# GDPR with Customers

**URL:** <https://community.sitejet.io/t/gdpr-with-customers/1434>\
**Category:** Helpdesk\
**Tags:** cms\_privacy, gdpr\
**Created:** [February 8, 2022, 11:37am UTC](https://community.sitejet.io/t/gdpr-with-customers/1434 "2022-02-08T11:37:51Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Luke\_Carey](https://avatars.discourse-cdn.com/v4/letter/l/f4b2a3/32.png) [@Luke\_Carey](https://community.sitejet.io/u/Luke_Carey)\
**Post date:** [February 8, 2022, 11:37am UTC](https://community.sitejet.io/t/gdpr-with-customers/1434/1 "2022-02-08T11:37:51Z")

</div>

Hi SiteJetters,

When creating a site in SJ for your customers, how do you handle the GDPR aspect of this?

Do you:

- Give your customers a DPA for them to sign, given you’re managing their site, on SJ

- How would you protect yourself in the case of there being a request from one of your client’s customers about e.g. a GDPR breach on the website?

Thanks!

---

<div class="post-metadata">

**Author:** ![Andre](https://dub1.discourse-cdn.com/flex017/user_avatar/community.sitejet.io/andre/32/3459_2.png) [@Andre](https://community.sitejet.io/u/Andre)\
**Post date:** [February 8, 2022, 12:37pm UTC](https://community.sitejet.io/t/gdpr-with-customers/1434/2 "2022-02-08T12:37:07Z")

</div>

Hey Luke,

Think this thread will be clarifying a few things about this topic:

> [@Data privacy / Datenschutzerklärung](https://community.sitejet.io/t/data-privacy-datenschutzerklarung/1333/12):
>
> Hi! I personally don’t use the Privacy Policy from Sitejet, I use an external service to generate one [https://getterms.io/](https://getterms.io/) If you want to use the Privacy Policy from Sitejet as a base to create your custom version, you can copy + paste the content into a Text Element (using the Preview functionality). Here is a video (with sound) on how to do it: Hope this helps!

Let me know if that helps.

---

<div class="post-metadata">

**Author:** ![Luke\_Carey](https://avatars.discourse-cdn.com/v4/letter/l/f4b2a3/32.png) [@Luke\_Carey](https://community.sitejet.io/u/Luke_Carey)\
**Post date:** [February 8, 2022, 1:02pm UTC](https://community.sitejet.io/t/gdpr-with-customers/1434/3 "2022-02-08T13:02:32Z")

</div>

Thanks, yep I saw that initially but didn’t that it helped in regards to how to engage our customers - we sign a DPA with SiteJey, but do we get our customers to sign it too, wondering whats the workflow thats recommended or others work to.

---

<div class="post-metadata">

**Author:** ![Mark\_Fosseprez](https://dub1.discourse-cdn.com/flex017/user_avatar/community.sitejet.io/mark_fosseprez/32/58_2.png) [@Mark\_Fosseprez](https://community.sitejet.io/u/Mark_Fosseprez)\
**Post date:** [February 8, 2022, 4:45pm UTC](https://community.sitejet.io/t/gdpr-with-customers/1434/4 "2022-02-08T16:45:53Z")

</div>

Hi Luke,

I have my customer sign a DPA (next to a cooperation agreement and I also have them sign of my privacy statement for agreement).

kind regards  
Mark

---

<div class="post-metadata">

**Author:** ![Luke\_Carey](https://avatars.discourse-cdn.com/v4/letter/l/f4b2a3/32.png) [@Luke\_Carey](https://community.sitejet.io/u/Luke_Carey)\
**Post date:** [February 14, 2022, 10:00am UTC](https://community.sitejet.io/t/gdpr-with-customers/1434/5 "2022-02-14T10:00:46Z")

</div>

Hi Mark, would you mind sharing the DPA agreement you ask your clients to sign (or a blanked out version of this as a template)? I’ve got the client contract sorted, and a GDPR Privacy Policy for our site, but it’s the DPA I’m unclear on - i.e. we’re building sites for customers on SiteJet.