TrustYourWebsite

Website Guides

80+ practical guides on GDPR, accessibility, security and EU e-commerce law — written for small businesses.

Scan your website free

Editor's picks

Recently updated

GDPR Fines Netherlands: Real AP Cases | TrustYourWebsite

GDPR fines in the Netherlands: real cases and amounts from the Dutch DPA (AP), including Uber, Booking.com, TikTok and Kruidvat.

5 min read

Editor's pick

499 Dutch Restaurant Websites Scanned: Findings

We scanned 499 Dutch restaurant websites for GDPR, cookies, accessibility and security. Real numbers from our automated scanner.

8 min read

Browse by topic

GDPR & Privacy

499 Dutch Restaurant Websites Scanned: Findings

Updated

We scanned 499 Dutch restaurant websites for GDPR, cookies, accessibility and security. Real numbers from our automated scanner.

8 min read · Updated Apr 2026

Contact Form GDPR Requirements: Article 13 Compliance

Updated

What a GDPR-compliant contact form needs: Article 13 information, the right legal basis (legitimate interest vs precontractual), unchecked boxes, retention.

9 min read · Updated May 2026

Cookie Banner Dark Patterns: Why They Are Illegal

Updated

EDPB taxonomy of cookie banner dark patterns: 12 design techniques that void GDPR consent, with Dutch AP enforcement examples.

8 min read · Updated May 2026

Cookie Banner Required in NL: What the AP Enforces in 2026

Updated

A cookie banner is required in the Netherlands once your site sets non-functional cookies. What the AP enforces in 2026 and how to test compliance.

6 min read · Updated May 2026

Cookie Banner Requirements in the Netherlands (2026)

Updated

Cookie banner requirements in the Netherlands explained. The AP's 9 rules, valid GDPR consent and what gets businesses fined.

12 min read · Updated May 2026

Cookie Banner Requirements Under EU Law (2026 Guide)

Updated

Cookie banner requirements in the EU 2026: reject equal to accept, no dark patterns, prior consent. EDPB Guidelines 05/2020 explained.

9 min read · Updated May 2026

Data Processing Agreement for Websites: A Dutch SMB Guide

Updated

Which third-party services on your website need a data processing agreement (verwerkersovereenkomst) under GDPR Article 28? A practical guide for Dutch SMBs.

7 min read · Updated May 2026

Do I Need a Cookie Banner? A Simple Decision Guide

Updated

Not every website needs a cookie banner. Use this decision guide to find out if yours does, and what to do if it doesn't need one.

9 min read · Updated Apr 2026

Dutch AP Cookie Warnings: What They Mean for Your Website

Updated

AP cookie warnings explained: what the Dutch Autoriteit Persoonsgegevens checks on your cookie banner and how to fix it before a fine.

7 min read · Updated Apr 2026

Dutch Cookie Law: Telecommunicatiewet Art. 11.7a

Updated

Dutch cookie law sits in Telecommunications Act 11.7a, separate from GDPR. What it requires, the three exceptions, and how the AP enforces it.

7 min read · Updated Apr 2026

Dutch Data Breach Reporting: 72-Hour Decision Tree

Updated

Data breach reporting in the Netherlands: a 72-hour decision tree for SMBs. What to file with the AP and when the Article 33 GDPR clock starts.

10 min read · Updated May 2026

Dutch Privacy Policy: 10-Step GDPR Guide

Updated

Privacy policy requirements for Dutch websites: 10 steps under the GDPR, what each section must contain, common AP findings, scanner check.

7 min read · Updated May 2026

Dutch Privacy Policy: 14 GDPR Required Elements

Updated

Under GDPR Articles 13 and 14, Dutch sites collecting personal data need a privacy policy. 14 mandatory elements and what the AP checks.

8 min read · Updated May 2026

GDPR Compliance Checklist for Dutch Businesses (2026)

Updated

GDPR compliance checklist for Dutch businesses: 35 points covering privacy policy, cookie consent, data processors, retention and breach reporting.

7 min read · Updated Apr 2026

GDPR Data Retention Periods: Cheatsheet for Dutch Businesses

Updated

GDPR data retention periods for Dutch businesses: a practical cheatsheet covering customer data, financial records, HR data and website analytics.

7 min read · Updated Apr 2026

GDPR Fines Netherlands: Real AP Cases | TrustYourWebsite

Updated

GDPR fines in the Netherlands: real cases and amounts from the Dutch DPA (AP), including Uber, Booking.com, TikTok and Kruidvat.

5 min read · Updated May 2026

GDPR for Dutch Restaurant Websites: Fix Checklist

Updated

GDPR for Dutch restaurants: reservations, Google Maps, menu photos and delivery widgets. A practical checklist for restaurants and cafés.

9 min read · Updated Apr 2026

GDPR Records of Processing: Article 30 Template

Updated

Build the Article 30 GDPR record of processing activities. Who is exempt, what to include, controller vs processor versions and a ready-to-fill template.

8 min read · Updated May 2026

GDPR Website Audit Checklist for Dutch Businesses

Updated

GDPR website audit checklist for Dutch businesses. AP and ACM enforcement priorities, what to check, how to document findings in two to three hours.

