Care providers face stricter rules than many other websites because health data is processed in their environment. This category sets out the requirements: imprint and privacy policy, consent for cookies and external services, data processing agreements with hosts and service providers, secure transmission of contact and application forms, handling photos of residents and staff, and confidentiality in public communication. Added to this are advertising rules in the health sector and the accessibility requirements that increasingly apply to care organisations too. The articles do not replace legal advice, but they provide a solid basis for discussions with data protection officers and lawyers. We also describe the internal agreements needed so that staff do not accidentally disclose personal data on social networks.
Since 1 January 2026 the German Nursing Competence Act (BEEP) applies. How care services communicate the new powers on their website - for patients and staff.
GDPR-compliant contact and application forms for care services: handle sensitive health data, choose hosting in Germany, use SSL and a clean data flow.
A complete imprint under the DDG, reachable in two clicks, plus the HWG limits on advertising claims for care services: how a care website becomes legally sound.