{ "schema": "https://saferpage.de/schemas/regulatory-alert-routing.v1", "generated_at": "2026-06-23T02:28:19+00:00", "domain": "mywellness.de", "available": true, "scan": { "id": "d3c9efcf-db82-44c1-85ef-744aa674e06c", "checked_at": "2026-06-23 00:24:56.976307+02" }, "summary": "Alert-Routing fuer mywellness.de: 13 regulatorische Alerts, 6 Watch-Abos, 6 Impact-Regeln.", "digest": { "alert_count": 13, "subscription_count": 6, "impact_rule_count": 6, "source_count": 10, "official_source_count": 6, "priority_counts": { "kritisch": 5, "hoch": 7, "mittel": 1, "niedrig": 0 } }, "subscriptions": [ { "id": "dach_eprivacy_tracking", "name": "DACH ePrivacy und Tracking", "jurisdictions": [ "DE", "AT", "CH", "EU" ], "topics": [ "TDDDG", "ePrivacy", "Cookies", "Consent Mode", "GPC" ], "cadence": "taeglich bei Alerts, monatlich als Review", "owner": "Marketing/IT/Datenschutz" }, { "id": "eu_privacy_core", "name": "EU Datenschutz-Kernpflichten", "jurisdictions": [ "EU" ], "topics": [ "DSGVO", "EDPB", "EUR-Lex", "Betroffenenrechte", "DSFA" ], "cadence": "woechentlich bei Aenderungen", "owner": "Datenschutz/Legal" }, { "id": "security_tom", "name": "Websicherheit und TOM", "jurisdictions": [ "DE", "EU" ], "topics": [ "BSI", "TLS", "CSP", "Security Header", "Nachweise" ], "cadence": "quartalsweise plus Release-Gate", "owner": "IT/Security" }, { "id": "vendor_transfer", "name": "Anbieter und Drittlandtransfer", "jurisdictions": [ "EU", "Drittland" ], "topics": [ "DPA/AVV", "SCC", "TIA", "Subprozessoren" ], "cadence": "monatlich und bei Anbieterwechsel", "owner": "Datenschutz/Einkauf/IT" }, { "id": "accessibility_bfsg", "name": "Barrierefreiheit und BFSG", "jurisdictions": [ "DE", "EU" ], "topics": [ "BFSG", "WCAG", "Nutzerrechte" ], "cadence": "quartalsweise", "owner": "UX/IT/Datenschutz" }, { "id": "ai_governance", "name": "KI und Profiling", "jurisdictions": [ "EU" ], "topics": [ "AI Act", "Profiling", "Chatbots", "Automatisierte Entscheidungen" ], "cadence": "monatlich und bei neuem Use Case", "owner": "Product/Datenschutz/Legal" } ], "impact_rules": [ { "id": "eu_dsgvo_privacy_ops", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "keywords": [ "dsgvo", "gdpr", "edpb", "eur-lex", "notice", "betroffenenrechte", "dsar", "dsfa", "dpia" ], "impacted_centers": [ "https://saferpage.de/datenschutz/mywellness.de/entwurf", "https://saferpage.de/rechte/mywellness.de", "https://saferpage.de/assessment/mywellness.de/workflow-json", "https://saferpage.de/dsfa/mywellness.de" ], "owner": "Datenschutz/Legal", "default_priority": "hoch", "next_step": "Pflichtaenderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow pruefen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID." }, { "id": "de_tdddg_eprivacy_tracking", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "keywords": [ "tdddg", "eprivacy", "cookie", "cookies", "consent", "tracking", "gpc", "cmp" ], "impacted_centers": [ "https://saferpage.de/consent/mywellness.de", "https://saferpage.de/cookies/mywellness.de", "https://saferpage.de/consent-banner/mywellness.de/blocking-json", "https://saferpage.de/consent/mywellness.