> It it allowed to embed captchas that prevent bots?
> Yes. The website operator has not only a vested interest in using captchas but is even obligated to do so as they have to guarantee website availability.
(I don't understand what this obligation is about - surely it's my own choice whether my website is up or down?)
> Is it allowed to embed Google captchas on the website?
> Website operators should strongly consider alternatives. If Google reCAPTCHA is used regardless, the responsible should be aware that they must be able to prove that this use is lawful according to [data privacy law]. When unable to explain how Google uses user data, the user cannot be informed transparently and the lawful use cannot be established.
> (I don't understand what this obligation is about - surely it's my own choice whether my website is up or down?)
They are likely either saying that the uptime of the service relies on the use of captchas (i.e. it's a technical obligation), or it is implying that the majority of sites are commercially operated, wherein the operator has a financial/legal/contractual obligation that they deliver a working product.
