Data protection law

The EU General Data Protection Regulation (GDPR)

With the introduction of the General Data Protection Regulation (GDPR) in 2018, data protection has undoubtedly become considerably more important once again for business dealings. It is no longer a secret that failure to comply with the GDPR can result in very severe penalties¹.

These penalties can be prevented by a professional review. We therefore regularly advise our clients: take the protection of personal data in your company seriously and rely on our expert advice, so that you can then turn back to what really matters to you: your day-to-day business!

We have many years of experience in IT and data protection law and undertake regular further training, so that we always keep our finger on the pulse in this extremely fast-moving area of law.

¹ Source: DSGVO-Portal, fines database

The basics: data protection in your company

The data protection requirements in business dealings are wide-ranging and can at times be overwhelming. We support you in implementing and monitoring all the necessary measures.

• Taking stock and drawing up a list of measures regarding compliance with applicable data protection law in your company
• Setting up a permanent data protection concept for your company with the aim of implementing all GDPR requirements (data protection compliance)
• Advice and assistance on creating a record of processing activities to fulfil your accountability obligation under the GDPR
• Advice and assistance on creating a GDPR-compliant erasure concept
• Customised privacy policies for your company (e.g. for your website, your app or social media plug-ins) to fulfil your information obligations under the GDPR
• Developing tailored implementation proposals for your company, taking into account the risk-based approach of the GDPR and the supplementary national legislation
• Support for individual business measures in the area of public relations/PR (e.g. promotional e-mails, surveys, prize draws, photo shoots)
• Review of contractual relationships regarding compliance with data protection law
• Review and data protection-compliant structuring of data transfers in the area of international data protection
• Crisis management in the event of actual and alleged data protection infringements / handling data breaches
• Defending warning letters issued under data protection law
• Providing support and advice to the (internal) data protection officer
• Defending against abusive requests for access and claims for damages

Preparation and review of data protection documentation

The GDPR places a wide range of requirements on the data protection organisation of your own company and on collaboration with external service providers or partners. Protect yourself with the contracts and policies that suit your situation!

• Data processing agreements (DPA) with external service providers and review of contractual relationships regarding compliance with data protection law
• Joint controller agreements (agreement on joint responsibility for data processing)
• Legal texts required under data protection law (e.g. consent to data processing)
• Internal company guidelines on data protection
• Employee commitment to data secrecy

Data protection review and reporting

Would you like to take stock of data protection in your company? We carry out internal audits in accordance with the IDW PH 9.860.1 guideline, followed by reporting.

• Audit of the principles, procedures and measures for data protection in place in your company in accordance with the EU General Data Protection Regulation and the Federal Data Protection Act by SKNvonGEYSO PartmbB.