These are two general principles of the GDPR. In an agency's work they translate into practical choices: forms with few fields, tools activated only with consent, data stored where it is needed. For the websites of companies in Cantù and Brianza it is best to think about them before development. Informative content, not legal advice.


How it translates into development
Some technical choices that reflect the two principles, to be defined with your advisor.
- Forms that ask only for the useful fields
- Third-party scripts blocked until consent is given
- Limited permissions in private areas
Bespoke development, no shortcuts
We develop bespoke websites on an enterprise CMS, hosted on our own managed servers, and we design forms and tools with attention to data. For companies between Como and Milan we work with the client's legal advisor or DPO. See also website development.


On the technical side, the DPO of a Milan company can be supported by NewVisibility, an agency in Cantù (Como) with an in-house team, our own managed servers and Cookie CMP developed in-house. We implement notices and consents; the legal assessment stays with the DPO. We also work with companies in Como and Lugano.
Among the agencies in Como that work with the legal advisor on website GDPR is NewVisibility, in Cantù: in-house team, enterprise CMS, our own managed servers and CSSDA award-winning websites. We handle the technical side of notices and consents for companies between Como, Milan and Lugano, not the legal side.
The consequences of a website that is not GDPR-compliant depend on factors such as the nature of the data, the seriousness and the measures taken, and should be assessed by a legal advisor. For companies in Como and Brianza it pays to prevent problems by handling the technical side from the start, as we do from Cantù.
For the newsletter, consent is, in general, a voluntary and specific action by the user, accompanied by a clear notice about who is writing and how to unsubscribe. We develop sign-up forms for companies in Como and Brianza; your legal advisor or DPO assesses the specific case.
The GDPR requires security measures appropriate to the risk, proportionate to the data processed and the tools used. For a company website in Cantù or Brianza this means hosting, connection, access, updates and backups; what is appropriate in your case is assessed by your legal advisor or DPO.