Data Protection

Privacy for company websites

Q: What should my website's privacy policy say?

The requirements for a privacy policy are specified by the GDPR and Swiss data protection law. General information about data processing must be provided — such as the purpose, legal basis, duration of data processing and any data transfers to third parties — as well as an indication of the rights of website users. The information must be precise, transparent and in plain language.

Q: When does a website need a privacy policy?

A privacy policy is required whenever personal data is collected or processed. This includes not only names and email addresses collected through a contact form, but also the IP address, which is often found in server log files. This means that a website almost always needs a privacy policy.

Q: Do I need a cookie banner and consent from website visitors?

The requirements in Switzerland are less strict than in the EU. However, if data of EU citizens are processed, it is quite possible that the requirements of the GDPR also apply to Swiss companies. In addition, there are other legal requirements within the EU, such as the e-Privacy Directive. A cookie banner with opt-in functionality is required whenever cookies and other technologies (e.g. pixels) used are not essential to the operation of the website — this includes tracking and analytics tools and social media plug-ins. In any case, information about the use of cookies must always be provided, whether in a banner, a privacy policy or a cookie policy.

Q: What must be included in the imprint?

In Switzerland, contact information including the company's full address is sufficient. In Germany, the disclosure requirements are more extensive — for example, a registration number, if available, must also be provided. Depending on the professional group, additional requirements may apply.

Complete website data protection compliance — fast, flat-fee and done right.

✓ Switzerland's largest law firm focused on tech companies

✓ 30+ legal experts — CH and DE data protection specialists

✓ Complete website privacy package implemented within 72 hours

✓ Transparent flat-fee pricing — no hidden costs

✓ Compliant with GDPR & Swiss nFADP

✓ Trusted by 1000+ clients

Book a free call Discover pricing

Trusted by 1'500+ tech companies & investors

"Your website is your most visible figurehead — and one of the most scrutinised assets for data protection compliance. Book a call with me and my team and we'll take care of everything."

Thomas Kuster · Partner @ LEXR · Book your free call →

Trusted by companies who take privacy seriously

How we solve your challenges

From privacy policy to cookie banner to imprint — everything your website needs to comply with GDPR and the Swiss nFADP, in one package.

We draft or update your website privacy policy to comply with both GDPR and the Swiss Data Protection Act (nFADP). Our policy covers all required disclosures: purpose, legal basis, duration of processing, third-party transfers and user rights — written in plain, precise language.

We create or adapt your cookie policy and draft the text for your cookie consent banner where required. We assess which cookies and tracking technologies (analytics, pixels, social plug-ins) require opt-in consent and which are exempt — matching the rules applicable to your specific audience.

We prepare a legally compliant imprint for your website covering the disclosure requirements under Swiss law, and where relevant German law, including company details, registration numbers and any profession-specific additions.

Beyond the website package, our team offers comprehensive ad-hoc privacy consulting, full data protection compliance checks, data processing agreements, EU Representative services (GDPR Art. 27) and preparation of all internal and external policies your business requires.

The LEXR approach

How we deliver Website Privacy, AI-amplified

Step 01

Matter in

Brief us in plain language — we scope it and route it to the right specialist.

Intake < 4h

Step 02 AI · Privileged

AI does the heavy lifting

Our own AI stack drafts, reviews and cross-checks — inside privilege.

60% fewer draft cycles

Step 03

Senior lawyer signs off

The specialist who built the strategy reviews and signs every output.

Lars Fidan

Stephan Meyer

Nadine Saalbach

Step 04

Output delivered

On scope, on the quoted price — delivered into your workflow.

Scope and price are fixed in writing before we start — AI absorbs the lift, not your budget.

Our website privacy services

One team handles everything your website needs — from first analysis to completed, integration-ready documents.

Website privacy policyCookie policy & banner textImprint draftingGDPR compliance checkSwiss nFADP complianceData processing agreementsPrivacy consulting

Find the right data protection package

Website Privacy Package

30-min kick-off, privacy policy, cookie policy & banner text, imprint, 30-min closing call — all delivered within 72 hours. Flat fee: CHF 550 (excl. VAT).

Book your free call →

Data Protection Compliance Check

Full analysis of your data protection risks and to-dos — across your website, internal processes and documentation.

Learn more →

EU Representative Service

GDPR Art. 27 representation in the EU for Swiss companies targeting EU customers.

Learn more →

Data Protection Expert Subscription

A certified data protection expert on a monthly retainer — ongoing support for all your privacy questions.

Learn more →

Why LEXR

Expert CH & DE data protection lawyers

Our team includes specialists in both Swiss nFADP and EU GDPR. We know the regulatory nuances — from cookie consent requirements to cross-border data transfers — so your website stays compliant across all relevant jurisdictions.

Complete package, fast delivery

One mandate covers everything your website needs: privacy policy, cookie policy, banner text and imprint. We deliver within 72 hours of your kick-off call, at a fixed all-inclusive price — no surprise invoices.

Pragmatic, business-first advice

We don't bury you in legal complexity. Our experts explain what you actually need, why it matters and exactly how to integrate the documents into your website — so you can get on with running your business.

Website Privacy FAQ

The questions companies ask us most before getting started.

The requirements for a privacy policy are specified by the GDPR and Swiss data protection law. General information about data processing must be provided — such as the purpose, legal basis, duration of data processing and any data transfers to third parties — as well as an indication of the rights of website users. The information must be precise, transparent and in plain language.

A privacy policy is required whenever personal data is collected or processed. This includes not only names and email addresses collected through a contact form, but also the IP address, which is often found in server log files. This means that a website almost always needs a privacy policy.

The requirements in Switzerland are less strict than in the EU. However, if data of EU citizens are processed, it is quite possible that the requirements of the GDPR also apply to Swiss companies. In addition, there are other legal requirements within the EU, such as the e-Privacy Directive. A cookie banner with opt-in functionality is required whenever cookies and other technologies (e.g. pixels) used are not essential to the operation of the website — this includes tracking and analytics tools and social media plug-ins. In any case, information about the use of cookies must always be provided, whether in a banner, a privacy policy or a cookie policy.

In Switzerland, contact information including the company's full address is sufficient. In Germany, the disclosure requirements are more extensive — for example, a registration number, if available, must also be provided. Depending on the professional group, additional requirements may apply.