We advise clients on data protection and privacy matters, including compliance with the General Data Protection Regulation and Croatian data protection legislation. Our work covers the processing of employee, customer and business partner data, digital and workplace privacy, contractual arrangements and the management of regulatory risk.
We tailor our advice to the nature of the client’s business and data-processing activities, helping clients establish compliance frameworks that are legally sound and practical to implement.
- GDPR compliance reviews and data protection audits
- mapping of data-processing activities and preparation of records of processing activities
- preparation and review of privacy notices, consent forms, policies and internal procedures
- drafting and negotiation of data-processing, data-sharing and joint-controller agreements
- advice on lawful bases for processing and the retention of personal data
- employee and workplace data protection
- direct marketing, cookies and online privacy
- advice on transfers of personal data outside the European Economic Area
- handling data-subject requests and personal data breaches
- advice and representation in proceedings before the competent data protection authority