Data Privacy
Data protection for businesses, by certified data protection officers. We put the GDPR, the Austrian DSG and the new EU rules into practice: clear steps, sensible technology, documents you understand.
- Data protection officers
- Certified
- EU and Austria
- GDPR · DSG
- The new EU rules
- AI Act
- With report and analysis
- 3 audit levels
What applies to your business?
Seven questions, one minute. You see at once which duties concern you and which package fits. Nothing is stored or sent.
Do you have employees?
Do you run a website with forms, analytics or a newsletter?
Do you use service providers such as cloud, IT support or payroll?
Do you have cameras, card readers or time recording?
Do you use AI tools such as chatbots or text generators?
Do you process health data or monitor people on a large scale?
Do you want an independent review of where you stand?
For management, investors or before a certification.
Your list
0/7 answeredAlways applies: answer data subject requests within a month and report data breaches within 72 hours.
Answer the questions and your list appears here, step by step.
Request an offerWhat we do
We are certified data protection officers. We put the GDPR into practice for small and medium-sized businesses, from the first check to the ongoing role of your data protection officer.
GDPR quick check
Start here
How does your business handle personal data today? You get a clear list of what is fine, what is missing and what to do first.
- Interview on site or online
- Website, forms and cookies
- Prioritised action list
External data protection officer
Ongoing
We take on the role under Art. 37–39 GDPR: contact for the authority and data subjects, advice, monitoring and an annual report.
- Named, certified contact person
- Help with requests and data breaches
- Annual activity report
Data protection audits
In three levels
From the compact check for management to the in-depth audit of IT and processes. Always with a report, an analysis and concrete proposals.
- Report with traffic-light rating
- Action plan with priorities
- Summary for management
Records and security measures
Record of processing activities (Art. 30) and technical and organisational measures (Art. 32) that fit your size and that you can show.
Website and cookies
Privacy notice and a cookie consent that matches what your site really loads (§ 165 TKG 2021).
Contracts
Data processing agreements (Art. 28) and transfers outside the EU, reviewed and documented.
Video surveillance and access control
Cameras, card readers and time recording under §§ 12–13 DSG. Our hardware work means we know these systems from the inside.
Impact assessments
Data protection impact assessments (Art. 35) for risky processing, before it starts.
Training and AI Act
Practical training for your team and AI literacy under Art. 4 AI Act.
The EU rules we keep in view
Data protection no longer stands alone. We look at what applies to you across the whole EU framework, and at its Austrian implementation.
Data protection
The foundation for every business that handles personal data.
- GDPR
- Austrian Data Protection Act (DSG)
- Cookies: § 165 TKG 2021
Data and AI
New rules for AI systems and for data from connected products.
- EU AI Act
- EU Data Act
- AI literacy, Art. 4 AI Act
Audits for every stakeholder
Three levels, from a compact check for management to the in-depth audit. Every audit ends with a report, an analysis and concrete proposals.
| Quick checkManagement | Compliance auditManagement, IT, HR | In-depth auditAll areas incl. technology | |
|---|---|---|---|
| Document review | |||
| Interviews | Management | ||
| Site visit | Optional | ||
| Technical review (access, backups, encryption) | Sample | ||
| Impact assessment | |||
| Report with traffic-light rating | |||
| Analysis and action plan | Short | ||
| Summary for management | |||
| Follow-up review | Optional |
Scope and price are agreed after the first conversation.
Plan an auditYour rights as an individual
Your data belongs to you. Tick off what you have done; the list stays in your browser.
Find out who has your data
You may ask any company for a copy of your data, free of charge (Art. 15 GDPR).
Open the templateCorrect what is wrong
Wrong address, wrong name, outdated details: you can demand correction (Art. 16 GDPR).
Have data deleted
When data is no longer needed or you withdraw consent (Art. 17 GDPR).
Open the templateStop advertising
An objection to direct marketing must always be respected (Art. 21 GDPR).
Open the templateWithdraw consent
Newsletters, apps, loyalty cards: withdrawing must be as easy as giving consent (Art. 7 GDPR).
Complain to the authority
If a company does not answer within a month, you can turn to the Austrian Data Protection Authority.
Data Protection Authority
Questions about data protection
Who advises us?
We are certified data protection officers. We advise on the practical, organisational and technical side and can take on the role of your data protection officer. Where legal representation is needed, for example in proceedings, we recommend involving a lawyer.
Do we need a data protection officer?
It is mandatory for public bodies and for businesses whose core activity is large-scale monitoring or processing of sensitive data (Art. 37 GDPR). For everyone else it is voluntary, and often useful. We can take on the role externally.
Does a small business really need all this?
The GDPR applies regardless of size, but not every duty applies to every business. The check above shows which ones concern you.
What does it cost?
That depends on the size of your business and the scope. After the first conversation you receive a fixed-price offer.
Do you work remotely?
Yes. Most of the work can be done online; for video systems and access control we like to look at the site.
Let’s talk about your data
Tell us briefly what your business does and where you stand. We get back to you with a proposal for the first step.
Fixed-price offer after the first conversation