Personal Data

Assessment and data protection program

First we establish what data the company holds, whose it is, why, and where. We build the personal data inventory: customers, employees, candidates, suppliers and visitors; the systems where the data lives; who accesses it and who it is shared with. From there we design the program: internal policies, clauses in contracts with vendors that process data on the company's behalf, security measures proportionate to the risk, and the appointment of the person in charge.

Personal data in human resources

An employee's file contains the most sensitive data a company handles: health, biometrics, family situation, background. We define what may be requested in recruiting and what may not, how to process health data and sick leave, how to document consent, how long to keep the file after the relationship ends, and how to respond when a former employee requests access or deletion.

Data-subject requests

We handle requests for access, rectification, cancellation and objection within the legal deadlines, with the procedure and forms that prove the company answered on time and in full. We prepare responses to requests designed to set up litigation, so that the company complies without handing over more than the law requires.

Transfers and vendors

We review every data flow leaving the company: to the parent abroad, to outsourced payroll, to the cloud provider, to the accounting firm. We draft the processor and transfer clauses.

Security breaches

When there is a leak, a stolen device or unauthorized access, time matters. We lead the legal response: assessment of the breach, notification to affected data subjects where required, internal documentation to prove diligence, and coordination with the technical team and, where appropriate, a criminal complaint.

Proceedings before the authority

We represent the company in verification and rights-protection proceedings and in challenging penalties. The defense begins with the file the company built beforehand: that is why the compliance program is the first line of defense.

Information current as of November 8, 2026.