🌍 Embrace Borderless Opportunities with Lexidy’s New Global Mobility Department. Learn More!
 
 

GDPR Compliance Service

What is the General Data Protection Regulation?

The General Data Protection Regulation (GDPR) is a pan-European law that intends to strengthen and unify data protection for all individuals within the European Union (EU). It also covers the export of personal data outside the EU. The main objective of the GDPR is to give citizens and residents control over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.

When does the GDPR apply?

The GDPR applies if:

  • Your company processes personal data and is based in the EU, regardless of where the actual data processing occurs.
  • Your company is established outside the EU but processes personal data in relation to the offering of goods or services to individuals in the EU, or monitors the behaviour of individuals within the EU.

Non-EU based businesses processing EU citizen’s data have to appoint a representative in the EU.

When doesn't the GDPR apply?

The GDPR does apply if:

  • The data subject is deceasad.
  • The data subject is a legal person.
  • The processing is performed by a person acting for purposes which are outside their trade, business or profession.

Why is it important?

This regulation aims to protect the personal data of European Union citizens and covers all entities that process EU citizens’ data. Citizens have the right to access the data that an entity holds about them, the right to be forgotten and the right to explicit consent. In other words, citizens have greater rights than before, while giving companies new obligations, like the mandatory reporting of security breaches within 72 hours.

What if a company breaches the GDPR?

The GDPR includes significant fines for those who don’t comply. Penalties are the greater of  €20,000,000 or 4% of a company’s turnover. In addition, it may entail a prohibition on processing personal data, which may prevent the processing of invoices.

Process of complying with GDPR?

  1. Company data collection. We study the traceability of data and the electronic devices used, among others.
  2. Recording of processing activities. 

    We will generate and update the Register of Processing Activities, which contains information on:

    – The processing of the data and the personal data processed

    – The recipients of the data

    – The deadlines foreseen for their deletion

    – The purpose of the processing

    – The technical and security measures adopted by the company to carry out the processing.

  3. Risk assessment report. We will provide a GDPR compliance information checklist for the client to complete on the company’s data processing and activity.

    This risk assessment allows us to generate the necessary legal documentation as well as regularly updating to remain compliant. We also propose any security measures that need to be implemented.

  4. Review and drafting of clauses, contracts and documentation. Review and drafting of all types of documents which includes personal data that is processed in accordance with the GDPR.
  5. Web audit and drafting of legal texts. Analysis of forms and adequacy of the Legal Notice, Privacy Policy and Cookies Policy.
  6. Drafting of all necessary documents. Drafting of the necessary documentation in order to comply with and be able to accredit the principle of proactivity, as well as other obligations.
  7. Training of staff in data protection. In order to ensure that the security protocols implemented in the company are complied with.
Lexidy is a modern, dynamic, and innovative law firm. We always put customers at the center of our work and do our best to give an exceptional experience. Our expertise in Spain and Portugal allows us to solve complex problems thoroughly and cut all the risks before they may happen.
0
The number of Golden Visas issued with us
0
How many clients we assisted in 2020
0
Our average score from 300 reviews

Find you Corporate Lawyer

HĂ©ctor Lopez Vazquez

HĂ©ctor Lopez Vazquez

Head of Corporate Department
Madeleine Cadwell

Madeleine Cadwell

Lawyer
Francesca Coluccio

Francesca Coluccio

Legal Advisor
Luisa Rivera

Luisa Rivera

Trainee
Jorge de Ros

Jorge de Ros

Lawyer

Frequently Asked Questions

Yes. It covers any company or organisation that processes personal data (whether of its employees, customers and/or suppliers), regardless of size or the volume of data it handles.

This is a good starting point, but the GDPR establishes new obligations. Therefore, you will have to review them and adapt your privacy policies to the new Regulation.

Yes. Also, it’s important that your suppliers comply with the GDPR and that you work with trustworthy brands.

Yes. All companies that offer goods and services and handle data of EU citizens must comply with the regulation, even if you are based outside the EU.

It depends if the data subject has given you their express consent to transfer their data. Have you informed them of the risks involved in transferring their data to a country that lacks adequate safeguards?