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "default_priority": "kritisch", "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL." }, { "id": "security_tom_bsi", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "keywords": [ "security", "tom", "bsi", "tls", "csp", "header", "sicherheit" ], "impacted_centers": [ "https://saferpage.de/technik/mywellness.de", "https://saferpage.de/nachweise/mywellness.de", "https://saferpage.de/kontrollen/mywellness.de" ], "owner": "IT/Security", "default_priority": "hoch", "next_step": "Technische Schutzmassnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung pruefen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink." }, { "id": "accessibility_bfsg", "jurisdiction": "DE/EU", "topic": "BFSG, WCAG, Barrierefreiheit", "keywords": [ "bfsg", "wcag", "accessibility", "barrierefreiheit" ], "impacted_centers": [ "https://saferpage.de/barrierefreiheit/mywellness.de", "https://saferpage.de/datenschutz-hub/mywellness.de" ], "owner": "UX/IT/Datenschutz", "default_priority": "mittel", "next_step": "Consent-, Datenschutz- und DSAR-Flows auf Bedienbarkeit, Kontrast, Tastatur und klare Sprache pruefen.", "evidence_required": "WCAG/BFSG-Testnotiz, betroffene URLs, Screenshot und Entscheidung." }, { "id": "vendor_transfer_due_diligence", "jurisdiction": "EU/Drittland", "topic": "Anbieter, Drittlandtransfer, TIA, SCC", "keywords": [ "vendor", "anbieter", "transfer", "drittland", "tia", "scc", "subprozessor" ], "impacted_centers": [ "https://saferpage.de/anbieter/mywellness.de/due-diligence", "https://saferpage.de/transfer/mywellness.de", "https://saferpage.de/verarbeitungen/mywellness.de" ], "owner": "Datenschutz/Einkauf/IT", "default_priority": "hoch", "next_step": "Anbieterinventar, AVV/DPA, Transfermechanismus und TIA-Entscheidung aktualisieren.", "evidence_required": "Anbieterkarte, DPA/AVV-Link, Transferbewertung, Subprozessoren und Restrisikoentscheidung." }, { "id": "ai_governance", "jurisdiction": "EU", "topic": "KI, Profiling, Automatisierung", "keywords": [ "ki", "ai", "profiling", "automatisierung", "chatbot" ], "impacted_centers": [ "https://saferpage.de/ki/mywellness.de", "https://saferpage.de/dsfa/mywellness.de", "https://saferpage.de/assessment/mywellness.de/workflow-json" ], "owner": "Product/Datenschutz/Legal", "default_priority": "hoch", "next_step": "KI-/Profiling-Use-Case, Transparenz, Rechtsgrundlage, DSFA-Schwelle und Vendor-Setup bewerten.", "evidence_required": "Use-Case-Beschreibung, Datenarten, Modell-/Vendor-Info, DSFA-Entscheidung und Nutzerhinweis." } ], "routing_rules": [ { "when": "priority=kritisch", "route_to": [ "Datenschutz/Legal", "IT/Marketing" ], "sla_hours": 48, "reminder_after_hours": 24, "escalate_after_hours": 72 }, { "when": "priority=hoch", "route_to": [ "Datenschutz/Legal", "Website-Betrieb" ], "sla_hours": 120, "reminder_after_hours": 72, "escalate_after_hours": 168 }, { "when": "topic contains Vendor or Transfer", "route_to": [ "Datenschutz", "Einkauf", "IT" ], "sla_hours": 168, "reminder_after_hours": 96, "escalate_after_hours": 240 }, { "when": "Release betrifft Cookies, CMP, Anbieter, Formular oder KI", "route_to": [ "Release-Owner", "Datenschutz" ], "sla_hours": 24, "reminder_after_hours": 12, "escalate_after_hours": 36 } ], "notification_channels": { "email": { "subject_template": "[SaferPage] {priority} Regulatory Alert fuer mywellness.de", "recipient_group": "privacy-ops@betreiber.example", "body_fields": [ "title", "topic", "source_url", "next_step", "impacted_centers" ] }, "slack": { "channel": "#privacy-ops", "payload_template": { "text": "{title}", "blocks": [ "priority", "topic", "source_url", "next_step" ] } }, "teams": { "webhook_name": "Privacy Ops Alerts", "payload_template": { "title": "{title}", "summary": "{next_step}", "sections": [ "Evidence", "Impacted