GDPR & Data protection
Data protection is not optional.
The basics of the GDPR
What you get
Data Audit
We do an audit: What data does your website collect? Which tools are installed? Who has access? Where is the data stored? Companies often don't understand how much data they collect.
Privacy Policy & Privacy Policy
We write data protection declarations that are legally correct but also understandable for normal people. With all the tools you use, your data flows, and the rights of the users.
Consent Management System
Non-essential cookies require consent. We implement: a transparently designed cookie banner, clearly differentiated categories, the option to revoke consent later, documentation of who gave consent and when.
Tool configuration GDPR compliant
Google Analytics: IP anonymization, user data only updated with consent, retention period, agreements. Google Ads: Conversion tracking without personal data, audience sync with consent. Facebook/Meta Pixel: Only with consent, cookie policy updated. CRM: Only necessary data, clear agreements, deletion policy.
Data security & Protective measures
Encryption, access control, backups, incident response plan. That's not paranoid - that's standard security.
User rights management
We set up processes so that you can respond to requests. Right to Access, Right to Rectification, Right to Erasure, Right to Data Portability, Right to Object.
Documentation & Governance
You get clear documentation. What data do you collect? Where are they going? How long are they stored? How do you protect them? This isn't for the drawer - this is for real compliance.
Regular Compliance Reviews
Data protection is not unique. As new tools are added or regulations change, we adapt.
Our process
-
1. Phase
Audit & Analysis
We understand your company, your data flows, your tools, your risks.
-
2. Phase
Strategy development
Based on the audit, we develop a data protection plan. What do we need to implement?
-
3. Phase
Roadmap & Prioritization
What are the most critical problems? Where can we make quick profits?
-
4. Phase
Implementation support
We implement the measures. Consent management, tool configuration, documentation.
-
5. Phase
Review & Adaptation
We regularly check that you remain compliant.
Who is this ideal for?
E-Commerce
Customer data, order history are sensitive. Data protection is a conversion booster – customers trust you.
B2B & Enterprise
Often more complex data flows between different systems. Data processing agreements with customers/partners must be correct.
SaaS & Apps
User data is the heart of it. Data storage, encryption, backups are critical.
Nonprofits & Charities
Donor data is very sensitive. Specific data protection requirements, transparency is important.
How much does it cost?
GDPR Audit + Documentation
2,000-4,000 EUR
Full analysis, data protection declaration, privacy policy, recommendations.
Consent Management System Setup
1,500-3,000 EUR
Cookie banner, consent management platform, integration with tools.
Full GDPR compliance
5,000-12,000 EUR
All of the above plus tool configuration, data security measures, governance documentation.
Ongoing Compliance & Support
300-800 EUR/month
Monitoring, new tools integration, compliance reviews, user inquiry handling.
Why digitalists?
Project Manager = Developer
The guy who understands your data protection is also the guy who configures the tools. This prevents gaps between compliance and implementation.
Individual concepts
No standard cookie banners. We build data protection for your company and your tools.
Everything from a single source
Audit, compliance planning, implementation, tool configuration, ongoing monitoring – everything comes from us.
Experience since 2018
We have made many companies GDPR compliant. We know what works.
FAQs
We have a cookie banner - are we GDPR compliant?
A cookie banner is a part. But not everything. You also need to: configure your tools, update your privacy policy, document your data flows, implement security measures.
Can we use Google Analytics in a GDPR-compliant manner?
Yes, but only if you have configured it correctly and your users have agreed. IP anonymization, consent management, data protection declaration – everything has to be right.
What happens if we are not GDPR compliant?
Fines up to 4% of your global sales. But more important: trust. If users notice that you don't protect their data, they won't trust you.
How often do we need to check compliance?
At least annually. Or when new tools are added or regulations change.
