Privacy. Security. Experts United.
Privacy-as-a-Service:
Order your individual contact for your professional data protection
Over 50 TÜV / DEKRA certified experts
Many years of industry-specific experience
Consultation regionally on site or digitally
Your company has high data protection requirements due to the processing of a large amount of customer data and a complex business model. Our data protection officers advise your internal data protection officers on technical and organisational challenges as well as to the Setup and operation of a DSMS.
In addition to the GDPR, you must also sector-specific legislations take into account. With over 700 customers and projects from over 250 industries, our experts also have the right Solution for the requirements of your specific industry.
Auditing, documentation as well as process automation require an understanding of your internal data protection efforts. The data protection officers of Robin Data support you regionally and offer a holistic, individual and personal support.
Our services Data protection-as-a-service
Robin Data's certified data protection officers develop and monitor your data protection management system (DSMS). In close coordination with your management and other persons of the data protection organisation, the current status of data protection in your organisation is determined on the basis of an inventory and corresponding measures specifically for your company developed.
Legal components of data protection documentation, such as the directory of processing activities or the deletion concept, are set up and other accountability and documentation obligations are established in compliance with the GDPR. Our data protection officers raise awareness among your employees, act as an interface to the supervisory authority and are your individual contact for questions.
Definition of the data protection organisation
Review and, if necessary, amend the privacy policy of the website
Establishment of the list of processing activities
Inclusion of necessary data protection impact assessments
Inclusion of necessary contract processing contracts
Checking the data security and defining an action plan
Preparation of a deletion concept
Implementation of key user training courses
Inclusion of the necessary information requirements
Position as external Data Protection Officer according to Article 38 GDPR
Advice to persons responsible within the company, processors and employees
Monitoring compliance with data protection rules
Information on new decisions, judgments or findings in data protection law
Interface to the supervisory authority
Use of the Robin Data Software
Hours of service time per year specified in the package, to the package overview
External data protection officers bring with them profound data protection expertise and experience and can thus usually advise with pragmatic solutions
Through their experience, the external Data Protection Officer is usually much faster in the implementation of data protection, they know suitable templates, tools and best practices
External Data Protection Officers can advise impartially, process optimisation through external advice is usually more recognised and better accepted
External Data Protection Officers must first familiarise themselves with the company structures, the processes and contact persons
Internal Data Protection Officers usually have to implement data protection alongside their normal activities in the company. Time resources for this are usually scarce and therefore progress is usually slower
Technical knowledge on data protection often has to be acquired first. In addition, the internal Data Protection Officer usually lacks the exchange with other Data Protection Officers in their industry.
The internal data protection officer is rather unpopular. Uncomfortable questions about established processes are unfortunately part of the job.
Internal Data Protection Officers know their organisation well, are familiar with company processes and have quick access to the relevant contact persons.
We wanted a modern and digital implementation of our data protection management system. Robin Data convinced us with the functions, the many templates, the automation options and the very competent and friendly service as well as the cooperation with a partner nearby.
For us as a specialist in learning transfer and sustainable change, the topic of data protection is fundamental. That is why we are very happy to know that this important topic is in good hands with Robin Data. This allows us to focus fully on the needs of our customers.
Compliance with data protection in accordance with the EU's General Data Protection Regulation is a matter of fact for us - this is how we want to offer our guests a trusting environment to relax in and a home away from home. In order to correctly implement the specific requirements in service management, we worked with Mr. Döring from Robin Data. We are happy to recommend him.
Does it all have to be implemented?" customers ask us. Since Robin Data, a lot has changed for us in the argumentation. Because so much has been prepared and automated, we suddenly have valuable time resources to deal with individual data protection issues at the customer.
The topic of data protection is of great importance in all divisions of the WENZEL Group with regard to the trustworthiness towards our customers as well as our employees. With the increasing digitalization of our processes as well as our products, the need for protection and security of the same increases in addition to the actual data volumes. At this point, we would like to thank Prof. Dr. Andre Döring for his excellent cooperation.
We would like to thank Robin Data and especially Wolfgang Evers for the professional implementation and continuous maintenance of our privacy policy according to DSGVO.
As a medium-sized company, data protection is very important to us. However, we often do not have the resources to take care of it accordingly. Robin Data takes the burden off us. With the help of the Robin Data software we work very closely and efficiently together. A big thank you to Professor Döring and his team!
With Robin Data I can efficiently serve all clients in a legally compliant manner. The integrated templates allow very efficient work, which makes every client happy! Keep it up - great support!
