GDPR compliant website: cookies, consent and privacy policy
GDPR website compliance covers everything a site collects or loads: a cookie consent banner that blocks before consent, Consent Mode v2 for Google, privacy and cookie policies written on the real processing, and contact forms and analytics that start only after consent. On the sites we build it is included in the price, from €1,450 for a full website or €650 for a landing page; for an existing site we check it first and send a custom quote, based on the complexity, the scale of the project and the technologies used.
What does GDPR website compliance include?
It covers everything about the site: what it loads, what it collects, what it states and how it asks for consent. We start from a check of what the site really does, because a correct privacy policy is written on the real processing, not on a template.
- A check of everything the site loads: analytics, advertising pixels, tag managers, fonts, maps, videos and third party widgets.
- A cookie banner with prior blocking: no profiling cookies and no tracking scripts before consent.
- A reject button as visible as the accept one, preferences that can always be reopened, and consents recorded.
- Consent Mode v2 configured, so Google Analytics and Google Ads respect the visitor's choice.
- A privacy policy and a cookie policy written on your site's processing and updated when the site changes.
- Contact forms with a notice, a separate marketing consent where needed, and data kept only as long as necessary.
- Third party content (YouTube, Google Maps, social media) loaded only after consent or replaced by a preview.
Where our work stops, we say up front: we handle the website, not the GDPR compliance of the whole company. Records of processing, internal appointments, supplier agreements and a DPO, if you need one, stay with your privacy consultant, and we are glad to work with them.
What does a cookie banner really need?
A compliant cookie consent banner blocks non essential tools until the visitor chooses, and makes rejecting as easy as accepting. Scrolling the page is not consent, boxes cannot come pre ticked, and in Italy the data protection authority treats closing the banner with the X as a rejection.
The most common problem is not a missing banner but one that blocks nothing: it shows up, yet Google Analytics or the Facebook pixel start anyway. A banner like that looks compliant without being so, and it is the first thing we check.
We're based in Verona, Italy, and businesses in the city have a page of their own, built on our report on Verona's websites, with how many of them actually use a consent tool: GDPR compliance in Verona.
What should a privacy policy for a website say?
A privacy policy for a website has to say who processes the data, which data it collects, for what purposes and on what legal basis, how long it keeps them, who it shares them with and which rights visitors have. The cookie policy lists the cookies and third party tools, with how long they last.
We write them on the site in front of us: when you add a form, a map or a campaign, we update them. A generic text copied from another site is the quickest way to declare things your site does not do, and to leave out the ones it does.
How much does GDPR website compliance cost?
On the sites and landing pages we build, GDPR compliance is included in the price: a full website starts at €1,450 including VAT, a landing page at €650. For a site we did not build we offer the same service, but the quote is custom: it depends on the complexity, the scale of the project and the technologies used (platform, plugins, third party scripts, forms, analytics). We check the site first, then send a written quote.
| New website, GDPR compliance includedBanner, policies, forms and analytics compliant from day one | from €1,450 |
| New landing page, GDPR compliance includedThe same guarantees, on a single page | from €650 |
| GDPR compliance for an existing websiteSite not built by us: custom quote based on complexity, scale and technologies | Custom quote |
Prices include VAT and are starting prices.
Not quite what you're after?
Sites built compliant from day one
Two sites we built with the banner, the policies and the analytics configured before launch.
Frequently asked questions about GDPR website compliance
Let's check what your site loads.
Send us the address, we look at what starts before consent and what the policies are missing, then send a custom written quote.