Corporate data protection

Requires careful attention to regulations. Many employer measures can fail due to non-compliance with data protection information obligations (e.g., occupational company integration management due to insufficient privacy notices in invitation letters), company agreements need to be reviewed in connection with data protection regulations, requirements for surveillance measures (e.g., video surveillance, photos) must be observed, and the rights of data subjects must be claimed or granted.

Typical areas of advice:

• Permissible storage of data from job applicants
• Employment contracts and data protection
• Advice on the obligations of data protection officers
• Documentation of data processing (directory of procedures, data protection impact assessments)
• Requirements for websites (consent banners, information obligations)
• Data processing agreements (Art. 28 GDPR)
• Joint responsibility agreements (Art. 26 GDPR)
• AI and data protection
• Claims of data subjects (deletion, revocation, information, damages, etc.)
• Information security (technical and organizational measures)
• Co-determination of the works council, company agreements
• Employee monitoring (e.g., video surveillance)
• Rules on working remotely

I would be glad to talk to you about your legal needs. Contact me here.