Packages
Every business is different, so we work with fixed-price offers after a first conversation. These packages show what is usually included.
What is included
Start
Fixed price on request
For sole traders and small businesses with a website and a few customer records.
- GDPR quick check
- Privacy notice and cookie consent
- Template for the record of processing
Business
Fixed price on request
For businesses with staff, customer data and external service providers.
- Everything in Start
- Complete record of processing
- Technical and organisational measures
- Data processing agreements
- Staff training incl. AI literacy
Video and access
Fixed price on request
For businesses with cameras, card readers or time recording.
- Assessment of the system
- Signage and information
- Retention and deletion concept
- Documentation under §§ 12–13 DSG
External data protection officer
Monthly fixed price on request
We take on the role under Art. 37–39 GDPR, as a named and certified contact.
- Contact for authority and data subjects
- Advice and monitoring
- Annual activity report
Audit
By level
Quick check, compliance audit, or in-depth audit, always with report, analysis and proposals.
Annual review
Fixed price on request
Once a year we check what has changed and update your documents.
Audits for every stakeholder
Three levels, from a compact check for management to the in-depth audit. Every audit ends with a report, an analysis and concrete proposals.
| Quick checkManagement | Compliance auditManagement, IT, HR | In-depth auditAll areas incl. technology | |
|---|---|---|---|
| Document review | |||
| Interviews | Management | ||
| Site visit | Optional | ||
| Technical review (access, backups, encryption) | Sample | ||
| Impact assessment | |||
| Report with traffic-light rating | |||
| Analysis and action plan | Short | ||
| Summary for management | |||
| Follow-up review | Optional |
Scope and price are agreed after the first conversation.
Plan an auditQuestions about data protection
Who advises us?
We are certified data protection officers. We advise on the practical, organisational and technical side and can take on the role of your data protection officer. Where legal representation is needed, for example in proceedings, we recommend involving a lawyer.
Do we need a data protection officer?
It is mandatory for public bodies and for businesses whose core activity is large-scale monitoring or processing of sensitive data (Art. 37 GDPR). For everyone else it is voluntary, and often useful. We can take on the role externally.
Does a small business really need all this?
The GDPR applies regardless of size, but not every duty applies to every business. The check above shows which ones concern you.
What does it cost?
That depends on the size of your business and the scope. After the first conversation you receive a fixed-price offer.
Do you work remotely?
Yes. Most of the work can be done online; for video systems and access control we like to look at the site.
Let’s talk about your data
Tell us briefly what your business does and where you stand. We get back to you with a proposal for the first step.
Fixed-price offer after the first conversation