Privacy policy, cookie policy and the internal GDPR records, from templates written for Germany, Poland and Lithuania. You answer the wizard's questions, check the preview, then pay once.
The wizard is in English; the documents come in the language you choose.
For businesses based in Germany, Poland or Lithuania that run a website, sell online and work with a few service providers such as hosting, payments, email and analytics. Each set cites the GDPR plus the national law and the supervisory authority of your country.
Plus an Impressum (§ 5 DDG) in every bundle
Based in another EU country? The documents are written for these three countries only for now.
You choose the bundle in the wizard. Prices are final, VAT included, and depend on the country your business is based in.
The two documents your website visitors read
2 documents
Germany: plus the Impressum
| Germany | 180 € |
|---|---|
| Poland | 120 € |
| Lithuania | 90 € |
Adds your internal records: processing register and retention rules
4 documents
Germany: plus the Impressum
| Germany | 300 € |
|---|---|
| Poland | 200 € |
| Lithuania | 150 € |
Adds the processor contract and the data breach procedure
6 documents
Germany: plus the Impressum
| Germany | 450 € |
|---|---|
| Poland | 300 € |
| Lithuania | 220 € |
EU businesses with a valid VAT ID get a reverse-charge invoice; the price stays the same.
Each one is a template written from the provisions named below and filled with the answers you give in the wizard.
The provider identification every commercial German website must show: who runs the site and how to reach them.
§ 5 DDGGermany only, in every bundle
The public notice for your visitors and customers: what you collect, why, on what legal basis, who receives it, how long you keep it and how people use their rights.
GDPR Art. 13–14In: Starter, Pro, Enterprise
Lists the cookies your site sets, with provider, purpose, category and duration, and how visitors give and withdraw consent.
ePrivacy Directive Art. 5(3), GDPR Art. 6In: Starter, Pro, Enterprise
Your internal register of processing activities, including your service providers (sub-processors).
GDPR Art. 30In: Pro, Enterprise
How long each kind of data is kept, what starts the clock and how it is deleted.
GDPR Art. 5(1)(e), Art. 17In: Pro, Enterprise
A contract template for service providers that process personal data for you, or for your own customers if you are the processor.
GDPR Art. 28In: Enterprise
Your internal playbook for spotting, assessing, reporting and recording a data breach.
GDPR Art. 33–34In: Enterprise
Legal name, address, contacts and, in Germany, your federal state. Answers are saved as you go: keep the page's link to continue later.
Categories of personal data, legal bases, security measures, retention and transfers outside the EU.
For example the cookies your site sets, the service providers you use and who handles a data breach.
Public documents show in full before you pay, the others show their first sections. Then pay through Stripe and download.
An excerpt of the template, with placeholders where your company details go. The table lists the cookies you enter in the wizard; these three are common on online shops.
Cookie Policy
Effective: 2026-10-23
1. What this policy covers
This Cookie Policy explains how [Your company] uses cookies and similar technologies on our website [your website] (the "Service").
It supplements our Privacy Policy and is published in line with Article 5(3) of the ePrivacy Directive.
4. Cookies set on this site
The table below lists every cookie set when you visit this site, in line with EDPB Guidelines 03/2022 §3.1.1.
| Cookie | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| woocommerce_cart_hash | WooCommerce | Notices when the cart contents change so the page can update the cart. | Strictly necessary | Session |
| _ga | Google Analytics | Tells visitors apart with a random client ID for Google Analytics. | Analytics / performance | 2 years |
| _fbp | Meta | Identifies browsers for Meta ad delivery, conversion tracking and remarketing. | Advertising / marketing | 3 months |
A cookie policy has to list the cookies your site actually sets. The free CookieSentry scan shows every cookie and third-party service that loads before anyone makes a choice. Add them to the cookie table in the wizard.
Monitoring plans rescan on a schedule and email you when a new cookie or tracker appears, so you know when the policy needs an update.
Scan your website freeEvery document opens on the confirmation page: as PDF, as a Word file, or copy the text or HTML into your website.
We email you a private link to your documents and your invoice. Keep the link: it is how you get back to them, as there is no account.
You can still change your company and data answers after paying and download the documents again. The bundle stays the one you bought.
The documents are templates filled with the information you give. They are not legal advice, and you remain responsible for checking that they are accurate and complete for your business. If your processing is unusual, have a lawyer review them before you publish or sign them.
Read the TermsGermany, Poland and Lithuania. The documents cite the GDPR, the national data protection law and the supervisory authority of the country you pick. Other countries are not available yet.
A one-time payment per bundle, from 90 € in Lithuania. Prices are final, VAT included, and depend on the country. EU businesses with a valid VAT ID get a reverse-charge invoice for the same amount.
You choose before checkout: the language of your country, English, or both side by side. The German Impressum is always in German.
Check the preview before you pay: after payment and download the purchase is final, and the documents are not refunded. Consumers in the EU agree at checkout to immediate delivery, which ends their 14-day right of withdrawal. The money-back guarantee applies to monitoring subscriptions only. Details are in our Terms.
No. The wizard runs without an account, and the documents are a one-time purchase. The scanner and the monitoring plans are separate.
Yes. Open your private link, correct your answers and download again. Keeping the documents in line with your business and with changes in the law remains your responsibility.
No document can promise that. They give you the written notices and records the GDPR asks for, based on your answers. Whether your site behaves the way they describe, for example no tracking before consent, is what the free scan checks.
You see the documents before you pay. One payment, no subscription.
Documents, bundles and prices as of 23 October 2026.