DPO services
DPO services
The key tasks of the data protection officer are defined by the GDPR. His/her primary role is to protect the rights of data subjects and support the lawful data processing activity of the data controller. As part of this he/she
a) informs the data controller and data processor, as well as the employees carrying out data processing, and provides them with professional advice in connection with their statutory obligations;
b) verifies compliance with the provisions of the data protection laws, the internal rules of the data controller or the data processor relating to the protection of personal data, including the designation of the scopes of tasks, raising awareness and training of the personnel participating in data processing operations, as well as related audits;
c) provides at request professional advice concerning the data protection impact assessment and monitors the conducting of the impact assessment;
d) cooperates with the National Authority for Data Protection and Freedom of Information (“NAIH”);
e) serves as a point of contact with the NAIH in matters relating to data processing, and conducts consultations with the authority in any other matter, as necessary.
Within the framework of our DPO service, we support data processing carried out in particular by employers, as we have extensive knowledge of employment and labour processes. This way, we are able to define efficiently the data processing nodes arising in the procedure of selection and establishment of employment, during the employment practices, upon the termination of employment, in connection with the departure of employees from the organisation.
We provide assistance in determining what data processing processes the employer should establish, where and by taking into account what criteria the interest assessment tests and impact assessment should be conducted.
We have special experience in the area of personnel placement and temporary work agency, the employment of foreign nationals and third-country nationals, and the official data processing carried out by the social security paying agents.