Tools

Pillars

Internet AI Guides Articles Tools Comparisons Rules & duties Glossary Learn Courses Agency

Les Techniciens du Net

v0.1 · build in public

Internet AI Guides Articles Tools Comparisons Rules & duties Glossary Learn Courses Agency

TOOLS / GDPR CHECKLIST

GDPR checklist

GDPR checklist

Run through the key GDPR points for a website or small business. Tick what’s done: your progress is kept on this device.

0 / 21

Information & transparency 0/3

Legal notice published and reachable Publisher, host, publication director — on a page reachable from the whole site. · Generate →
Privacy policy online What data, why, how long, and what rights — in plain words. · GDPR guide →
Purpose of each collection stated Explain why each piece of data is requested (contact, quote, newsletter…).

Consent & cookies 0/4

Cookie banner if non-essential trackers Non-exempt analytics, ad pixels, embedded videos: consent required. · Cookies guide →
No non-essential tracker before consent Ad or analytics cookies are set only after agreement.
Refusing as easy as accepting A "Reject all" button on par with "Accept all".
No pre-ticked boxes on forms Newsletter sign-up and consents are active (opt-in), never pre-ticked.

People’s rights 0/3

A contact channel to exercise rights Email or form for access, rectification, erasure, objection.
Replies to requests within 1 month GDPR requires a one-month deadline (extendable, with reason).
Mention of the right to complain (DPA) State that the person can refer to the CNIL (or their authority).

Minimisation & retention 0/3

Collection limited to what’s needed No "just in case" field: every piece of data has a real use.
Retention periods defined How long is each piece of data kept? Write it down clearly.
Deletion or anonymisation at end of period Old data is purged, not kept forever.

Security 0/3

HTTPS active across the whole site The padlock everywhere — valid certificate, http → https redirect. · Securing a site →
Admin access protected Strong passwords + two-factor authentication (2FA) on admin.
Regular, tested backups A backup you’ve never restored isn’t really one.

Processors & transfers 0/3

Host and third-party tools identified Host, forms, payment, analytics, AI… who processes your data?
Data processing agreement (DPA) with them GDPR requires a processing agreement with each processor.
Care with transfers outside the EU US tools = data outside Europe. Prefer the EU when it’s sensitive. · E.g. AI comparison →

Records & proof 0/2

Record of processing kept A list of what you collect and why — mandatory (simplified for small firms).
Proof of consent retained Be able to show who consented, to what and when.

Indicative aide-mémoire — not legal advice or an audit. When in doubt, get professional support.

<TDN/> Les Techniciens du Net · The clear resource hub for the internet and its applications.

AI · Guides · Courses · Glossary · Comparisons · Agency · Contact

Legal notice · Privacy · Method & transparency

© 2026 Les Techniciens du Net

No results

↑↓ navigate ↵ open esc close