Also, do you need to communicate the information in order to perform or execute a contract between your company and the data subject? If not, do you have the authorization of the Spanish Data Protection Agency?

This means it is up to the company to decide what security measures are in place to protect the data and privacy of individuals. The business must also show that these measures are effective and comply with the regulation.

The new regulation requires that data should be collected for a specific purpose and only a minimum amount of personal data is necessary for legitimate processing purposes. You should analyse what measures, both technical and organisational, your company has in place to avoid jeopardising the rights and freedoms of data subjects.

The person who is receiving the advertising or promotions must have given their express consent. It is no longer sufficient, for example, for you to have a pre-ticked box in which they give their consent.

Therefore, you must check that all database records are aware of what and how their data will be used. You need to ensure that they have given you clear approval. This requires a review of all the information clauses that have been used up to now.

No, it is no longer obligatory.

However, there must be a Register of Processing Activities, which is documents who is responsible for the data and makes an inventory of the type of data, how it is processed and protected.

If your company has more than 250 employees or processes special categories of data, like health or ideology, this register is mandatory. Smaller businesses don’t need to do this but it is recommended as it demonstrates that you comply with the GDPR.

This person is designated by the company, internally or externally, to supervise, coordinate and disseminate your data protection policy. In addition, they liaise with the Spanish Data Protection Agency.

Their appointment is only mandatory in certain cases, like: if you are a public body or company (except the courts); if your company conducts regular and systematic observation of people on a large scale, such as internet tracking, location of users through apps, profiling, scoring, loyalty programmes or if you handle large-scale data on people on sensitive subjects, like health, ideology and sexual orientation.

