Contact

We audit, we organise We run GDPR support throughout the year.

We start with an audit and put documents and processes in order. Then we take on day-to-day support: the DPO role, questions from departments, support for new projects, reviews and training.

Book a brief call about the annual GDPR programme

In many companies GDPR “exists”, but nobody actually runs it. Documents become outdated, accountability blurs, and the topic returns with every campaign, system rollout, HR change or reorganisation.

The biggest problem is not a single document. The problem starts when nobody manages GDPR on an ongoing basis.

Natalia Jabcoń

Sales Manager

CHALLENGES

The most common problems we solve

Documentation does not keep up with the company The documents were created at some point, but they no longer reflect how you operate today. It is hard to tell what is current and what needs fixing.

We start with a diagnosis and organise the documents so they match the company’s processes, tools and responsibilities.

Benefit for the company: it is easier to get through inspections, tenders and partner audits.

Without action: an inspection, an incident or a new rollout will quickly expose the gaps.

There is no owner of the topic HR, IT, marketing, sales and administration all work with data, but nobody joins it up: who decides, who carries out the work, who approves.

We take over running the area: we clarify roles, set rules for cross-department collaboration and keep topics under control on an ongoing basis.

Benefit for the company: less chaos and faster decisions, without wrangling over “whose task this is”.

Without action: responsibility still sits with the management board - only without tools or support.

New projects bring new questions about data Marketing campaigns, CRM, HR, cloud, outsourcing, reorganisation, new sales channels - the topic returns every time.

We support new projects and quickly answer which steps are needed to move forward without unnecessary risk.

Benefit for the company: projects move ahead without standstills.

Without action: every new initiative will come back with the same questions and rework.

You act reactively instead of keeping lasting order GDPR appears only when there is an incident, a customer question, an employment dispute or time pressure.

We run regular reviews and updates to catch problems earlier, instead of acting reactively.

Benefit for the company: fewer crises and less last-minute work.

Without action: the cost of chaos grows with every emergency.

The team does not know how to act Procedures exist, but day-to-day work is left with guesswork, shortcuts and uncertainty.

We train people on examples from your work and set simple rules in processes so everyone knows how to act in typical situations.

Benefit for the company: fewer mistakes, fewer rush questions, greater independence.

Without action: even good documentation will not work if nobody knows how to use it.

Every topic starts from scratch With every new matter you go back to basics: who decides, what to check, which documents to prepare, whom to hand them to.

We define roles, organise registers and documents, and appoint one contact person for day-to-day matters.

Benefit for the company: less wasted time and fewer last-minute topics.

Without action: GDPR will keep slowing projects down and burdening key people.

OUR SOLUTION

how the GDPR Annual Program works

First we check what is already in order with you and what needs improvement. Then we organise documents and processes. Finally we handle ongoing GDPR matters as the company changes.

Current-state audit

  • review of documents, processes and responsibilities
  • checking how data work looks across departments
  • identifying gaps and agreeing what comes first

 

  • A list of the most important gaps and a work plan for the start of the programme.

Performing the DPO function

  • acting as Data Protection Officer
  • handling DPO matters and documenting findings
  • a contact point for departments and the management board on GDPR matters

 

  • An external DPO and a clear day-to-day working model.

GDPR documentation tailored to the company

  • preparing or updating policies, procedures, clauses and templates
  • fitting documents to how the company actually operates
  • embedding the rules in day-to-day work (so they are used)

 

  • Up-to-date documents the company can actually use.

Registers and processes put in order

  • organising registers and processing activities
  • setting operating rules in key areas
  • keeping registers and documents in order

 

  • Consistent registers and a clear operating model in the main data-related processes.

Ongoing support for departments

  • advice for departments and the management board
  • handling everyday questions and organisational changes
  • support for new projects, campaigns and system rollouts

 

  • Faster answers and fewer blockers in projects.

Regular reviews

  • reviews of selected areas
  • checking what has changed and what needs fixing
  • agreeing next steps

 

  • Regular reviews instead of returning to the topic every few years.

Training and team education

  • training for employees, managers and process owners
  • translating rules into practical situations
  • embedding an operating standard in the organisation

 

  • A team that better understands its duties and makes fewer mistakes in practice.

WHO THIS SERVICE IS FOR

for companies that want GDPR in order without building the whole function in-house

The GDPR Annual Program is for companies that want orderly data protection and ongoing support, without adding the topic to the team’s workload.

The company is growing marketing, launching new campaigns and rolling out further tools.

It needs support that will not stop a project with “it cannot be done”, but will quickly show how to proceed in line with GDPR and move on.

The Annual GDPR Programme is for companies that want organised data protection and ongoing support without adding this topic to the team’s workload.

The company is growing and putting its operating model in order.

It wants to clarify roles, processes, registers and responsibilities, and embed the DPO function in day-to-day work.

The company is developing its marketing, launching new campaigns and introducing additional tools. It needs support that will not stop a project with “that cannot be done”, but will quickly show how to do it in compliance with the GDPR and move forward.

Why it matters: the company gets timely decisions and support for new initiatives, with less risk that growth will create a problem for the future.

The person responsible for administration, HR or formal matters already has too many scattered topics.

They need someone who will take over running GDPR, provide a clear plan and will not require the company to keep “pulling” the topic.

The company is growing and organising the way it operates. It wants to put roles, processes, registers and responsibilities in order, and integrate the data protection officer (DPO) function into day-to-day work.

Why it matters: the company has ongoing support and fewer issues resurfacing every few months.

WORK STAGES

collaboration you can plan

The programme is staged so it is clear from the start what is happening now, what comes next and where responsibility sits.

Assess and map risks

We learn how the company operates, assess its current compliance position and identify gaps and priorities.

Organize and implement

We update documentation, organize registers and processes, assign roles and put solutions into day-to-day practice.

Ongoing support and operational guidance

We manage ongoing matters, support teams and the board, advise on new business initiatives and carry out DPO responsibilities.

Review and maintain

We periodically review selected areas and update documents and processes as circumstances change. We also provide training when needed.

Schedule a brief call about the annual GDPR program.

Contact us

Hand GDPR support to us and take it off the team

In 30 minutes we will gather the basics and agree where to start: what needs ordering at the outset and what ongoing support looks like in the months ahead.

Natalia Jabcoń

They will follow up with any questions or recommend a next step.

Quick response

We usually respond within two hours on business days.

    By submitting this form, you acknowledge that the personal data you provide will be processed by Kancelaria Prawna Sawaryn i Partnerzy sp.k. to handle your enquiry and contact you about it. Details are available in our Privacy Policy. The rules governing the use of this website are set out in the Terms and Conditions.