Website privacy Cloudflare?
I have my own website, including a domain and hosting. There are only three buttons on the website that lead to my social media accounts. I use free hosting from GitHub Pages. My domain is from Namecheap. Since I can't get free SSL (http) there, I connected my website to Cloudflare, where I added free SSL to my website.
But now I have to add to my website's privacy policy that Cloudflare collects data (e.g., IP address), right? And do I have to get consent from website visitors first? And if a website visitor writes to me asking me to delete all the data the website has collected from them, what do I do then? Because only Cloudflare has collected personal information, so how do I delete it from Cloudflare?
Moin,
always the one responsible for the deletion, which also collects the data, i.e. cloudflare, etc.
Because on your website there is no content, no login and nothing you could use, SSl encryption is also useless.
In the GDPR, who collects them must stand with all information, i.e. GitHub, your domain provider, the networks and CloudFlare.
Requests for data deletion will be forwarded to the companies as you have no access to it and do not collect.
Greetings from katzebiggi
A legal advisor for media and data protection law grants correct information.
Try to dispense with American services and instead use providers from Germany. If this is not possible, then from an EU country.
This has to do with the privacy standards. I would not use cloud flare personally to get an SSL certificate.
With a reasonable German web host, you will always get an SSL certificate for your tariff (e.g. All-Inkl). From the GDPR point of view, I would recommend that you ensure that the server location of your domain is located in Germany.