Data Protection Law

We ensure a permanently legally compliant data protection level.

The European Union has made it its goal in the General Data Protection Regulation having taken force in May 2018 to create one consistent data protection standard in the entire EU. This aim continues to be pursued by the soon to be expected decree of the ePrivacy Regulation. But also the German legislator has revisited the national data protection law in the reform of the German Federal Data Protection Act (BDSG) so as to ensure the appropriate protection of personal data.

Data security, however, also involves risks for the entities that have to work with the data. For example, the supervisory authorities can impose substantial penalties for violations of data protection laws.

The team of SBS Legal consults companies for the implementation of these extensive legislative reforms. Our work is to rule out data protection violations and thereby avoid administrative proceedings by authorities.

We provide advice in all matters relating to data protection that arise in daily business. Our experienced work goes beyond the general review and implementation of duties under data protection law and the drafting of legally compliant contracts for commissioned data processing. We also offer data protection compliance so that the requirements are also considered from an economic perspective.

Especially in this legal field – likewise as in IT law – it is required to stay on top of both the technical as well as the legal developments. For this reason as well, SBS Legal cooperates closely (in-house) with external and internal data protection officers.

The lawyers of SBS Legal ensure every day that companies can meet the strict requirements of the applicable data protection regulations in all respects and that they routinely implement the standards required by the case law. We ensure a permanently legally compliant data protection level.

The SBS Legal team relies on many years of experience in creating and maintaining data security. We also advise companies with registered office outside of the European Union on a regular basis, where it must be foremost ensured that the transfer of personal data to a country outside of the EU is legitimate.

Our expertise:

Our services in data protection law include the following, in particular:

• Company audits with regard to compliance with the applicable data protection law by the company (also in cooperation with SBS Data GmbH).
• Drafting of customized data privacy statements for your company (e.g. for your website, app, social media profile).
• Consulting on individual corporate measures relating to PR (e.g. promotional emails, survey, raffles, photos).
• Consulting on data protection regulatory aspects for your online business (online shop, e-commerce).
• Review of contractual relationships regarding compliance with data protection regulations.
• Check of the need to appoint a data protection officer or a data protection representative for your company.
• Check of the international data transfer and data use (customer data, leads).
• Drafting of contracts on commissioned data processing (DP contract) and review of contractual relationships regarding compliance with data protection regulations.
• Drafting of joint controller agreements.
• Drafting of legal texts required under data protection regulations (e.g. consent to data processing).
• Undertakings by employees regarding the observation of data protection.
• Protection against warnings and preliminary injunctions.
• Defense against warnings for violations of data protection regulations.
• Regulation of administrative proceedings (for example, proceedings by the Commissioner for Data Protection and Freedom of Information of the State of Hamburg).

We will also be happy to be at your side as a partner in all matters of data protection. If you are facing related legal questions, you are welcome to contact us.