Centers" ] } }, "webhook": { "method": "POST", "content_type": "application/json", "signature_header": "X-SaferPage-Signature", "idempotency_header": "Idempotency-Key" }, "rss": { "feed_url": "https://saferpage.de/regulatory-watch/mywellness.de/alerts-json", "item_key": "dedupe_key" } }, "alerts": [ { "id": "reg-alert-01", "title": "DSK Orientierungshilfe digitale Dienste fuer mywellness.de bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://www.datenschutzkonferenz-online.de/media/oh/OH_Digitale_Dienste.pdf", "source_name": "DSK Orientierungshilfe digitale Dienste", "impacted_centers": [ "https://saferpage.de/consent/mywellness.de", "https://saferpage.de/cookies/mywellness.de", "https://saferpage.de/consent-banner/mywellness.de/blocking-json", "https://saferpage.de/consent/mywellness.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "6c3de0262b7cfe1d8a66c5a681a2ece234ee507868c0a6d767f86da4e4dbd91b" }, { "id": "reg-alert-02", "title": "DSGVO Art. 6 fuer mywellness.de bewerten", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "routing-ready", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_name": "DSGVO Art. 6", "impacted_centers": [ "https://saferpage.de/datenschutz/mywellness.de/entwurf", "https://saferpage.de/rechte/mywellness.de", "https://saferpage.de/assessment/mywellness.de/workflow-json", "https://saferpage.de/dsfa/mywellness.de" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Pflichtaenderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow pruefen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID.", "dedupe_key": "ea21ef733153831db6374b3d085d010f27492ecabb2794844b2da47890cbd78d" }, { "id": "reg-alert-03", "title": "DSGVO Art. 28 und Kapitel V fuer mywellness.de bewerten", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "routing-ready", "source_url": "https://eur-lex.europa.eu/eli/reg/2016/679/oj", "source_name": "DSGVO Art. 28 und Kapitel V", "impacted_centers": [ "https://saferpage.de/datenschutz/mywellness.de/entwurf", "https://saferpage.de/rechte/mywellness.de", "https://saferpage.de/assessment/mywellness.de/workflow-json", "https://saferpage.de/dsfa/mywellness.de" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Pflichtaenderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow pruefen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID.", "dedupe_key": "b0782953784799dc86be5429664681a2b1e00d3d65f10810d98275723e32573f" }, { "id": "reg-alert-04", "title": "BSI TLS-Mindeststandard und IT-Grundschutz Webserver/Webanwendungen fuer mywellness.de bewerten", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "routing-ready", "source_url": "https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Mindeststandards/Mindeststandard_BSI_TLS_Version_2_3.pdf", "source_name": "BSI TLS-Mindeststandard und IT-Grundschutz Webserver/Webanwendungen", "impacted_centers": [ "https://saferpage.de/technik/mywellness.de", "https://saferpage.de/nachweise/mywellness.de", "https://saferpage.de/kontrollen/mywellness.de" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Technische Schutzmassnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung pruefen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink.", "dedupe_key": "110c728642eb426ccad7308356ea66b6bd309acf934e7a79791f38d83f4369d3" }, { "id": "reg-alert-05", "title": "Google Consent Mode Dokumentation fuer mywellness.de bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://developers.google.com/tag-platform/security/concepts/consent-mode", "source_name": "Google Consent Mode Dokumentation", "impacted_centers": [ "https://saferpage.de/consent/mywellness.de", "https://saferpage.de/cookies/mywellness.de", "https://saferpage.de/consent-banner/mywellness.de/blocking-json", "https://saferpage.de/consent/mywellness.