GDPR compliance

What we do

  • Controller / processor identification
  • Data mapping and register building
  • Data breach
  • Gap analysis
  • Information notices
  • DPIAs (data processing impact analyses)
  • Data protection policies and procedures
  • CCTV & geolocalisation
  • Data processing
  • International data transfers
  • Data access and other statutory rights

How we do it

  • Advice & strategy: access rights requests, data breaches, compliance efforts, etc.
  • Data protection audits, processing register: interviews with your teams to identify data processing operations, building register of processing activities
  • Training (from awareness to DPO trainings and executive briefings)
  • Legal risks assessments
  • Deep analysis of sensitive processing activities, DPIAs, balance of interests and other specific documentation
  • GDPR documentation drafting
  • Contractual assistance: drafting and negotiation data agreements (controller-to-processor, joint controllers)
  • Litigation (before the CNPD and the Luxembourg administrative courts)

Sector experience: insurance, health, public, industry, transport & logistics, finance, accounting, education & training, e-commerce, employment & interim, real estate, etc.

Our solutions /

GDPR light

GDPR light

Non-personal data

What we do

  • Trade secrets
  • Confidentiality
  • European Data Act
  • Data Governance Act & reuse of data
  • Open data
  • European Data Spaces

How we do it

  • Advice & strategy: identification, protection, process, etc.
  • Contractual assistance: drafting and negotiation of all types of agreements
  • Litigation (civil and criminal): confidentiality breach, trade secrets theft, etc.

What else ?
Passioned by our subject, we are also:

  • Very active in professional associations and advisory groups
  • Active authors and members of editorial committees of several publications on intellectual property
  • Regularly called upon in connection with legislative initiatives
  • Lecturers @Uni.lu.

Our other practices