ROPA & GDPR Documentation for SMEs - Records of Processing Activities, Privacy Notice & TOM Done Right
GDPR documentation is proof, not intent. This guide shows what to build - ROPA, privacy notice, TOM, DPA, DPIA - in what order, with reviewe
How to Write a GDPR-Compliant Privacy Notice (+ Free Template)
A GDPR privacy notice tells people how you use their data. Articles 13-14 set the mandatory content; this guide walks through it, with a fre
Records of Processing Activities (ROPA): Template + Examples
The ROPA is the central register of everything you do with personal data. Article 30 sets the mandatory fields; here's how to build one, wit
TOM (Technical & Organisational Measures): GDPR Checklist
Technical and organisational measures (TOM) are the concrete safeguards that protect personal data under Art. 32 GDPR. This checklist shows
Data Processing Agreement (DPA): When You Need One + Template
You need a Data Processing Agreement with every vendor that processes personal data on your behalf. Article 28 GDPR sets what it must contai
Data Retention and Deletion (Löschkonzept): Retention Periods, Deletion Rules + Template
GDPR requires you to delete personal data once the purpose for which they are processed is fulfilled, unless a statutory retention period re