Yes. webentity builds marketing websites, not software that processes personal records or sensitive data. GDPR compliance for a marketing website is straightforward.
What the architecture does for you
- Static architecture: the site generates and serves static HTML files. There is no backend database that could be breached.
- No user accounts: your website stores no visitor logins and no personal records
- No third-party trackers: we don't embed advertising pixels, CRMs, or third-party scripts without your knowledge
Hosting
Websites run on Vercel's global edge network. If your compliance requirements call for a specific region, EU or regional setups are possible on request as a custom configuration.
Analytics
The standard setup is Google Analytics 4 plus Google Search Console, with proper consent management: tracking stays off until visitors agree. On request, we set up privacy-friendly alternatives like Matomo or Plausible instead, or no analytics at all. We configure it the way you want it.
Your responsibility as a regulated professional
You remain responsible for any tools you add to your website. Common additions that require GDPR attention:
- Contact forms: we use privacy-first form services (no data stored on our servers)
- Appointment booking: use a GDPR-compliant booking tool, add a data processing agreement with the provider
- Newsletter signups: requires explicit consent and a double opt-in flow
What we recommend for all clients
- Cookie consent banner with clear opt-in/out
- Privacy policy covering all data processing activities
- Keep any sensitive business or client data out of marketing websites entirely
- Impressum and Datenschutzerklärung are included in every build (German market)
For regulated professions (doctors, lawyers, financial advisors)
A static webentity marketing site is a safer choice than many alternatives: no backend database to breach, no third-party scripts by default. Just make sure any booking, consultation, or client management tools you link to have their own data processing agreements.
Bottom line
Less data = less risk. Your site stores no visitor data by default, and analytics run only with consent.