GDPR | Frequently Asked Questions

The GDPR is the European Union's new framework for privacy laws, which came into force on May 25th, 2018. The GDPR protects individuals' rights when it comes to their personal data and what companies can do with it.

The GDPR affects any entity (including websites) that processes EU citizens' personal data. Whether you or your business is located in the EU, if you have EU site visitors, or if your marketing campaigns target EU citizens, this affects you.

GDPR violations can lead to fines of up to 20 million Euros, or 4% of the total worldwide turnover of the preceding financial year - whichever is higher.

Transparency and communication with your site visitors are key elements of the GDPR. As part of the new regulation, among other actions, you must let your site visitors know how you collect, store, and use their data, in a clear and transparent way.

In addition, you must comply with your site visitors' requests to receive a copy of their data that is processed on your site.

Learn how to prepare your site for GDPR.

Wix has servers all over the world, including Europe and the United States, as well as backup servers in multiple locations.

If the Processing of the User Customer Data involves transfer of such data outside of the European Economic Area (EEA) and the European data protection regulations apply to the transfers of such data, these transfers will be conducted in compliance with all applicable data protection regulations.

To find out more about where Wix stores your data, please see section 5 of our privacy policy.

A data controller is the body or company that determines how, when, and by which means, a user's information is processed. As a site owner, you are considered to be a data controller.

A data processor processes the personal data on behalf of the data controller. If you built a site using Wix and you process your site visitors' data, Wix.com is considered to be your data processor.

Learn more about Wix's data processing agreement.

In accordance with the GDPR, you must inform your site visitors that you use cookies on your site. You can do this by adding a cookie banner.

Learn more about Cookies and your website.