Services
From the first check to the ongoing role of your data protection officer: what we do, and what you get from it.
All services
We are certified data protection officers. We put the GDPR into practice for small and medium-sized businesses, from the first check to the ongoing role of your data protection officer.
GDPR quick check
Start here
How does your business handle personal data today? You get a clear list of what is fine, what is missing and what to do first.
- Interview on site or online
- Website, forms and cookies
- Prioritised action list
External data protection officer
Ongoing
We take on the role under Art. 37–39 GDPR: contact for the authority and data subjects, advice, monitoring and an annual report.
- Named, certified contact person
- Help with requests and data breaches
- Annual activity report
Data protection audits
In three levels
From the compact check for management to the in-depth audit of IT and processes. Always with a report, an analysis and concrete proposals.
- Report with traffic-light rating
- Action plan with priorities
- Summary for management
Records and security measures
Record of processing activities (Art. 30) and technical and organisational measures (Art. 32) that fit your size and that you can show.
Website and cookies
Privacy notice and a cookie consent that matches what your site really loads (§ 165 TKG 2021).
Contracts
Data processing agreements (Art. 28) and transfers outside the EU, reviewed and documented.
Video surveillance and access control
Cameras, card readers and time recording under §§ 12–13 DSG. Our hardware work means we know these systems from the inside.
Impact assessments
Data protection impact assessments (Art. 35) for risky processing, before it starts.
Training and AI Act
Practical training for your team and AI literacy under Art. 4 AI Act.
Audits for every stakeholder
Three levels, from a compact check for management to the in-depth audit. Every audit ends with a report, an analysis and concrete proposals.
| Quick checkManagement | Compliance auditManagement, IT, HR | In-depth auditAll areas incl. technology | |
|---|---|---|---|
| Document review | |||
| Interviews | Management | ||
| Site visit | Optional | ||
| Technical review (access, backups, encryption) | Sample | ||
| Impact assessment | |||
| Report with traffic-light rating | |||
| Analysis and action plan | Short | ||
| Summary for management | |||
| Follow-up review | Optional |
Scope and price are agreed after the first conversation.
Plan an auditHow we work
Talk. A first conversation: what your business does and where you stand.
Check. We review processes, website and documents and write down what we find, in plain language.
Implement. You receive finished documents and a short to-do list. If you like, we help with the implementation.
Keep it current. Data protection is not a one-off project. On request we check once a year what has changed.
Let’s talk about your data
Tell us briefly what your business does and where you stand. We get back to you with a proposal for the first step.
Fixed-price offer after the first conversation