What is included
- Record of processing activities and risk analysis
- Legal texts for the website and forms, and processor agreements
- Procedure for handling rights requests and notifying breaches
Record of processing activities, legal texts, processor agreements, risk analysis and a data breach procedure.
Data protection and GDPR compliance: record of processing activities, legal texts, processor agreements, risk analysis and a data breach procedure. We handle it ourselves from start to finish, with professionals from our network, with a written quote before we start and your case visible in your client area. We ask for the list of processing activities, the suppliers with access to data and your website.
Data protection fines rarely arrive from an inspection: they arrive because somebody complains. What is then reviewed is whether documentation existed and was applied, not whether there was a badge on the website.
What it includes: record of processing activities and risk analysis; legal texts for the website and forms, and processor agreements; procedure for handling rights requests and notifying breaches. What it does not include: it does not include acting as external data protection officer, contracted separately, as a procedure with its own quote.
A description of the data you process and why.
A list of suppliers with access to data.
Your website's current legal texts if any.
We answer your enquiry within 1 working day and send the written quote within 2 working days.
Once your documents are complete, we prepare the file between 5 and 15 working days.
Full compliance usually closes within a few weeks, depending on how many processing activities and suppliers must be documented.
See the pricing page for how we charge this kind of matter.
We look at which data you process, with which tools and what you already have: processing records, legal texts, supplier contracts.
We ask for the list of processing activities, the suppliers with access to data and your website. Agreed price for the adaptation.
We draft the processing records, the website and form texts, and the data processor contracts.
We leave you the procedure to handle rights requests and breaches, and tell you what to review when you change tools or activity.
There is a very short deadline to notify the authority. Write today, not tomorrow.
It is answered within a deadline. We handle it as a separate action, with a written quote before we start.
Only in certain cases. We check before selling you something you are not required to have.
People who come for “Data protection and GDPR compliance” often need one of these Business and self-employed procedures too. If your case mixes several, it goes in a single file with a single quote.
Tell us what your business needs, its legal form and whether a deadline is close.
Tell us about your case and which documents you already have. We tell you what fits, what is missing and what it costs.