GDPR / Personal data protection

Audit of personal data processing procedures 

Having regard to the fact that the General Data Protection Regulation (GDPR) is in force in Poland, we offer personal data processing audits. Such an audit makes it possible to determine, among others, the following: 

• the scope and categories of personal data processed in your business, 
• processes of the company involving personal data processing, 
• purposes and processes of personal data processing, 
• personal data safeguards and procedures implemented by the company, 

• the risks related to personal data processing.  

Based on the findings from the audit, it will be possible to identify specific areas and issues that require improvement to provide for comprehensive personal data protection, in line with the applicable EU requirements. In addition, following the audit, we will point out gaps in your personal data processing documentation, if any. As a result of the above, we will be able to define an individual procedure for you, allowing for a better alignment of your company to GDPR requirements. 

Please feel free to contact us if you have any questions or to get a price quote. 

Risk analysis related to personal data processing and preparation of documentation 

Our law firm offers support in the assessment of legal risk related to data processing by your company (as a data controller), followed by the preparation or verification of documentation describing the relevant procedures (tailored to your company’s activities and taking into account the risks identified by us), as well as the preparation or verification of the register of data processing activities used in the company, register of issued authorizations and authorizations to process personal data. 

Please feel free to contact us if you have any questions or to get a price quote. 

Staff training 

GDPR requires economic operators to regularly train staff involved in processing operations. With a view to this obligation, our law firm provides training courses on this subject area and issues relevant certificates. The courses generally take place at our office, but we can organize personalized training for your staff on your premises, too. 

We also offer introductory and orientation courses on GDPR, during which we explain, among others, the concepts related to personal data protection, the scope of obligations set out under GDPR and the rationale for personal data protection. We will also address specific issues of particular importance for your company due to your business profile, and the related activities of personal data processing. 

Please feel free to contact us if you have any questions or to get a price quote.