Inform your users, Security and Documentation for GDPR compliance

Inform your users clearly and transparently

Inform your users, and make sure your colleagues are aware of the data being collected and how it is used:

  1. Inform your visitors through a clear privacy notice whenever you’re collecting personal data.
  2. Inform your users in your privacy policy about what data you collect and how the data is used.
  3. Make your team aware that you are using Matomo Analytics and what data is being collected by your analytics platform.
  4. Document your use of Matomo within your information asset register.

Security procedures

Inform your users clearly and transparently, and make your colleagues aware of the data being collected and how it is used:

  1. Apply our security recommendations in order to keep your Matomo data safe.
  2. Check that you have a written contract with the company providing you the Matomo server or hosting which ensures appropriate safeguards are provided.
  3. Include Matomo in your data breach procedure.
  4. Include Matomo in your data privacy impact assessment (DPIA), if applicable.

GDPR Resources

Previous FAQ: How to exercise user rights in Matomo