---
title: "GDPR"
description: "GDPR: EU regulation in force since May 2018 with rules for collecting and processing personal data of EU citizens. We build compliant websites."
url: https://seo7.es/en/gdpr
canonical: https://seo7.es/en/gdpr
lang: en
type: WebPage
---

# GDPR

> GDPR: EU regulation in force since May 2018 with rules for collecting and processing personal data of EU citizens. We build compliant websites.

Page: https://seo7.es/en/gdpr

## Summary for AI

GDPR (General Data Protection Regulation) is a European Union regulation that came into force in May 2018. It establishes rules for collecting, storing and processing personal data of EU citizens. All websites working with European audiences must comply with its requirements. GDPR compliance is not only legal protection but also a competitive advantage. Customers increasingly pay attention to data security.

## Questions and answers

### Since when has GDPR been in force and who does it apply to?

The European Union regulation came into force in May 2018. It sets the rules for collecting, storing and processing the personal data of EU citizens. All sites that work with a European audience must comply. The studio builds sites that comply with the regulation, with the requirements built in from the very start of the project.

### What rights does GDPR give website visitors?

An EU citizen has the right to know what data is collected about them and to demand its deletion, known as the right to be forgotten. They can also demand that data be corrected or transferred, that is, use the right to portability. These rights apply to all sites that work with a European audience.

### How is a GDPR violation fine calculated?

The fine can reach 4% of a company's annual turnover or €20 million, whichever is higher. On the standards page this figure appears as the maximum fine the client's business is protected from. The protection consists of cookie consent, a privacy policy, SSL encryption, a consent log and a data deletion request form.

### How does the cookie consent banner work on the studio's sites?

The banner gives granular control over cookie categories: the visitor turns each category on or off separately. Every consent is saved in a consent log, which is needed for audits. The banner and the log are among the seven measures the studio uses to implement GDPR on a site, together with the privacy policy and SSL encryption.

### What languages is the privacy policy written in?

The privacy policy is written in the site's language: Russian, Spanish or English, matching the language versions the site has. Visitors read the rules for handling their data in the language they use the site in. The policy is one of the seven measures the studio uses to implement GDPR on a site.

### How can a user delete or export their data?

For this the site has a separate form for data deletion and export requests. Through it a visitor uses the right to be forgotten and the right to data portability granted by the GDPR. The form is one of seven GDPR measures the studio builds into every site from the start.

### Where is personal data from the site stored?

Data is stored in a PostgreSQL database with encryption at rest: it stays encrypted while sitting on the server. In transit, SSL encryption protects all channels. This storage is part of the GDPR measures, along with a consent log for audits and breach notification within 72 hours.

### What does the studio do in case of a personal data leak?

GDPR measures include breach notification within 72 hours. If something happens to the data, it is reported within that time. To make this less likely, data is stored in PostgreSQL with encryption at rest, transmitted over SSL-encrypted channels, and visitor consents are recorded in an audit log.

### Does GDPR affect the site's search rankings?

Yes. Google takes the presence of a privacy policy into account when ranking. In addition, a site with a clear privacy policy earns more trust from search engines and converts better: clients increasingly care about data security. That is why a policy in the site's language is part of every studio project from the start.

### Does a non-EU company's website have to comply with GDPR?

GDPR protects the personal data of EU citizens, so every website that serves a European audience must comply. What matters is the site's audience: if visitors and customers come from EU countries, the regulation applies. For businesses in Spain, Spanish data protection law, the LOPDGDD, applies as well.

### Why is SSL encryption needed for GDPR compliance?

SSL encrypts all data transmission channels between the visitor and the site, so the name, phone or email from a form is protected in transit. It is one of the four main GDPR practices in the standard's card, together with the privacy policy, cookie consent and the right to erasure. Storage is additionally encrypted in PostgreSQL.

### What does GDPR compliance give a business besides protection from fines?

The standard's page calls GDPR compliance a competitive advantage. It protects the business's reputation and the trust of users, who pay more and more attention to the security of their data. The visitor sees a banner with a choice of cookie categories and a policy in their own language, and understands that their data is handled under EU rules.

### Where can I read the official GDPR text?

The standard's page links to the official GDPR website, gdpr.eu. There you can read the regulation's rules in detail. If you need an analysis for a specific project, the studio will discuss how to implement the standards: submit a request via the brief or message us on WhatsApp, with buttons in the final block of the page.

### How does GDPR relate to the studio's other standards?

GDPR covers visitors' personal data, while ISO 27001 describes the security of code, data and access at every stage of work. Alongside them, every project follows WCAG 2.2 AA for accessibility and ISO 9001 for quality. Links to the pages for these standards are at the bottom, in the "Other standards" block.

## Other languages

- RU: https://seo7.es/ru/gdpr
- ES: https://seo7.es/es/gdpr

## schema.org markup

```json
{
  "@context": "https://schema.org",
  "@type": "WebPage",
  "name": "GDPR",
  "description": "GDPR: EU regulation in force since May 2018 with rules for collecting and processing personal data of EU citizens. We build compliant websites.",
  "url": "https://seo7.es/en/gdpr",
  "mainEntityOfPage": "https://seo7.es/en/gdpr",
  "inLanguage": "en-GB",
  "isPartOf": {
    "@type": "WebSite",
    "name": "SEO7.ES",
    "url": "https://seo7.es/"
  },
  "publisher": {
    "@type": "Organization",
    "name": "SEO7.ES",
    "url": "https://seo7.es/"
  }
}
```