External Data Protection Officer (DPO)

As your external Data Protection Officer, we perform tasks including:

• advising executive management and employees on data protection requirements
• monitoring compliance with the GDPR and other applicable data protection legislation
• advising on the introduction or modification of processing activities
• providing guidance on data protection impact assessments
• reviewing data protection policies, processes and documentation

• planning and supporting data protection training
• supporting internal data protection controls
• cooperating with the competent supervisory authority
• acting as a point of contact for supervisory authorities and data subjects
• reporting regularly to executive management

These activities correspond to the statutory advisory, monitoring and contact functions of the Data Protection Officer.

The Data Protection Officer must be involved in data protection-related matters at an early stage, be able to perform their duties independently and report directly to the highest management level. The Data Protection Officer may not receive instructions regarding the performance of their statutory tasks.

The Data Protection Officer advises and monitors. Responsibility for the lawful processing of personal data and the operational implementation of the required measures remains with the organisation and its executive management.

An external Data Protection Officer is particularly suitable for organisations that:

• do not wish to employ an internal Data Protection Officer
• require independent specialist expertise
• wish to relieve internal staff of specialist data protection tasks
• want to establish a consistent and transparent data protection organisation