Handling data properly.
Identifying the legal bases, purposes, roles and responsibilities in the processing carried out by the business.
In-depth page
Privacy and personal data protection
Protecting data also means protecting processes, relationships and business continuity.
Handling personal data now touches almost every business function: human resources, marketing, sales, administration, customer service and information systems.
The use of digital platforms, management software, cloud services and artificial intelligence tools makes it necessary to look not only at paperwork, but also at how data is collected, used, shared and stored.
Legal Bloom® assists businesses in applying Regulation (EU) 2016/679 (GDPR) and the Italian rules on personal data protection.
What businesses most often need
Using digital tools and external suppliers.
Assessing relationships with processors, technology platforms and service providers, including where they involve international data transfers.
Running marketing and communication activities.
Setting compliant procedures for collecting contacts, managing consent, running promotional campaigns and using customer data.
Preventing and handling breaches.
Organising the procedures for data breaches, data subject requests and any checks by the supervisory authority.
What we do
- Privacy audits and mapping of processing activities.
- Identification and assessment of the legal bases.
- Drafting privacy notices, agreements and appointments under Article 28 GDPR.
- Preparing and updating the records of processing activities.
- Data protection impact assessments (DPIA).
- Privacy compliance review of websites, e-commerce and digital platforms.
- Assistance with data breaches and with the exercise of data subject rights.
- Preparation of organisational policies and procedures.
- Privacy training for staff.
Our approach
Data protection has to be built into business processes from the moment they are designed.
That is why we look at what the business actually does, identify the weak points and develop solutions proportionate to the risks.
GDPR compliance does not end with a privacy notice: it calls for an organisation that is aware of its processing activities and of the responsibilities that come with them.
Tools and insights for this area
Ready-to-use templates and articles by the firm on this subject, in Italian.
Would you like to review how your business handles personal data?
Let's talk about what your business needs.
Request a consultation