Data Protection Consultation from Specialized Lawyers

There are various contacts for questions about data protection.

• For private companies or organisations, the company data protection officer (DPO), as well as an external data protection officer, or in the case of smaller companies, an internal person who is familiar with data protection, can help in the first instance. 
• For public bodies, such as public authorities or schools, there is usually a data protection officer who acts as a contact person for questions on data protection.
• Other contact points for questions on data protection can also be consumer centres or data protection officers of the respective federal states. The Federal Office for Information Security (BSI) also offers advice on data protection issues.

We offer the use of a team of state-certified lawyers and attorneys who specialise in companies of different sizes and industries.

A data protection advisor, also called a data protection officer (DPO), is a person who assists companies and organisations in implementing data protection regulations. His or her role is to check compliance with data protection laws and regulations and to protect the personal data of customers, employees and others.

Specifically, a data protection advisor may undertake the following tasks:

• Advice: the data protection advisor advises companies and organisations on data protection requirements and makes recommendations for implementation.
• Training: The data protection advisor trains employees and managers in the handling of personal data.
• Monitoring: The data protection advisor monitors compliance with data protection regulations and checks the technical and organisational measures for securing personal data.
• Documentation: The data protection advisor often prepares and reviews documents relevant to data protection, but in some cases data protection coordinators also take on this activity.
  The data protection advisor is therefore an important interface between companies and data protection authorities and helps to ensure that personal data is processed securely and in compliance with the law.

We take care of all this and also offer software that simplifies the life of both the employee and the employer.

Violations of the General Data Protection Regulation (GDPR) can be punished by competent data protection authorities with significant fines. The amount of the fines depends on the severity of the violation and the economic damage caused.

In detail, the following sanctions can be imposed for violations of the GDPR:

• Warning: In the case of a first infringement or a minor infringement, the data protection authority may initially issue a warning.
• Fines: Fines may be imposed for serious violations of the GDPR. The amount of the fines depends on various factors, such as the turnover of the company or the type and severity of the violation. The maximum level of fines is up to 4% of the group's annual global turnover or €20 million (whichever is higher).
• Cease and desist or removal order: The data protection authority may issue an order requiring the company to remove the breach or to cease and desist in the future.
• Public notice: In the case of particularly serious violations, the data protection authority may make the violations public.
• Prohibition of data processing: In the case of particularly serious violations of the GDPR, the data protection authority may prohibit the company's data processing.

In addition, persons whose rights have been violated by breaches of the GDPR may also assert claims for damages against the company. It is also possible that competitors or consumer protection agencies send warning letters to a violating company, for which the company must pay.

It is therefore important that companies and organisations comply with the requirements of the GDPR and check their processes and systems for data protection compliance.

Data protection breaches can be reported to different places depending on where the breach occurred and what type of breach it is. Here are some possible places to go:

• With the organisation concerned: if you suspect that a company or organisation has breached data protection rules, you should first try to contact the organisation concerned directly to resolve the issue.
• With the competent data protection authority: In Germany, this is the data protection authority of the federal state in which the company or organisation that has violated data protection regulations is located. You can find the contact details of the respective authorities here.
• With the police: If it is a serious breach of data protection that can also have criminal consequences, you should inform the police.
• Consumer advice centres: Consumer centres can also help with data protection violations and provide legal assistance if necessary.

It is important to emphasise that there are different contact points in each federal state, so it makes sense to find out about the responsibilities in advance.