[lwyr]

Warning: The privacy notice template on this site (https://gdpr.eu/privacy-notice/) omits basic mandatory elements (e.g. retention periods, right to lodge a complaint). The template's section on cookies is insufficient and misleading. Cookies are regulated by a different law (the ePrivacy Directive) and their explanation does not go into these rules at all.

As frereubu notes elsewhere in this thread, the UK regulator's GDPR guide is excellent, and is a much better starting point in my opinion: https://ico.org.uk/for-organisations/guide-to-data-protectio...

[dpwm]

For those like me that hadn't linked Proton Technologies AG and ProtonMail, it's worth noting that this guide may actually have a service to sell you (ProtonMail).

The ICO guide linked by the parent doesn't.

[protonmail]

We have made some updates to the template so it is now more comprehensive. e-privacy technically is not GDPR, but since it is closely related, we have also incorporated this now.