10 min read · Updated May 2026

Google Analytics and GDPR: Is GA4 Legal in the Netherlands?

Updated

Can you use Google Analytics (GA4) on a Dutch website under GDPR? What the Dutch DPA, EDPB and national DPAs have ruled and what your alternatives are.

6 min read · Updated May 2026

Google Maps Embed and GDPR: Three Compliant Solutions

Updated

Google Maps embeds send visitor IPs to Google without consent. Three GDPR-compliant alternatives: lazy load, static image, OpenStreetMap.

5 min read · Updated May 2026

Privacy Policy Generators: What Templates Miss

Updated

Privacy policy generator guide for Dutch SMBs: what generators get right, what they miss, and how to use a template correctly under the GDPR.

6 min read · Updated Apr 2026

Website Trust Check: Free GDPR & Security Scan in 60 Seconds

Updated

Check your website free for GDPR violations, cookie issues, security and accessibility. Results in 60 seconds, no account required.

9 min read · Updated May 2026

Who Is Liable When ChatGPT Builds Your Website?

Updated

Your designer used Cursor or Lovable. If your AI-built site breaks GDPR or cookie law, who pays? The Dutch answer, with a 9 Dec 2026 catch.

13 min read · Updated May 2026

YouTube Embed and GDPR: The Cookie-Free Approach

Updated

Standard YouTube embeds set tracking cookies before consent. Two compliant fixes: youtube-nocookie.com and a click-to-load facade.

4 min read · Updated May 2026

youtube-nocookie.com: What It Actually Does

Updated

Does youtube-nocookie.com really protect visitor privacy? What cookies it places, when it places them and what it doesn't fix, including the thumbnail request.

7 min read · Updated Apr 2026

GDPR Fines for Small Businesses: Real Cases and Amounts

Updated

Real GDPR fines for small businesses run from about 1,000 to 50,000 EUR. See published regulator decisions, what triggers enforcement and how to avoid it.

9 min read · Updated May 2026

EU AI Act for Dutch Website Owners

Updated

Article 50 of the AI Act applies 2 Aug 2026. AP and RDI enforce in the Netherlands. What Dutch SMB sites actually need to label, and what they don't.

14 min read · Updated May 2026

Product Liability Directive 2024/2853: 9 Dec 2026 (NL)

Updated

Directive (EU) 2024/2853 makes software and AI 'products' for strict liability on 9 Dec 2026. What it means for Dutch SMBs, and what it does not change.

13 min read · Updated May 2026

Accessibility

Accessibility Statement for Your Website: 2026 Template

Updated

An accessibility statement is required since the EAA came into force. What must be in it, a working template, and how to draft your own in 30 minutes.

7 min read · Updated May 2026

ACM Enforcement: Digital Accessibility Is Now Mandatory

Updated

The ACM can now enforce digital accessibility requirements in the Netherlands. Here is what they check and what non-compliance means for your business.

7 min read · Updated Apr 2026

Dutch Hotel Website Accessibility: EAA Rules

Updated

Hotel websites and booking flows must comply with the EAA in the Netherlands. Accessibility requirements for room selection, checkout and property pages.

6 min read · Updated Apr 2026

Dutch Restaurant Accessibility: EAA Booking Rules

Updated

Does your Dutch restaurant website comply with the European Accessibility Act? Reservations, menus and booking flows must meet WCAG 2.1 AA.

7 min read · Updated Apr 2026

EAA for Dutch SMBs: What ACM Now Enforces

Updated

European Accessibility Act (Richtlijn 2019/882) in force since 28 June 2025. What it requires, who is exempt and what ACM enforces in NL.

6 min read · Updated May 2026

EAA for Dutch Webshops: 61% Failed ACM Audit

Updated

ACM audited 60 Dutch webshops in 2025 and found 61% breach EAA accessibility rules. What was found and how to fix common issues.

5 min read · Updated May 2026

EAA Penalties: ACM Fines for Accessibility Violations in NL

Updated

EAA penalties in the Netherlands: maximum ACM fines for accessibility violations, enforcement approach and practical next steps for businesses now.

5 min read · Updated May 2026

Website Accessibility Overlays vs. Real Compliance

Updated

Accessibility overlays promise a one-click fix but don't deliver. Learn why they fail and what actually works.

8 min read · Updated Apr 2026

Hotel Website Accessibility: EAA Booking Rules

Updated

Hotel booking systems need to work for everyone. Here's how to make your hotel website accessible and meet EAA requirements.

8 min read · Updated Apr 2026

Security

GDPR Requires a Secure Website: 12-Point Security Checklist

Updated

GDPR Article 32 requires appropriate technical security measures for websites that process personal data. A 12-point checklist for Dutch small businesses.

7 min read · Updated Apr 2026

SME Website Security: 10-Point Cyber-Defence Playbook

Updated

Practical cyber-defence playbook for SME websites: which attacks target small businesses and how to stop them in 30 minutes.

