Privacy & GDPR
We assist businesses with the collection and processing of data, including through new technologies.
Privacy and data protection: legal advice starts with the business
From data collection through to processing, the Firm ensures comprehensive compliance management. Starting from a detailed analysis of data flows, we design and implement privacy management systems in accordance with the accountability principle, with a clear definition of roles and responsibilities (data controller, joint controllers and data processors), internal procedures and appropriate technical and organisational measures.
The use of data is a resource that must be managed consciously: we combine the needs of business activities with the highest level of privacy protection.
When important decisions concerning data protection need to be made – such as GDPR compliance or the management of a data breach – clear and concrete legal support is essential to understand the available instruments, risks and consequences of each choice and to act safely, protecting the rights of data subjects and the reputation of the business.
We draft and review data processing agreements, joint controllership agreements, binding instructions and privacy clauses within commercial contracts and service agreements (e.g. cloud, HR, marketing and IT).
There is no standard data processing model.
We build the one best suited to each business.