Privacy you can genuinely prove
GDPR is not a document you write once. It is a way of working that you must be able to explain to a customer, a supplier or the data protection authority.
72 hours
To report a personal data breach
€20M
Maximum fine or 4% of turnover
1 register
Processing register as the basis
What GDPR asks of you
The General Data Protection Regulation is about care: which data do you process, why, for how long and who has access? You must be able to support that with a register, agreements and technical controls.
In practice things go wrong during execution: a processor agreement is missing, an old account stays active, or nobody knows who reports a breach. We fix that foundation and keep it current.
Who does GDPR apply to?
Almost every organisation processes personal data, from customer records to personnel files and camera footage.
- Organisations with customer or patient data
- Employers with personnel files
- Marketing and commercial teams
- Suppliers that process data
- Webshops and online service providers
- Associations and foundations
What we work on
We establish the foundation and translate it into technology, so privacy does not stay a standalone document.
Document
- Processing register and purposes
- Privacy statement and legal bases
- Processor agreements
Protect
- Access to personal data
- Encryption and logging
- Retention periods and clean-up
Control
- Breach procedure with deadlines
- DPIA for high-risk processing
- Yearly review and update
How we get your privacy in order
No abstract legal story, but an approach that connects to the systems you use every day.
Quick scan
We map data flows and name the biggest risks right away.
Documentation
We complete the register, update statements and close processor agreements.
Implementation
We set up access, logging and retention, and test the breach procedure.
Assurance
A yearly cycle keeps register, agreements and technology aligned.
Privacy in order, without panic
Start with the free IT check or book a conversation. We tell you what is really needed and what can wait.
No obligation · response within one business day · practical and clear