GDPR Consulting
in Turin

Every organization is required to provide transparent information to the data subjects whose personal data it processes. Data subjects may include, for example: customers, suppliers, employees, consultants, app and website users, newsletter subscribers. Find out what information must be provided to data subjects.

Every organization must carry out a risk analysis to protect the rights and freedoms of data subjects, minimising the likelihood and impact of a personal data breach. To this end, we adopt the ENISA methodology for risk analysis, ensuring a structured approach in line with European standards.

Anyone who processes data under the authority of a Controller or Processor must be formally authorised and instructed. We support you in drawing up organisation charts and appointments, and we train your organization’s staff.

Article 32 of the GDPR requires appropriate security measures to be adopted and recorded in the dedicated section of the Record of processing activities. Besides supporting you in the risk analysis, we will help you identify the appropriate security measures and document them in your records of processing.

All parties outside the organization that process personal data on its behalf must be appointed as data processors, or a dedicated DPA (Data Processing Agreement) must be signed with them.

The Italian Data Protection Authority’s decision of 27 November 2008 requires, among other obligations, that an organization appoint its system administrators, periodically review their work and retain the so-called “access logs” for a minimum of 6 months.

Our team will analyse your organization’s website, preparing or updating the privacy policies in the website’s languages and suggesting the appropriate measures to ensure compliance with current privacy legislation.

Where processing is likely to result in a high risk to the rights and freedoms of natural persons – or in other cases identified by the legislation – a DPIA (data protection impact assessment) must be carried out.

In compliance with the staff training obligations set out in Art. 29 of the GDPR, Argo specialises in delivering courses on privacy and personal data protection.

Records are documents that list all the personal data processing carried out by the organization. Under the GDPR, the records to be prepared are the following:

Record of activities as Data Controller;

Record of activities as Data Processor (if the organization carries out processing in the role of Processor).

Every organization is required to provide transparent information to the data subjects whose personal data it processes. Data subjects may include, for example: customers, suppliers, employees, consultants, app and website users, newsletter subscribers. Find out what information must be provided to data subjects.

We can support your organization in the following activities:

Drafting of Business Continuity plans

Drafting of Disaster Recovery plans

Carrying out Cybersecurity Assessments