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "463e37397ffffd98353691b7dc8c443a8827c51eb661f84e816502206052911c" }, { "id": "reg-alert-06", "title": "WCAG 2.2 / BFIT / European Accessibility Act fuer mywellness.de bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "https://www.w3.org/TR/WCAG22/", "source_name": "WCAG 2.2 / BFIT / European Accessibility Act", "impacted_centers": [ "https://saferpage.de/consent/mywellness.de", "https://saferpage.de/cookies/mywellness.de", "https://saferpage.de/consent-banner/mywellness.de/blocking-json", "https://saferpage.de/consent/mywellness.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "d0c82f48ea178185001c55c4af65142159e4bf2a4e3b757bb4be89ab7680edb1" }, { "id": "reg-alert-07", "title": "BFSG/WCAG fuer mywellness.de bewerten", "jurisdiction": "DE/EU", "topic": "BFSG, WCAG, Barrierefreiheit", "priority": "mittel", "status": "routing-ready", "source_url": "/guides/barrierefreiheit-cookie-banner-formulare", "source_name": "BFSG/WCAG", "impacted_centers": [ "https://saferpage.de/barrierefreiheit/mywellness.de", "https://saferpage.de/datenschutz-hub/mywellness.de" ], "owner": "UX/IT/Datenschutz", "due_in_days": 30, "next_step": "Consent-, Datenschutz- und DSAR-Flows auf Bedienbarkeit, Kontrast, Tastatur und klare Sprache pruefen.", "evidence_required": "WCAG/BFSG-Testnotiz, betroffene URLs, Screenshot und Entscheidung.", "dedupe_key": "a02518f6670d7a85ea9bd71ebfffffcf76998ee9382c0a1bf772cb29aab150e9" }, { "id": "reg-alert-08", "title": "BSI/Security fuer mywellness.de bewerten", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "routing-ready", "source_url": "/guides/security-header-setzen", "source_name": "BSI/Security", "impacted_centers": [ "https://saferpage.de/technik/mywellness.de", "https://saferpage.de/nachweise/mywellness.de", "https://saferpage.de/kontrollen/mywellness.de" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Technische Schutzmassnahmen, Header, TLS und Evidence Pack gegen die neue Anforderung pruefen.", "evidence_required": "Header-/TLS-Auszug, Kontrolltest, Change-Ticket und Nachweislink.", "dedupe_key": "c83c029cf4ea3a89d6f6aeb8574892faab4437a2597721199875b2103ff1469d" }, { "id": "reg-alert-09", "title": "DSGVO fuer mywellness.de bewerten", "jurisdiction": "EU/DACH", "topic": "DSGVO, Betroffenenrechte, Notice, DSFA", "priority": "hoch", "status": "routing-ready", "source_url": "/guides/datenschutzerklaerung-verbessern", "source_name": "DSGVO", "impacted_centers": [ "https://saferpage.de/datenschutz/mywellness.de/entwurf", "https://saferpage.de/rechte/mywellness.de", "https://saferpage.de/assessment/mywellness.de/workflow-json", "https://saferpage.de/dsfa/mywellness.de" ], "owner": "Datenschutz/Legal", "due_in_days": 14, "next_step": "Pflichtaenderung gegen Datenschutzhinweis, DSAR-Prozess und Assessment-Workflow pruefen.", "evidence_required": "Quelle, betroffene Textstelle, betroffene SaferPage-Befunde, Entscheidung und Re-Scan-ID.", "dedupe_key": "376ed7cd4546e2b642357e01419ed87df88725a2093df1d70d8e702dc74ab2d4" }, { "id": "reg-alert-10", "title": "TDDDG/ePrivacy fuer mywellness.de bewerten", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "routing-ready", "source_url": "/guides/tracking-und-consent-reparieren", "source_name": "TDDDG/ePrivacy", "impacted_centers": [ "https://saferpage.de/consent/mywellness.de", "https://saferpage.de/cookies/mywellness.de", "https://saferpage.de/consent-banner/mywellness.de/blocking-json", "https://saferpage.de/consent/mywellness.