Be happy. Join a community of satisfied and successful customers

Jonathan Elron
Jonathan Elron
07:37 13 Aug 23
A great law firm that covers anything an expat might need. I needed help with real estate initially, and they also helped me with immigration, taxes, and corporate legal matters. Fantastic people to work with. Alejandro from their real estate and immigration department is my main contact and he is an absolute pleasure to work with. Highly recommended!
Juan B Colombo
Juan B Colombo
15:25 04 Jul 23
I had an issue with an incorporation and I had to request a refund for my order. It took a little longer to get the refund but the CEO took personal care of my case and issued the refund as soon as it heard about the case. Very serious and responsible company.
pawel grochola
pawel grochola
10:55 18 May 23
I used Lexidy services to apply for SETR status.I did it after contacting a number of providers, but Lexidy were the only ones that consistently kept regular communication, promptly answered e-mails, kept all the appointments. Something that is a normal expectation but rarely met in Spain :).In addition they were very competent, provided clear and accurate advice. They also flexible and accommodating and Sara Rinaldi that i dealt with is a very pleasant person to deal with.It seems it is a business that have a clear business model of providing good quality service and as such I think it deserves to be promoted.
Bob Tricarico
Bob Tricarico
12:34 15 Mar 23
Lexidy Law Boutique supported us on our recent home purchase in Portugal. It was a long process, but our lawyer, Pedro Saldahna was with us every step of the way. He guided us through the process and even helped with our builder, our estate agent and our mortgage company. The entire Lexidy team has been super supportive throughout the whole process. Highly recommend!
Ryan R
Ryan R
12:47 17 Aug 22
Lexidy has helped us so much in both the business and immigration side. We continue to use them for all legal needs and recommend them highly.
Ali Delshad
Ali Delshad
11:49 26 Jul 22
First of all, I would like to appreciate all the team members of Lexidy for helping me to get my residency card.I had a great experience especially on the SEF appointment day with their kind and helpful Brazilian expert which made my experience smooth and without stress.When you decide to work with this law company you should notice that you don’t just pay for lawyers but also for the quality, respect and safety.I’m totally happy with the processes and quality of their job.
Foysal Miah
Foysal Miah
20:47 25 Jul 22
It’s been more than two years now, I have known Lexidy and their amazing team. This company peoples are so active and helpful especially Karla. She is very kind and patience. Really appreciate your job and helping us to get a better future.
RICHARD BRITTON
RICHARD BRITTON
21:46 29 Jun 22
We contacted Lexidy Law boutique when we recently moved from Cyprus to open a new chapter in our lives to move into a house in Brittany that we had bought 12 years previously. We had underestimated the twists and turns involved in obtaining residency in France - so we contacted Lexidy Law Boutique and were assigned Eleonore, an immigration lawyer well acquainted with French immigration laws. From the very beginning we realised she was determined that we should have a successful outcome and she guided us expertly to avoid all the pitfalls in the process of applying for residency. She even accompanied us to the prefecture and ensured that everything went smoothly - without her presence we might well have not succeeded.We thank and highly recommend Eleonore and Lexidy Law Boutique.
Declan Ryan
Declan Ryan
20:48 01 Jun 22
The Lexidy team is uniquely positioned to provide pan-European business and tax advisory services; what would be complex or impossible for a country-specific advisor is straightforward for Lexidy. They answered in days what would take weeks for other firms.
Rick Kleinhans
Rick Kleinhans
13:03 27 Apr 22
Lexidy has been a lifesaver. The entire team has helped us so much on different matters both personal and corporate. Isabel in correcting an error by a previous accountant that was costing us an extra €1000 every month in social security payments! Jose with various matters and tax advice. Diego in helping us get documents notarized in Valencia even though he is based in Madrid. I cannot recommend them enough!
Aleksandar Vorinski
Aleksandar Vorinski
08:12 25 Apr 22
I recently purchased apartment, got NIE and opened bank account with their help. I m satisfied with their service, they are accurate and responsible.
A
A
17:31 24 Apr 22
I’ve dealt with hundreds of solicitors through business over the years but I must say Cristina and Lexidy Law are really something special. Responsiveness, proactiveness, knowledge and professionalism is, quite frankly, outstanding.M.
Jonas H
Jonas H
15:50 03 Dec 21
The labour law advice I was looking for. Delivered the answer quoting the law texts in Spanish as requested to make sure I was actually getting the correct answer for my question!These people are worth your money.
Kristen Wilkinson
Kristen Wilkinson
14:53 20 Oct 21
Update: While all of the initial responses were pretty quick, they started getting busy, so I had to constantly follow up. We have since sought assistance elsewhere.My husband and I plan to move from the USA to Porto, Portugal in the spring/early summer of 2023. We didn't know where to start or what to expect. I searched online and found Lexidy Law Boutique. Their website is intuitive, informative and inviting. I emailed the office and Lidiane responded within a few hours. Based on the information in my email, she emailed us appropriate information on our situation. She was very professional and offered to set up a web call if we wanted to. We ended up having our web call today and will be starting our journey of becoming Portuguese citizens. She informed us of the first steps, all of the documentation we need and what the law firm can do for us. Right after our call, she emailed us detailed information regarding pricing and what is entailed in that pricing. So far, the beginning of our journey is a positive one.
Parisa Fardad
Parisa Fardad
05:20 21 Sep 21
I have started to work with this company which was my friend recommendation. My first experiences have been very good. They are responsive, friendly and cares about their costumers.
Thijs van de Laak
Thijs van de Laak
05:16 15 Sep 21
I experienced good, constructive and accurate service by Lexidy in composing my SHA. Thanks Hector and Samual
é™łéœ‡æ±
é™łéœ‡æ±
07:43 08 Sep 21
Samuel is very professional and patient. Really appreciate.
Erik van der Linden
Erik van der Linden
00:01 08 Sep 21
I contacted this company regarding a Labour dispute with a former employer. I quickly got an honest response that according to Spanish Labour laws, nothing could really be done anymore. Impressed with their swift, direct and honest opinion, I explained this was a very unusual case and would like to hire their services. Again I got a swift and direct answer that they did not deal with those kind of cases. Rather than milking a client, they showed admirable integrity by turning down the case
. a rare quality these days. My compliments.
Next Reviewsjs_loader

Related Services

Non-Lucrative Visa

Visa for Non-EU nationals who wish to live in Spain without performing any economic activity.
Read More

Buying a house in Spain

Visa for Non-EU nationals who wish to live in Spain without performing any economic activity.
Read More

Tax Anlysis

Visa for Non-EU nationals who wish to live in Spain without performing any economic activity.
Read More

How can we help you?

Subscribe to our newsletter

Stay ahead of the changes that matter to you

icon