GDPR Consulting, Data Protection
Legal advisory services on data protection issues and provision of DPO services for businesses.
What is GDPR and what is it good for?
GDPR stands for General Data Protection Regulation, the European Union's general data protection regulation, which is mandatory and directly applicable in member states, including Hungary, starting from May 25, 2018. It imposes strict requirements on the processing of personal data for all domestic data controllers and processors.
Why is it good to implement it into the daily life of a company?
- Firstly, because it is mandatory.
- Secondly, to avoid fines.
- To increase reliability.
- To enhance employee satisfaction.
In many cases, data controllers and processors are frightened by the specter of the maximum fine of 20 million euros defined in the GDPR. Indeed, according to the regulation, this is the upper limit of the fine that can be imposed by the supervisory authority, but it poses less of a threat to conscientious (GDPR-compliant) average domestic data controllers and processors. However, a fine of 30 million (Data protection fine for a beauty salon due to camera surveillance) or 80 million (Data protection fine for a postal filter examination notice) is no longer considered exceptional in a domestic context.
Therefore, it is strongly recommended to carry out data protection tasks as soon as possible because, in addition to warnings and fines, further adverse legal consequences may arise in the event of a violation. This includes, among other things, compensation claims and damages for natural persons affected by the violation (e.g., employees), which can be at least as severe as the fine!
Every business needs to assess its own data processing processes. This can be done by the companies themselves, they can hire a Data Protection Officer (DPO), or they can engage an external expert, such as our law firm.
What data protection services can we provide?
- Comprehensive GDPR assessment,
- Preparation and implementation of GDPR compliance,
- Clarification of specific data processing issues,
- Provision of Data Protection Officer (DPO) services,
- Reporting of data protection incidents,
- Answering data protection questions related to customer acquisition (newsletter, website, form submission, messaging).
When is it mandatory to provide a data protection officer (dpo)?
The Data Protection Officer (DPO) is the person who assists the data controller and processor in matters related to the protection of personal data. It serves as a form of control for organizations and has a consulting and data subject protection function.
It is mandatory to appoint a DPO in the following cases:
- When data processing is carried out by public authorities or other bodies performing public tasks, with the exception of courts acting in their judicial capacity, or
- The main activities of the data controller or processor consist of processing operations that require regular and systematic monitoring of data subjects on a large scale.
Customer acquisition related data protection issues
For businesses, having the right legal preparation for advertising provides a solid foundation for confidently building their customer base through both online and offline methods. Entire databases can become unusable if email addresses of newsletter subscribers are not requested using the right method, and a lot of invested time and energy can go to waste.
In our data protection work, we increasingly encounter the legal assessment of our clients' marketing activities. We answer questions such as:
- In what cases can messages be sent without consent?
- How can direct newsletters or other messages be sent to the recipient by email, Messenger, or Viber?
- Can abandoned cart email messages be sent?
- Can advertising be included in order status notifications, and if so, in what way?
For more information about our data protection services, you can find it here.
Can we help with GDPR-related legal questions? We look forward to your call!
