19 ms·
Oddly enough, the disclaimer might actually increase the chance that you're subject to GDPR. The relevant part of GDPR is Article 3, and Recital 23 (full law t
by lmkg 5y ago
Oddly enough, the disclaimer might actually increase the chance that you're subject to GDPR.
The relevant part of GDPR is Article 3, and Recital 23 (full law text in the links below--read them, they're short!).
GDPR applies to a non-EU website that "envisages offering services to data subjects" in the EU. Recital 23 explicitly says that a website merely being available does not count. Offering localized content (e.g. languages, currency for ecommerce) counts. And if your website treats users in the EU differently (such as by having a pop-up that mentions GDPR), that shows evidence that you believe users from Europe are in the target audience of your site.
Actually enforcing fines are a different matter, and will require some locus of business in the EU.
https://gdpr-info.eu/art-3-gdpr/ https://gdpr-info.eu/art-3-gdpr/
https://gdpr-info.eu/recitals/no-23/ https://gdpr-info.eu/recitals/no-23/
- germanier 5y agoThe alternative Art. 3 No. 2b and Recital 24 do not have such a restriction.
- djoldman 5y agoThanks for your reply and for citing the law text. This is an interesting passage. It seems to me that saying to ALL visitors of the website that the goods and services are not offered to GDPR places should be sufficient to preclude GDPR jurisdiction.