I am not a lawyer, but from the looks of it the search engine Qwant seems to provide a nice example of the way to do it.
Qwant is search engine, based in France but proudly European, that was launched in 2013 and which doesn’t track its users and doesn’t filter web content. For people who want to take advantage of some additional feature beyond the search functionality, there is an option to create an account, but in keeping with the GDPR, only the minimum of information necessary for access to all the services is collected, putting “data minimisation” into practice.
- How do we collect data from our users?
- Why do we collect data?
- What are the procedures and formalities conducted by Qwant to ensure the protection of your personal data?
- What happens to your personal data?
- For how long do we keep the data?
- What measures does Qwant take to ensure the security and confidentiality of your personal data?
- What are your rights? How do you exercise them?
- Additional information and recommendations
Each drop-down is a short bit of text, the longest, explaining “What are your rights? How do you exercise them?” is 229 words with clear subheadings of Right of access, Right of opposition, Right of correction or deletion, Right to delisting (right to be forgotten).
There is however one piece of information that is still missing which would really help to put people’s minds at ease about using the service – and that is a brief description of the business model. How does Qwant generate income?