Protection personal data

The personal data protection sector is one of the Firm’s leading areas of expertise, particularly with regard to services provided to entities in the IT and insurance industries.

Protection personal data

The personal data protection sector is one of the Firm’s leading areas of expertise, particularly with regard to services provided to entities in the IT and insurance industries.

Specialization

Comprehensive support regarding the GDPR

When it comes to processing personal data, we work with both major domestic and international entities, as well as small businesses and online stores that are just beginning to develop their privacy policies.

Selected Areas of Customer Support

Scope of Support for Personal Data Protection

Comprehensive audits and implementation of existing personal data protection policies

Comprehensive consulting services on matters related to personal data for both data controllers and data processors

Developing internal documentation related to the processing of personal data, including a security policy, IT system management guidelines, agreements on the joint processing of personal data, a record of personal data processing activities, and a procedure for handling the rights of data subjects

Assessment of the activities of data controllers and processors in terms of compliance with personal data protection regulations (“privacy by design” and “by default”)

Assessment of insurance distribution models for compliance with personal data protection regulations in a third country, particularly in connection with cloud computing solutions

Developing solutions related to email marketing and other forms of using personal data for marketing purposes, including in accordance with the provisions on the provision of electronic services, telecommunications law, the Act on Marketing Activities, the Reinsurance Act, and the Act on Insurance Distribution

Representing clients during UODO inspections before the PUODO

An audit of business operations to ensure compliance with the requirements of the GDPR and other European Union regulations regarding the protection of personal data

Preparation of legal opinions regarding the protection of personal data

Preparing analyses related to data processing in connection with IT services

Developing and conducting training sessions on personal data protection tailored to clients’ needs

Serving as a DPO on behalf of a data controller or data processor

“Data Protection Officer” Service

Informing the controller/entity and employees who process personal data of their obligations under the GDPR and other data protection laws, and advising them on these matters

Monitoring compliance with the GDPR, other data protection laws, and the controller’s policies regarding the protection of personal data, including the separation of duties, awareness-raising activities, staff training, and related audits

Providing recommendations upon request regarding data protection impact assessments and monitoring their implementation in accordance with Article 35 of the GDPR

Cooperation with the supervisory authority

To serve as the point of contact for the supervisory authority on matters related to processing, including the prior consultations referred to in Article 36 of the GDPR, and, where appropriate, to consult on any other matters

Appointment of a person responsible for carrying out the duties of the Data Protection Officer