{"id":35247,"date":"2024-04-26T09:01:55","date_gmt":"2024-04-26T07:01:55","guid":{"rendered":"https:\/\/www.pkf-attest.es\/services\/consulting\/gdpr\/"},"modified":"2026-08-04T09:48:32","modified_gmt":"2026-08-04T07:48:32","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/www.pkf-attest.es\/en\/services\/consulting\/gdpr\/","title":{"rendered":"Data Protection Consulting"},"content":{"rendered":"\n
\n
\n
\n
\n
<\/div>\n\n\n\n

Data Protection Consulting<\/h1>\n\n\n\n
<\/div>\n\n\n\n

We manage your web privacy : GDPR Compliance<\/strong><\/p>\n\n\n\n

<\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
<\/div>\n\n\n\n
\n
\n

Ensuring compliance with the GDPR<\/h2>\n\n\n\n

Web privacy has become a crucial element for good business development. In our consultancy, PKF Attest, we empower and guide our clients to comply with data protection laws in their organizations. We offer specific, guided and practical advice to achieve and maintain compliance under the GDPR with any updates.<\/strong> At PKF Attest, we ensure compliance and collaborate with companies to comply with current privacy regulations, including the General Data Protection Regulation (GDPR) and the Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDDD).<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n\n\n\n
\n
\n

Discover our Data Protection services Protect your company!<\/strong><\/h2>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n

Legal compliance consulting<\/h3>\n\n\n\n

RGPD-LOPDDGDD Consulting<\/p>\n<\/div><\/div>\n\n\n\n

\n

Audit of data protection regulations<\/h3>\n\n\n\n

RGPD-LOPDDGDD Audit<\/p>\n<\/div><\/div>\n\n\n\n

\n

Annual Data Protection Support<\/h3>\n\n\n\n

Follow-up of RGPD-LOPDDGDD<\/p>\n<\/div><\/div>\n\n\n\n

\n

External or DPD service or support to the internal DPD<\/h3>\n\n\n\n

What is a DPD?<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n

Advise and establish a privacy management system and provide evidence of proactive responsibility for GDPR compliance.– Register of Processing Activities.– Information clauses– Contracts and clauses for processing orders– Incident management procedures.– Risk analysis report– Presentation of results<\/p>\n<\/div><\/div>\n\n\n\n

\n

Establish collaboration to carry out an audit of compliance with European regulations on Personal Data Protection.– Verification of the system’s current documentation.– Internal Audit: Visit to the facilities.– Preparation of the Audit Report.– Identification of deficiencies, risks and non-compliance– Preparation of the Action Plan.– Improvement proposals.<\/p>\n<\/div><\/div>\n\n\n\n

\n

Maintain the privacy management system and provide evidence of proactive responsibility through the reviews based on the RGPD regulations.– Update of the RAT.– Review and update of the Privacy Manual.– Support in risk analysis:– Improvement plans and awareness and training actions.– Attention to consultations on the application of the regulations to specific cases of the organization. – Attention to consultations on the application of the regulations to specific cases of the organization.<\/p>\n<\/div><\/div>\n\n\n\n

\n

In this area we offer services so that as an outsourced or internal DPD (Data Protection Delegate), the following functions can be fulfilled:– Information and Advice function.– Function of supervision of regulatory compliance. – Function of cooperation and liaison with the supervisory authority.– Function of attention to the interested parties.<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n\n\n\n
\n
\n

Privacy Impact Assessments<\/h3>\n\n\n\n

EIPD Service<\/p>\n<\/div><\/div>\n\n\n\n

\n

GDPR Situation Diagnosis Service<\/h3>\n\n\n\n
<\/div>\n<\/div><\/div>\n\n\n\n
\n

Data Protection Training<\/h3>\n\n\n\n
<\/div>\n<\/div><\/div>\n\n\n\n
\n

<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

\n
\n

Conduct a PIA to pre-assess data processing risks.– Register of Processing Activities.– Informative clauses– Contracts and clauses of processing orders– Incident management procedures, attention to rights to be implemented in the organization.– Risk analysis report– Presentation of results<\/p>\n\n\n\n

Reference: EIPD Guide of the Spanish Data Protection Agency.<\/em><\/p>\n<\/div><\/div>\n\n\n\n

\n

Review the data protection system by analyzing:– Processing activity– Review of lawfulness, transparency, legitimacy… – Compliance with the duty to provide information.– Contracts with third parties.– View of the exercise of rights.– Management of security breaches.– Internal security policies.– Documentation in force.– Internal Audit.– Identification of deficiencies.– Preparation of the Action Plan.– Improvement proposals.<\/p>\n<\/div><\/div>\n\n\n\n

\n

Provide training to data handlers in order to learn about processes and:<\/p>\n\n\n\n

– Minimize the risk of infringement– Manage risk situations – Share and consult with advisors on guidelines for action in the event of incidents or requests for data.– Review and update the ARP.– Review and update the Privacy Manual.– Provide support in risk analysis.– Create improvement and awareness plans.– Answer queries on the application of the regulation.<\/p>\n<\/div><\/div>\n\n\n\n

\n

<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/div>\n\n\n\n
<\/div>\n\n\n\n
<\/div>\n\n\n\n
\n
\n

Ensure the security and compliance of your data!<\/strong><\/h2>\n\n\n\n

We implement robust data policies and comply with current regulations to protect your customers’ confidentiality and avoid legal risks!<\/p>\n<\/div><\/div>\n\n\n\n

\n
<\/div>\n\n\n\n
\n
Contact an expert<\/a><\/div>\n<\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
<\/div>\n\n\n\n

What is Data Protection?<\/h2>\n\n\n\n

RGPD, GDPR or Data Protection Law<\/h3>\n\n\n\n

Data Protection is a set of rules related to the processing of personal data by companies, organizations, institutions, public administrations, etc., responsible for the processing. These rules generate a series of rights that individuals can exercise and a series of obligations that data controllers must comply with. Whoever does not comply may be inspected by a supervisory authority (Data Protection Agencies) and be sanctioned with fines.Data protection is regulated in the Organic Law 3\/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and in Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR).<\/p>\n\n\n\n

<\/div>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n
\n
\n
<\/div>\n\n\n\n

GDPR Compliance<\/strong>: Dealing with data securely<\/h2>\n\n\n\n

We help you with Data Protection compliance!<\/h4>\n\n\n\n

The first element to be taken into account for compliance is that the data controller must identify which processing operations it has and create a file for each of these processing operations according to the content established in Art. 30 of the GDPR.<\/p>\n\n\n\n

\n
\n

We provide you with an updated “Privacy Manual” with the compliance obligations issued by the different control authorities together with guidelines and legal reports.
<\/p>\n<\/div><\/div>\n<\/div><\/div>\n\n\n\n

What are the obligations of a data controller?<\/h3>\n\n\n\n
<\/div>\n\n\n
\r\n
\r\n
\r\n
\r\n

Adherence to legal principles<\/h3>

Have evidence of compliance<\/h3> <\/div>\r\n
\r\n
Adherence to legal principles<\/div>
<\/div>\r\n
\r\n