Company History

The Company’s Founding

“Frommel Datenschutz” was founded in January 2010 in Bad Homburg by Daniel Frommel as a sole proprietorship, at that time still operating under the name “Frommel Multimedia.” Initially, the company’s focus was on information and communication technologies (ICT). This included projects involving the installation and maintenance of IT infrastructures and communication systems. Data protection and information security were always at the forefront of our work. We also concentrated on product sales, along with related consulting and support services.

Shift in Focus Toward Data Protection

Over time, however, our focus shifted. In 2012, we received our first data protection inquiries from small and medium-sized enterprises, along with the question of whether we could also serve as their external Data Protection Officer (DPO). Since we considered data protection a very important issue at the time, we completed the necessary training and certifications to ensure we could competently address the topic in the future. Since then, we have continued to expand our expertise in data protection and have acquired additional qualifications and competencies.

On May 25, 2018, the GDPR (General Data Protection Regulation) came into effect. For us, this was confirmation that we had been moving in the right direction.

Expanding Expertise in the Area of the Digital Operational Resilience Act (DORA)

In January 2023, the EU finally enacted the Digital Operational Resilience Act (DORA). DORA is a European Union regulation aimed at strengthening the resilience of financial institutions and financial market infrastructures against cyberattacks. Particular emphasis is placed on ICT risk management, which requires the identification and mitigation of technical risks in the field of communications and information technology. Furthermore, all ICT-related service providers must be identified, assessed, monitored, and managed with regard to potential ICT risks. The role responsible for this is the so-called ICT risk manager. We took this as an opportunity to further develop our capabilities. We are now able to offer the role of external ICT risk manager as needed. Our extensive experience and track record in information and communication technologies serve us well in this regard.

Expanding Our Expertise Toward ISO 27001

Also in 2023, we began preparing other companies for ISO 27001 certification. We have now completed several certification cycles. To date, all of our clients have achieved ISO 27001 certification—most of them without any nonconformities (findings), but only with identified areas for improvement.

Conversion to a GmbH

Finally, in 2025, the sole proprietorship “Frommel Datenschutz” was converted into “Frommel Datenschutz GmbH.”

Expanding Expertise in Business Continuity

Particularly in the context of our numerous DORA projects, it has become clear that special attention must be paid to business continuity. Therefore, starting in 2025, we also offer services in this area and, upon request, provide an external Business Continuity Manager. To this end, we identify and assess business-critical processes and their risks, conduct business impact analyses, develop emergency and recovery plans, organize regular drills and tests, and monitor the effectiveness of business continuity measures through continuous review and improvement.

Have we piqued your interest? Then simply contact us to learn more. The initial consultation is always free of charge.