I have several German project web sites, using different components. Let's say one site uses a social media plugin an the other site doesn't.

Can I use the same, generalized data protection policy text for the two sites? Then I could use a policy generator and just activate all options/sections?

Or... I am only allowed to include those sections that are actually applicable for a specific web site? If I add a section about social media buttons and my website does not include any social media button, I could get admonished?

That would mean, not only when adding but also when removing some component, the policy needs to be adapted accordingly. And I would need some management system for all the policy variants. Merging all the individual project websites in a single main website might also be an (ugly) option.

Please add a reference to corresponding § / law if available.

(From the perspective of a website user, it would be more convenient to only read a single, compact, relevant page instead of hundreds of pages of boring privacy policy stuff, of course. :) )

  • (not a legal opinion) why not use lots of "may" statements. "The site may include a widget which does something" which would cover if it is there, but not matter if it isn't.
    – Steve
    Jul 27 at 22:18
  • I don't think this belongs here, its a legal question. I'd be very surprised if you can't use the generalized text provided it is not confusing. Also, if its all a single website, I would not expect each page to have different terms and conditions.
    – davidgo
    Jul 29 at 6:48

1 Answer 1


Your Privacy Policy should disclose what data you collect and how you use the collected data. As a best practice, if you operate different businesses with different privacy practices, your Privacy Policy should reflect that.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.