GDPR implementation

We offer to comprehensively implement GDPR-compliant procedures in your company. In the first step, we carry out an audit to verify the current status. Then, in consultation with you, we develop an all-encompassing set of appropriate procedures and internal policies.

To ensure full implementation we will:

1. draft consent clauses adjusted to your processing activities;
2. draft information clauses adjusted to your processing activities (including a privacy policy for your website);
3. draft a template data processing agreement;
4. develop – in close collaboration with your company representatives – procedures and documentation related to the processing and protection of personal data, i.e.:

• data protection policy;
• procedure for keeping internal records of infringements of data protection laws;
•  security policy;
• business continuity plan;
• internal procedure on how individuals can exercise their rights;
• system recovery procedures and their testing;
• data breach response procedure;
• project management procedures (privacy by design/privacy by default);
• IT system monitoring policy;
• system and building access management (granting/revoking access rights to IT systems in use);
• record of processing activities for your company as a data controller and processor;
• data processing authorisation form templates.

5. give opinions on internal regulations (including the work rules, contest regulations, terms and conditions of promotional campaigns, etc.).

​