Understand the actual process
We examine systems, data flows, access, recipients and storage and compare them with contracts, privacy information and internal rules.
The firm
Data protection law for traceable business decisions.
We connect the legal analysis with a business’s actual data flows, ownership, contracts and evidence.
1978
firm in Salzburg
AT
acting across Austria
GDPR
European framework
3
portal languages
Our approach
A data protection issue is rarely solved by one document. Privacy information, records of processing, contracts, access concepts and actual system processes need to be consistent. We therefore begin with purposes, data categories, people affected, roles and providers involved.
Data subject requests and breaches also require a reliable process. Receipt, timing, identity checks, system searches, risk assessment, decisions and communication should be traceable. New projects and providers require particular attention to roles, legal bases, international transfers and technical and organisational measures.
The matter can be prepared digitally. A short process description and the relevant records allow a focused initial assessment. This portal supports businesses with topic pages, checks, checklists, current articles and a data-protection glossary.
How we structure data-protection questions.
Assign roles and duties
Controller, processor and joint-control questions are answered by looking at who actually determines the purposes and essential means.
Define a workable next step
The file may require a contract, access response, incident record, risk assessment or change to an internal process.
Discuss the data-protection position
Describe the process, parties and issue. We will discuss which records and decisions matter for the initial review.
Contact
Clarify a data protection question
Address
BRANDAUER Rechtsanwälte GmbH Giselakai 51 5020 Salzburg Österreich
Phone
+43 662 6280000