GDPR
GDPR, i.e., General Regulation of the European Parliament and of the Council 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) provides a uniform legal framework for all Member States of the European Union and places high demands on organizations in terms of personal data processing. Our law firm has extensive experience in implementing GDPR for clients from various business sectors and provides comprehensive legal support in GDPR implementation.
Our legal services include:
Data audit and GAP analysis – detailed analysis of data flows and identification of risk areas prior to GDPR implementation.
Preparation and review of documentation – personal data processing policies, internal guidelines (regarding ensuring data processing by employees in compliance with the GDPR, procedures for reporting security incidents, responses to requests from data subjects, etc.), personal data processing agreements with business partners (personal data processors), records of processing activities (RoPA), and other documentation necessary to ensure compliance of processing with GDPR requirements, the existence and maintenance of which is monitored by the Office for Personal Data Protection.
Preparation of a data protection impact assessment (DPIA).
Setting up processes and systems – assistance with implementing daily processes in accordance with the GDPR.
Employee training – focused on the proper processing of personal data.
Legal advice in security incidents.
Representation during inspections – comprehensive support and representation before the Slovak Data Protection Authority and in court.
Selected References
GDPR legal consulting for developers – related to their office and residential building projects
GDPR legal consulting as part of due diligence – during the acquisition of projects across various sectors
Services for coworking centers and a pharmacy group, including an e-shop
Experience in representing clients in proceedings before the Office for Personal Data Protection – not only in proceedings initiated based on complaints and reports, but also in comprehensive on-site inspections conducted by the Office.