Germany: Does a github.io hosted site require imprint / data privacy statement according to the GDPR?
<p>github offers free publicly accessible data storage. Many people use that to present their personal profile where they e.g. advertise for freelancing services. An example url could be <a href="http://username.github.io" rel="noreferrer">http://username.github.io</a>.</p>

<p>If I have such a personal page where I advertise services, do I need to make sure I have an <a href="https://en.wikipedia.org/wiki/Impressum" rel="noreferrer">Impressum</a> and a data privacy statement to comply with the new General Data Protection Regulation <a href="https://en.wikipedia.org/wiki/General_Data_Protection_Regulation" rel="noreferrer">DSGVO</a>?</p>

<p>It would be hosted by github and linked to and accessible only via github, not e.g. a domain of mine. Though it would still be possible to e.g. include a contact form that sends visitor data to my email address.</p>

<p>a few quick notes that come to mind. As the commenters point out:</p>

<ul>
<li>DSGVO is indeed the German equivalent name to the GDPR (English term)</li>
<li>"Imprint" isn't a privacy related topic that much, as such it's not really changed by the upcoming GDPR</li>
<li>The GDPR changes many things, but the requirement for up front information isn't one of them - so it would've already been a rule to follow</li>
</ul>

<p>Sometimes the question who is responsible for privacy information might not be that easy to decide when you're on platforms. I take this situation as being pretty clear though. You are basically given a blank slate, you can do with that page whatever you want, and the visitor has no clue whatsoever that it might be hosted by Github. 
In addition to this, Github would be classified as a data processor (providing the tool) and you as the data controller who is in charge of practically everything except for the provision of the page.</p>

<p>I hope this helps. Btw. it's not that hard anymore to write a privacy policy these days.</p>

privacy germany gdpr data-protection