Personal data security

We will provide full documentation of the personal data protection process for self-implementation in your organzation, including: necessery policies, procedures, regulations and templates of reqired registers, clauses and forms.

Risk assesment is the foundation of an effective personal data protection management process. Our experts, together with you, will establish a methodology and carry out assessment of the risk to the rights and freedoms of natural persons. We will also support you in designing technical and organizational measures to make risk in this area.

The Data Protection Officer (DPO) carries out statutory tasks and also monitors the organization’s compliance with the GDPR and Polish regulations. As part of the service we offer:

• Acting as an DPO in your organization.
• Outsourcing of Coordinator for Personal Data Protection.
• Ongoing support to the DPO or Personal Data Protection Coordinator.
• Handling requests of data subjects.

The implementation of data subjects’ rights, including handling of requests, is one of the key elements of the personal data protection management process. As part of this service, we offer:

• Designing the End-to-End process taking into account the specifics of your organization.
• Support in implementing the process in the organization.
• Staff training.

Using the services of providers personal data processors requires singing a contract with him specifyinh the subject and duration of processing, the nature and purpose of processing, the type of personal data and the categories of data subjects, as well as the obligations and rights of the administrator. As part of this service, we offer:

• Assistance in determininh whether entering into cooperation with the supplier reqires the signing of a data processing agreement.
• Preparation of the general specimen data processing contract.
• Preparation of individual contracts for indicated suppliers.
• Support in negotiating the content of data processing contracts.

The knowledge and competence of stuff is one of the cornerstones of an effective personal data protection process. As part of the training service, we offer:

• Training on general principles of personal data protection.
• Training dedicated to specific groups of employees (HR, complaints, operations, IT).
• Workshops on selected GDPR issues (e.g. handdling of requests, incident handling).

It is the controller’s and processor’s responsibility to ensure that the implemented personal data protection system complies with applicable law. As part of the audit service we offer:

• Audit of controller compliance with the GDPR.
• Audit of processor at the requests of the controller.
• Audit of a selected area of the personal data protection process (e.g. handling of violations, risk assessment).