Information Obligations under the GDPR

Data Protection at Bleispitz GmbH

Since May 25, 2018, the new EU General Data Protection Regulation (GDPR) has been in force across Europe. This regulation standardizes the handling of personal data by private companies and public authorities throughout the EU. It is therefore necessary for companies to familiarize themselves with the GDPR and determine the implications it has for their business operations.

This means that all processes involving personal data—such as collection, archiving, storage, and deletion—must be identified and documented. In addition, all individuals whose data is affected must be informed about how their data is processed, and consent must be obtained where required for the use of such data.

This is a highly complex topic, as it concerns not only applicants, customer and supplier data, but also the personal data of the company’s own employees.