Website privacy notice template (FADP and GDPR)
- Art. 19-20 FADP
- Art. 13-14 GDPR
- About 20 minutes
- Italiano · Deutsch · Français · English
In brief
The privacy notice of your website: it tells visitors which data you collect, why, to whom you disclose them and what rights they have. It is the document customers and authorities look at first.
- Who it is for
- Visitors to the website. It is published on the website, reachable from every page.
- To decide first
- Whether the website has a newsletter, a visit analytics tool or user accounts, in which country it is hosted and to which countries you disclose data.
- Afterwards
- Publish it on the website with a link in the footer and update it when you add a form or a new service.
What it contains
- 1Controller
- 2Data we process and purposes
- 3Basis for the processing
- 4Recipients
- 5Disclosure abroad
- 6Retention period
- 7Security
- 8Your rights
- 9How to exercise your rights
- 10Links to other websites
- 11Changes
An excerpt
1. Controller
The controller is:
__________, __________ E-mail: __________, telephone: __________
For any question about data protection you can write to __________.
2. Data we process and purposes
Visiting the website
When you visit the website, the server automatically records certain technical data: IP address, date and time of access, page requested, referring page, browser type and version, operating system. We use these data to display the website to you, to ensure its stability and security and to detect errors and misuse. We do not use them to identify you, except in the event of an attack or unlawful use of the website.
Contact
If you write to us using the contact form or by e-mail, we process the data you disclose to us (name, contact details, content of the message) in order to reply to your enquiry and for any follow-up. The mandatory fields of the form are marked: without these data we cannot reply to you.
The full text is generated on the platform, with your organisation's details already in place.
FADP and GDPR compared
| FADP (Switzerland) | GDPR (EU) | |
|---|---|---|
| Minimum content | Identity and contact details of the controller, purpose, recipients, foreign countries and safeguards (Art. 19 paras. 2-4 FADP) | In addition: legal basis, retention period, rights, complaint to the authority, contact details of the DPO (Art. 13 GDPR) |
| Rights to mention | No mandatory list; state how to request access | Access, rectification, erasure, restriction, objection, portability, withdrawal of consent |
| Representative | The representative in Switzerland, if one is needed (Art. 14 FADP) | The representative in the EU, if one is needed (Art. 27 GDPR) |
The template adapts itself: it picks the paragraphs by the laws that apply to your organisation.
Related templates
Related question: What must a privacy notice contain?
A template is general information, not advice on your case: it must be adapted to your organisation. For a question on your case there is Advisorn's consulting. By Advisorn, updated on 20 October 2026.