Full legal support
We provide comprehensive consulting and services in the field of privacy and data protection.
We prepare privacy and security policies, internal procedures and policies, registries, consent and information clauses, and other required documents.
We offer personal data protection system implementation services, including:
- implementing organizational measures for the protection of personal data,
- preparing and revising consents and information clauses, privacy and security policies, internal procedures, registers and other required documents,
- preparing flow charts and procedures for document circulation and data flow,
- developing a process for managing data subjects’ requests.
We offer outsourcing of the Data Protection Officer function and full service in this regard.
We provide legal advice and support in the ongoing application of data protection regulations.
Company audits
We conduct audits for compliance with the GDPR/RODO including:
- reviewing of organizational measures to protect personal data,
- verifying privacy and security policies, information clauses, model documents (including consents), procedures related to managing data subjects’ requests,
- reviewing procedures for verifying service providers, correctness of signed contracts and templates, recording of processing activities, data retention periods implemented,
- auditing the internal security incident reporting process,
- reviewing the existing mechanisms of transferring personal data to third countries,verifying the compliance of IODO’s appointment and tasks with the requirements of the GDPR/RODO (if one has not been appointed, we verify whether it should be done).
In cooperation with specialized entities, we offer support for IT security audits, which include:
- reviewing technical data protection measures,
- reviewing systems and software security, including access, encryption, protection against attacks, authentication, password requirements, data classification and the technical correctness of managing data subjects’ requests.