IT security & data protection
Implementing data protection
GDPR in practice, not just on paper
What this is about
Data protection rarely fails for lack of will, but in day-to-day implementation. We bring documents and technology together: what the record says has to be how the system actually runs.
What is included
- Record of processing activities
- Data processing agreements with service providers
- Privacy notices for the website, applications and customers
- Technical measures: permissions, encryption, logs
- Procedure for access and deletion requests
Process
How we go about it.
Survey
Which data, for what purpose, for how long?
Document
Prepare the record and the agreements.
Implement
Set up the technical measures.
Review
Annual check.
Frequent questions
This is what we are often asked.
Do we need a data protection officer?
Only from 20 people who regularly process personal data, or where particularly sensitive data is involved.
Is a template from the internet enough?
As a framework, yes. Without adapting it to your processes, though, it is more of a risk than a protection.
What happens when a request comes in?
You have to provide the information within one month. We set up the procedure so that this happens without panic.
Sollen wir uns das ansehen?
Ein kurzes Gespräch genügt, um einzuschätzen, was in Ihrem Betrieb sinnvoll ist — und was nicht.