GDPR requirements for website sale

I have a couple of questions you may be able to help me with :
1. My business is selling exclusive perfumes via my website account. What are the minimum requirements for my website?
2. I use couriers to deliver the products. Are the couriers my processors?
3. Do I need to register to the data protection authority?
4. Can I insert advertising flyers or coupons in the packages?

Answers:

1. If you are selling products using your website this means that you will be collecting personal data form your customers in order to process and ship the order to them. You may also be collecting their email address either to confirm their order or even to send them advertising (provided they have consented). If you use cookies on your website there are also certain requirements as well. You can find readily available templates for Website Privacy Notice, Cookie Policy as well as Terms & Conditions in this EU GDPR Mini Toolkit for Websites (https://advisera.com/eugdpracademy/eu-gdpr-mini-toolkit-for-websites/).

2. Couriers usually ac t as independent data controllers and not processors.

3. This depends on the jurisdiction where your company is established. Certain Supervisory Authorities require controllers to register. So, my advice is to check your local Supervisory Authority website for more information.

4. You may insert advertisement flyers but only to the customers that had previously given their consent. If you want to find out more about consent and marketing check out this free webinar How GDPR affects marketing practices (https://advisera.com/eugdpracademy/webinar/how-gdpr-affects-marketing-practices-free-webinar-on-demand/).