Request a quote Robin Data Services
We will be happy to provide you with an offer that suits your needs.
We are happy to help you! We have the right software for internal data protection officers. It simplifies the daily work with law-compliant templates, suitable content and pragmatic solutions.
We would also be happy to set this up with you or advise you on your data protection questions. Visit one of our webinars and online demos on Robin Data's data protection software! Data protection made easy.
Who must appoint a data protection officer?
The obligation to appoint a data protection officer applies in accordance with GDPR primarily to public authorities and public bodies. But also companies whose core activity is the particularly extensive processing of personal data or the processing of special categories of data (in accordance with Article 9 and the 10(GDPR), must appoint a data protection officer in accordance with the GDPR. (see Article 37 GDPR)
An opening clause in the GDPR offers each member state the opportunity to create stricter conditions for the appointment of an in-house data protection officer. In the new Federal Data Protection Act, for example, Germany has, among other things, regulated the obligation to appoint company data protection officers more strictly than in the GDPR.
For example, the appointment of a data protection officer pursuant to Art 38 BDSG is mandatory for all companies in Germany, provided that at least 20 employees (Federal Council decision on 20 September 2019) constantly deal with the automated processing of personal data.
In summary, as a private company, it is easy to assess whether the appointment of a data protection officer is necessary on the basis of three criteria. If at least one of the three criteria applies, there is a legal obligation to appoint a data protection officer. The criteria are:
The intentional or negligent failure to appoint a company data protection officer constitutes an administrative offence subject to a fine.
Even if the company is not subject to the obligation to appoint a data protection officer according to legal requirements, the regulations of data protection law must nevertheless be fully complied with. This poses a particular challenge for smaller companies, as they simply lack data protection expertise. In such cases it makes perfect sense to voluntarily appoint a data protection officer.
When is a company obliged to appoint a data protection officer?
The obligation to appoint a data protection officer applies in accordance with GDPR primarily to public authorities and public bodies. But also companies whose core activity is the particularly extensive processing of personal data or the processing of special categories of data (in accordance with Article 9 and the 10(GDPR), must appoint a data protection officer in accordance with the GDPR. (see Article 37 DSGVO). You can find more information on this in our Wiki article.
Who supports the internal data protection officer in legally complex processes?
In order to support the internal data protection officer, an external data protection officer can be appointed to advise him or her.
What are the tasks of an external data protection officer?
The tasks of an external data protection officer can be divided into the following areas:
1. Internal tasks within the company
2. Cooperation with the supervisory authority
3. Contact point for interested parties
4. Contact person for the company
What requirements must external data protection officers meet?
Can an external data protection officer be appointed for several sites?
Yes, if your company has several locations, a Data Protection Officer can be appointed for several locations. The partner network of Robin Data supports you with experts all over Germany.
Are Data Protection Officers personally responsible for compliance with the GDPR?
No, data protection officers are not personally responsible for legal compliance. The company itself is always responsible for data protection. Data Protection Officers have an advisory and supporting role.
Robin Data's experts have many years of industry-specific experience in the field of data protection and work with guaranteed legally compliant content created in cooperation with lawyers.
What happens if you do not appoint an external DPO?
The appointment of an external DPO has been mandatory for many companies for years, yet many companies do not comply with this obligation. The data protection supervisory authorities punish this violation with a data protection fine of up to 50,000 euros.
What requirements must an external data protection officer meet?
When appointing an external data protection officer for your company, you should ensure that the external DPO has the necessary expertise. This means in particular legal / data protection knowledge, but also experience in your industry and company size. Well-qualified data protection officers also have knowledge of information security, quality, project and risk management and possess technical skills that are important in data processing. When making the appointment, ask for proof and certificates of the aforementioned knowledge.
How to become an external data protection officer?
A external data protection officer is appointed by the company. In order to meet the requirements for the position of data protection officer, persons can qualify through certain further training courses. The further training courses are offered as Training or as a University degree .
How can you contact us?
Please feel free to contact us free of charge on +49 (0)3461 479236-0 or reach us via our Contact form.
Record of processing activities
data protection impact assessment
Erasure concept
The Robin Data GmbH team will advise you on our solutions without obligation and free of charge and answer your questions by phone or e-mail.
In the one-hour appointment, we present a function of our software solutions, such as the deletion concept or the TOMs, to you in detail.
Information Robin Data solutions, events and developments in compliance, data protection and information security.
Find out more about the functions of our Robin Data software and legal texts in the area of data protection in our Help Centre.
