Data Protection
specialization
Legal Services
GDPR Compliance
Comprehensive assessment of compliance with the GDPR and related legislation. Identification of risks, setup of internal processes and recommendations of practical remedial steps.
- audit of personal data processing activities,
- mapping of data flows,
- design of measures to improve compliance,
- overview of legal risks and recommendations,
- preparation of a report for company management.
Documentation and Internal Policies
Preparation and review of documentation required to fulfil the obligations of a data controller or processor.
- personal data protection policies,
- internal policies and procedural manuals,
- records of processing activities,
- procedures for handling data subject rights,
- drafting of internal documentation for employees.
Data Processing Agreements (DPA)
Drafting and negotiation of data processing agreements between controllers and processors, including cross-border data transfers.
- Data Processing Agreements (DPA),
- agreements with sub-processors,
- allocation of liability and limitations,
- legal review of agreements with cloud and IT providers.
Cookies, Analytics and Marketing Technologies
Setup of consent mechanisms and data processing for online marketing, analytics tools and cookie banners.
- drafting of cookie policies and cookie banners,
- assessment of legal bases for processing,
- compliance review of Google Consent Mode, GA4, Meta Pixel and similar tools,
- legal setup of consents and consent records,
- audit of marketing and analytics tools.
DPIA and Data Protection Impact Assessments
Preparation and management of Data Protection Impact Assessments (DPIAs) for projects involving a higher risk to the rights and freedoms of data subjects.
- assessment of the obligation to carry out a DPIA,
- full preparation of DPIA documentation,
- recommendations for risk mitigation measures,
- communication with the supervisory authority,
- implementation of proposed measures.
Incidents, Data Breaches and Communication with the Data Protection Authority
Legal support in the handling of security incidents, personal data breaches and data subject complaints.
- setup of incident identification and response procedures,
- legal assessment of notification obligations towards the Data Protection Authority,
- preparation of personal data breach notifications,
- communication with the supervisory authority,
- representation in inspections and administrative proceedings.