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Consent-Default, Auto-Blocking, Cookie-Katalog und GPC-Verhalten vor dem naechsten Release abgleichen.", "evidence_required": "Consent-Screenshot, Cookie-Diff, Script-Blocking-Nachweis, CMP-Version und Test-URL.", "dedupe_key": "fe99674606fc2b2ee42ee9fe4c6dafc88475ead79af902c712a43997268a3cee" }, { "id": "reg-gap-01", "title": "Wiederholungsscans und Change-Alerts angebunden schliessen", "jurisdiction": "DE/EU", "topic": "TDDDG, ePrivacy, Cookies, Consent, GPC", "priority": "kritisch", "status": "operator-action-needed", "source_url": "https://saferpage.de/monitoring", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/consent/mywellness.de", "https://saferpage.de/cookies/mywellness.de", "https://saferpage.de/consent-banner/mywellness.de/blocking-json", "https://saferpage.de/consent/mywellness.de/framework-json" ], "owner": "Marketing/IT/Datenschutz", "due_in_days": 7, "next_step": "Regulatorische Pruefpunkte bei neuen Cookies, Anbietern, Formularen, AI-/Profiling-Use-Cases und Rechtsaenderungen erneut bewerten.", "evidence_required": "Alerts 0.", "dedupe_key": "903070720280c8659b0f7907d501f9110bb657fffd69c53210358b48fe07da39" }, { "id": "reg-gap-02", "title": "Owner und Review-Kadenz definiert schliessen", "jurisdiction": "DE/EU", "topic": "Security, TOM, TLS, BSI", "priority": "hoch", "status": "operator-action-needed", "source_url": "https://saferpage.de/betreiber/mywellness.de", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/technik/mywellness.de", "https://saferpage.de/nachweise/mywellness.de", "https://saferpage.de/kontrollen/mywellness.de" ], "owner": "IT/Security", "due_in_days": 14, "next_step": "Legal/DSB, Website-Betrieb, Marketing, Security und Product als feste Owner fuer regulatorische Aenderungen benennen.", "evidence_required": "Aus oeffentlichem Scan nicht beweisbar.", "dedupe_key": "a564501dafa541efd33485022e602c8305019bd03a17bd3443a1d149c73e0be7" }, { "id": "reg-gap-03", "title": "Quellenstand und Auswirkungsbewertung versioniert schliessen", "jurisdiction": "EU", "topic": "KI, Profiling, Automatisierung", "priority": "hoch", "status": "operator-action-needed", "source_url": "https://saferpage.de/nachweise/mywellness.de", "source_name": "SaferPage Gap", "impacted_centers": [ "https://saferpage.de/ki/mywellness.de", "https://saferpage.de/dsfa/mywellness.de", "https://saferpage.de/assessment/mywellness.de/workflow-json" ], "owner": "Product/Datenschutz/Legal", "due_in_days": 14, "next_step": "Quelle, Abrufdatum, betroffene Domains, geaenderte Pflicht und Umsetzungsticket versionieren.", "evidence_required": "Aus oeffentlichem Scan nicht beweisbar.", "dedupe_key": "fa7c1d9d00bbdf3b5b5b168e01c5533cd3d70a4433d95244a270563f904cb33a" } ], "links": { "watch_center": "https://saferpage.de/regulatory-watch/mywellness.de", "alerts_json": "https://saferpage.de/regulatory-watch/mywellness.de/alerts-json", "alerts_csv": "https://saferpage.de/regulatory-watch/mywellness.de/alerts-csv", "digest_md": "https://saferpage.de/regulatory-watch/mywellness.de/digest-md", "assessment_workflow": "https://saferpage.de/assessment/mywellness.de/workflow-json", "operator_board": "https://saferpage.de/betreiber/mywellness.de", "monitoring": "https://saferpage.de/monitoring/domain/mywellness.de", "regulatory_scorecard": "https://saferpage.de/regelwerke/mywellness.de" }, "disclaimer": "Automatisch erzeugtes Routing-Paket. Es sendet keine Nachrichten selbststaendig und ersetzt keine Rechtsberatung." }