GDPR implementation, consulting, outsourcing
The GDPR requires personal data protection backed by processes, documentation and records. Extend IT, s.r.o. has certified GDPR experts who help you implement processes and technical changes, advise your data protection officer (DPO) – or take over the role altogether.
- Implementation – project design, processes, technical changes and documentation.
- DPO consulting and training – support for your DPO, including training with optional certification.
- DPO outsourcing – the DPO role covered by our certified consultants.
Let's talk GDPR The DPO Radar tool
What we take care of
| Area | What we do |
|---|---|
| Project design | A project for implementing processes and technical changes tailored to your environment. |
| Documentation | Preparation of the personal data protection documentation. |
| GDPR and DPO training | Training for your DPO and employees, with optional certification. |
| DPO consulting | Ongoing support for your data protection officer. |
| DPO outsourcing | The complete DPO role provided by our certified consultants. |
Working with partners
On GDPR projects we work with partner companies in these areas:
- Law firms – gap analysis and the Data Protection Impact Assessment (DPIA) of changes in data processing.
- Grey data specialists – documenting and finding personal data on shared drives, in e-mail and in legacy systems or documents that employees store on their local disks; practically impossible without specialised tools.
- Software suppliers – ERP, CRM and HR applications and databases (Oracle, Microsoft and others).
DPO Radar – the GDPR agenda under control
For day-to-day operation we developed DPO Radar – a module for the DPO’s agenda on the open-source helpdesk Znuny / OTOBO (successors of OTRS):
- GDPR registers – linked records of personal data, the systems that store it and the legal grounds for processing it,
- data subject requests – automated handling from submission and assessment through collecting data from processors to secure hand-over and archiving,
- incidents – handling misuse or leaks of data, notifying the supervisory authority and informing data subjects,
- audit reports – for example the activity report, listings and visualisations of the GDPR registers.
Adapting it to your company usually only takes changing configuration parameters; if the standard features are not enough, we develop the missing parts and connect DPO Radar to your other systems through its API.
How we work
- Initial consultation – we go through your personal data processing, existing documentation and roles.
- Analysis – processes and data; with our partners, gap analysis and DPIA.
- Implementation – process and technical changes, documentation and, if you wish, DPO Radar.
- Training – for your DPO and employees, with optional certification.
- Operations – ongoing consulting for your DPO, or outsourcing of the role.
Frequently asked questions
Do we need our own DPO?
Not necessarily. We can support your DPO with consulting and training, or provide the role as an outsourced service by our certified consultants.
For more information, write to us through the form below – the DPO outsourcing (GDPR) category is preselected.