data through contact forms, newsletter subscriptions, analytics scripts, and third-party embedded widgets, and now it needs to be fully brought into compliance with GDPR and general privacy regulations. The foundation of the task is a proper cookie consent solution: a clear banner that blocks optional scripts until visitors consciously give consent, remembers their choice, allows them to change or withdraw consent later, and maintains a secure record of what and when was accepted. Analytics, marketing pixels, and any embedded widgets must only fire after appropriate category consent is obtained, so this isn't a decorative banner but a real control mechanism built into page load logic.
Beyond consent, we want to properly integrate a privacy policy throughout the site and add links to it at every data collection point, with clear explanations in plain language: what we collect, why, how long we keep it, and who we share it with. We also need working processing of data subject requests so visitors can request access, export, or deletion of their stored information, with a transparent internal process and reasonable response timeframes for each request. Just as important is an audit of our actual data flows: we need to map where personal data enters the site, where it's stored, which external services receive it, and flag anything that looks risky, excessive, or undocumented so we can eliminate it beforehand.
The ideal contractor has practical experience implementing GDPR on real websites, understands the difference between mandatory and optional cookies, and can translate legal requirements into specific technical changes without breaking existing functionality. Describe similar projects you've completed and your general approach.
— Cookie consent banner with granular categories and script blocking
— Consent logging, storage, and simple withdrawal or re-consent
— Privacy policy integration and links at every data collection point
— Data subject request processing: access, export, and deletion
— Full data flow audit with risk report and remediation recommendations
Beyond consent, we want to properly integrate a privacy policy throughout the site and add links to it at every data collection point, with clear explanations in plain language: what we collect, why, how long we keep it, and who we share it with. We also need working processing of data subject requests so visitors can request access, export, or deletion of their stored information, with a transparent internal process and reasonable response timeframes for each request. Just as important is an audit of our actual data flows: we need to map where personal data enters the site, where it's stored, which external services receive it, and flag anything that looks risky, excessive, or undocumented so we can eliminate it beforehand.
The ideal contractor has practical experience implementing GDPR on real websites, understands the difference between mandatory and optional cookies, and can translate legal requirements into specific technical changes without breaking existing functionality. Describe similar projects you've completed and your general approach.
— Cookie consent banner with granular categories and script blocking
— Consent logging, storage, and simple withdrawal or re-consent
— Privacy policy integration and links at every data collection point
— Data subject request processing: access, export, and deletion
— Full data flow audit with risk report and remediation recommendations
Web development Cash, Bank transfer
