# GDPR compliant website: cookies, consent and privacy policy Source: // gdpr website compliance GDPR website compliance covers everything a site collects or loads: a cookie consent banner that blocks before consent, Consent Mode v2 for Google, privacy and cookie policies written on the real processing, and contact forms and analytics that start only after consent. On the sites we build it is included in the price, from €1,160 for a full website or €520 for a landing page; for an existing site we check it first and send a written quote within 24 hours. included in every site we build 24 hours quote for an existing site Consent Mode v2 for Google Analytics and Ads [Request a quote](https://www.nfw.run/contact-us) [All services and pricing](https://www.nfw.run/en#services) ## What does GDPR website compliance include? It covers everything about the site: what it loads, what it collects, what it states and how it asks for consent. We start from a check of what the site really does, because a correct privacy policy is written on the real processing, not on a template. - A check of everything the site loads: analytics, advertising pixels, tag managers, fonts, maps, videos and third party widgets. - A cookie banner with prior blocking: no profiling cookies and no tracking scripts before consent. - A reject button as visible as the accept one, preferences that can always be reopened, and consents recorded. - Consent Mode v2 configured, so Google Analytics and Google Ads respect the visitor's choice. - A privacy policy and a cookie policy written on your site's processing and updated when the site changes. - Contact forms with a notice, a separate marketing consent where needed, and data kept only as long as necessary. - Third party content (YouTube, Google Maps, social media) loaded only after consent or replaced by a preview. Where our work stops, we say up front: we handle the website, not the GDPR compliance of the whole company. Records of processing, internal appointments, supplier agreements and a DPO, if you need one, stay with your privacy consultant, and we are glad to work with them. ## What does a cookie banner really need? A compliant cookie consent banner blocks non essential tools until the visitor chooses, and makes rejecting as easy as accepting. Scrolling the page is not consent, boxes cannot come pre ticked, and in Italy the data protection authority treats closing the banner with the X as a rejection. The most common problem is not a missing banner but one that blocks nothing: it shows up, yet Google Analytics or the Facebook pixel start anyway. A banner like that looks compliant without being so, and it is the first thing we check. ## What should a privacy policy for a website say? A privacy policy for a website has to say who processes the data, which data it collects, for what purposes and on what legal basis, how long it keeps them, who it shares them with and which rights visitors have. The cookie policy lists the cookies and third party tools, with how long they last. We write them on the site in front of us: when you add a form, a map or a campaign, we update them. A generic text copied from another site is the quickest way to declare things your site does not do, and to leave out the ones it does. ## How much does GDPR website compliance cost? On the sites and landing pages we build, GDPR compliance is included in the price: a full website starts at €1,160 including VAT, a landing page at €520. For an existing site the cost depends on what it loads and how easy its platform is to work on: we check it first, then send a written quote. | | | | ----------------------------------------------------------------------------------------------------------------------------------------- | ------------ | | [New website, GDPR compliance included](https://www.nfw.run/website-design), Banner, policies, forms and analytics compliant from day one | from €1,160 | | [New landing page, GDPR compliance included](https://www.nfw.run/landing-page-design), The same guarantees, on a single page | from €520 | | GDPR compliance for an existing website, A check of the site, then a written quote within 24 hours | Custom quote | Prices include VAT and are starting prices. ## Not quite what you're after? [Web design servicesA custom website, live in a week. For businesses with several products or services to explain.](https://www.nfw.run/website-design) [Landing page designOne page, built around a single goal. Perfect for local or niche businesses.](https://www.nfw.run/landing-page-design) [SEO servicesA one-off SEO pass, or a monthly plan with new content, local SEO and Google Ads campaigns.](https://www.nfw.run/seo-services) [Website redesignIf you already have a website but it's slow or doesn't convert, we'll take care of that.](https://www.nfw.run/website-redesign) [AI search optimizationYour site readable and quotable by AI assistants: ChatGPT, Gemini, Claude and Google's AI Overviews.](https://www.nfw.run/ai-search-optimization) ## Sites built compliant from day one Two sites we built with the banner, the policies and the analytics configured before launch. [BI-K EnergyMulti-language, Technical SEO, Demo Booking](https://www.nfw.run/portfolio#bikenergy) [Ricerca Perdite 1972Local SEO, LocalBusiness, Lead Generation](https://www.nfw.run/portfolio#ricerca-perdite-1972) ## Frequently asked questions about GDPR website compliance ### What do I risk if my website is not GDPR compliant? A data protection authority can open an investigation after a complaint or an inspection, and the GDPR allows fines of up to €20 million or 4% of worldwide annual turnover, although for a small website real figures are far lower. The more frequent risk is another one: data collected without consent that you cannot use, for example in advertising campaigns. ### Is installing a cookie banner tool enough? The tool alone is not enough: it has to be configured so it really blocks scripts before consent, and the policies have to describe what the site does. We use the tool that fits your site best, including the one you already have, or a custom solution. ### Do you offer GDPR consulting for the company, or a DPO service? No. We handle the website: banner, consent, policies, forms and analytics. Records of processing, internal appointments, supplier agreements and a DPO are work for a privacy consultant or a lawyer: if you have one, we work with them; if you do not, we tell you. ### Is Google Analytics GDPR compliant? It can be, if it starts only after consent, with Consent Mode v2 configured and a privacy policy that declares it. If you would rather not ask for consent for statistics, we can set up an analytics tool that uses no profiling cookies. ### Do you work on WordPress sites or sites built by others? Yes. The initial check tells us what the site loads and how easy its platform is to work on; on a WordPress site the work is usually on plugins and theme, on a site built in code directly on the code. ## Let's check what your site loads. Send us the address, we look at what starts before consent and what the policies are missing, then send a written quote within 24 hours. [Request a quote](https://www.nfw.run/contact-us) [See our work](https://www.nfw.run/portfolio)