8 min read · Updated May 2026

Website Hacked: What to Do in the Next 6 Hours

Updated

Your website has been hacked. A step-by-step response plan for the first 6 hours: contain the damage, notify the right people and get back online safely.

5 min read · Updated Apr 2026

Website Not Secure: How to Fix the SSL Certificate Error

Updated

Website Not Secure fix: what triggers the browser warning, how to install free SSL via Let's Encrypt and how to lock in HTTPS on a Dutch website.

6 min read · Updated May 2026

Website Security Checklist: 10 Things to Check Today

Updated

A practical security checklist for small business websites. 10 things you can check and fix today without technical expertise.

8 min read · Updated Apr 2026

Vulnerable WordPress Plugins: How to Check and Fix Them

Updated

Vulnerable WordPress plugins are the top attack vector for small business sites and a GDPR Article 32 risk. How to check, patch and audit your plugins.

7 min read · Updated Apr 2026

What Does a Website Security Scan Check?

Updated

What a website security scan actually checks: SSL, headers, vulnerable libraries, outdated CMS and more. Learn what the results mean and how to fix issues.

11 min read · Updated Apr 2026

SSL Certificate: What It Is, Why You Need It

Updated

An SSL certificate encrypts data between your website and visitors. Here's what it does, why you need one and how to get one for free.

7 min read · Updated May 2026

E-Commerce

Dutch Webshop T&Cs: What BW Boek 6 Requires

Updated

Dutch webshop terms and conditions (algemene voorwaarden) under Boek 6 BW: what they must contain, how to make them binding, and what the ACM checks.

7 min read · Updated Apr 2026

Webshop Withdrawal Button: New Rule June 2026

Updated

Directive (EU) 2023/2673 requires webshops to provide a digital withdrawal button for online services from June 19, 2026. What this means for Dutch e-commerce.

8 min read · Updated May 2026

"Buy Now" vs "Order": Why Your Button Text Matters Legally

Updated

EU law requires specific wording on order buttons. The wrong text could make your orders non-binding. Here's what your checkout button must say.

7 min read · Updated Apr 2026

Dutch Webshop Compliance: Complete Checklist

Updated

A full checklist of legal requirements for online shops in the Netherlands. KVK, order buttons, withdrawal rights, pricing rules and more.

10 min read · Updated May 2026

EU Checkout Rules: Button Text, Pricing, Consent

Updated

EU checkout rules under Directive 2011/83/EU: order button text, price display, withdrawal rights and consent before the customer clicks Buy.

10 min read · Updated Apr 2026

EU Consumer Rights for Online Sellers: Plain-Language Guide

Updated

EU consumer rights for online sellers: the 14-day withdrawal right, Omnibus pricing rules and pre-contractual disclosures in plain language.

9 min read · Updated May 2026

EU 14-Day Right of Withdrawal: Rules, Exceptions & Refunds

Updated

EU 14-day right of withdrawal explained: when it starts, 8 exemptions, 14-day refund deadline, 12-month penalty for not informing buyers.

9 min read · Updated May 2026

EU Omnibus Price Display: The 30-Day Prior Price Rule

Updated

The EU Omnibus Directive's price-display rule requires showing the lowest price from the past 30 days when you advertise any discount. Here is what counts.

9 min read · Updated May 2026

Email Marketing

Is Double Opt-in Required? It Depends on the Country

Updated

Is double opt-in required? Yes in Germany, recommended in Austria, optional elsewhere. What ePrivacy and GDPR say per country.

9 min read · Updated May 2026

Newsletter Signup Forms: GDPR Requirements

Updated

Your newsletter signup form needs more than a checkbox. Here are the GDPR rules for email consent, what to store and how to avoid common mistakes.

9 min read · Updated May 2026

Pre-checked Signup Boxes Are Illegal: Here's Why

Updated

Prechecked checkbox illegal under GDPR: the CJEU Planet49 ruling (C-673/17) confirms pre-ticked boxes do not produce valid consent. What to fix on your forms.

10 min read · Updated May 2026

SPF, DKIM and DMARC: Email Security in Plain Language

Updated

SPF, DKIM and DMARC explained simply. Learn what they do, why you need them and how to set them up for your domain.

7 min read · Updated May 2026

Why Your Business Emails End Up in Spam (And How to Fix It)

Updated

Business emails landing in spam? You're probably missing SPF, DKIM or DMARC records. Here's what they are and how to set them up.

8 min read · Updated Apr 2026

Email Marketing Consent: Country-by-Country Rules

Updated

Email marketing rules differ across Europe. Here are the consent requirements for the Netherlands, Germany, UK, Belgium and more.

11 min read · Updated Apr 2026

EU Soft Opt-in: Email Customers Without Consent

Updated

The soft opt-in lets you email existing customers without explicit consent. But strict conditions apply. Here's how it works.

8 min read · Updated May 2026

Images

How Our Image Copyright Check Tool Detects Unlicensed Photos

Updated

Our image copyright check tool detects stock photo CDN matches, embedded metadata and watermark traces on every page of your website. Here is how it works.

9 min read · Updated May 2026