Skip to content
Workstations in the office, website and automation of the data protection process

03 · Operations

Website and Automation

Your website calls no third parties, no cookie banner needed, no data to Google & co. Records, contracts, training and deletion deadlines are maintained with system support and remind by themselves.

Free first call

At a glance

Website
no cookie banner, no data sent to third parties
Records
processing activities under Art. 30 GDPR, continuously maintained
Contracts
data processing agreements per vendor under Art. 28 GDPR, expiry is reminded
Deadlines in the system
training deadlines and deletion deadlines with a log
Evidence
created while working, not once someone asks
Target group
companies up to 100 employees in the DACH region

What is maintained with system support

Shelf full of binders, records of processing activities under Art. 30 GDPR
Art. 30

Records of processing activities

continuously maintained, changes reminded

Signing a data processing agreement under Art. 28 GDPR
Art. 28

Data processing agreements

reviewed per vendor, expiry reminded

Team in a data protection training session, proof of staff training
Training

Training deadlines

who was trained when, when the refresher is due

Calendar for deletion deadlines of personal data
Deletion

Deletion deadlines

which data has to go when, with a log

Records: when the 250-person exemption does not apply

Art. 30 (5) GDPR exempts organisations with fewer than 250 employees from keeping records. That exemption falls away as soon as one of these four points applies:

  • The processing is likely to result in a risk to the rights and freedoms of data subjects.
  • The processing is not occasional.
  • Special categories of personal data under Art. 9 (1) GDPR are processed.
  • Data relating to criminal convictions and offences under Art. 10 GDPR are processed.

During the analysis we check which of these points applies to you and keep the records accordingly.

Legal references checked on 7 September 2026 on dsgvo-gesetz.de. This is general information and does not replace individual legal advice.

Frequently asked question about automation

Maintenance of the records of processing activities and of data processing agreements, including reminders on expiry or change. Plus tracking of training and deletion deadlines. The evidence is created automatically.

What happens after the first call

01

First call

30 minutes, free and non-binding. You describe the situation, we ask the right questions.

02

Proposal

A fixed proposal within 48 hours, matched to the size and processes of your company.

03

Start

Once confirmed, the analysis begins. You know in advance what we need and how long it takes.

More services

External Data Protection OfficerAI in Your Company

Let us start with clarity.

Free first call, 30 minutes. You describe where you stand, we tell you what needs doing.

Request first call
Free first call