Your questions, our answers. GDPR FAQ

• What does it mean to be compliant?

  Compliance means conformity. Being compliant therefore means being compliant. In the field of online services, compliance is governed by the GDPR.
  
  Being compliant means complying with the rules and legal obligations established by the European Regulation with a series of measures that serve to guarantee the protection of visitor data when they browse a site, blog or e-commerce.

• Why is it important to be GDPR compliant?

  First of all, a website, blog or e-commerce must comply with a legal obligation, secondly it is important to comply with European legislation to explain to visitors what tools are used on the site, if tools are used tracking/profiling or third-party cookies.
  
  Not only is it an obligation to inform the visitor, it is good practice to offer a professional and compliant service.

• What should I do to comply with the GDPR?

  To make your website compliant, you should think at a minimum about:
  
  - Privacy and cookie policy
  - Cookie banner and consent management (Cookie Solution)
  - Consent Database (to record and prove consents)
  
  In case of e-commerce, also think about having a Terms and Conditions document.

• How does iubenda work?

  To simplify the process, iubenda guides you step by step.
  All you need to do is scan your website, the tool will tell you what you need to comply with and help you draft a privacy and cookie policy text tailored to your online project.
  
  Cookies must be considered for transparency and consent. Even if you don't know anything about cookies, iubenda helps you by scanning the website.
  
  Furthermore, if you have an e-commerce or a private community, iubenda also generates the Terms and Conditions document, essential for advanced websites.

• What is Whistleblowing?

  Whistleblowing is a corporate compliance tool that allows a company's employees, or third parties (such as suppliers or customers) to report, in a confidential and protected manner, any wrongdoing encountered in the course of their business.
  
  As of December 17, 2023, the EU Whistleblowing Directive will require organizations with 50 or more employees, with headquarters or subsidiaries in the EU, to set up an internal channel for reporting misconduct such as, for example: privacy violations, financial malfeasance, consumer protection, harassment, environmental issues, etc.
  
  The new rules also apply, regardless of the number of employees, to those who have voluntarily adhered to the 231 model and wish to retain its benefits.
  
  Find out more about the new whistleblowing directive here.

• Is the Whistleblowing Directive relevant for Swiss companies?

  The EU Whistleblower Directive cannot be adopted 1 to 1 for Switzerland. In Switzerland, the law currently stipulates that employees must first report misconduct internally to their employer.
  
  Only when all internal reporting options have been exhausted and there is a public interest can the employee report the matter to the authorities. If this does not result in any action being taken, the employee can report the misconduct to the public as a last resort.
  
  With the right communication channels, it may therefore be possible to prevent major crises. It is therefore in employers' own interest to create internal reporting channels for employees. The whistleblower management tool creates such a communication channel where anonymity and confidentiality are guaranteed.

• What is Google Consent Mode v2?

  Google Consent Mode is a solution provided by Google that helps advertisers comply with data protection regulations related to consent (e.g. the EU GDPR, the Data Protection Directive and the Digital Markets Act) while making the most of Google services such as Google Ads or Analytics. This allows you to comply with consent requirements imposed by data protection laws while understanding how users trigger conversions on a page and respecting users' consent choices for ads and analytics cookies.
  
  Find out more about Google Consent Mode V2 here