In April 2018 we received a request from a client operating in the pharmaceutical industry to prepare the full set of documents required for the legal implementation of Regulation (EU) 2016/679 (GDPR). It was necessary to receive full cooperation by the client, including filling in a questionnaire to provide the necessary information for the preparation of the documents. Krasimira Kadieva and her team helped the client in drafting the necessary documents, such as various types of requests, declarations, notifications, confirmations, agreements, contracts, data protection policy, protocols, internal procedures, verification and control procedures, forms of providing information, etc. Moreover, we drafted a privacy policy and a cookies policy to be uploaded on the client’s website.
Our client was consulted if an appointment of a Data Protection Officer is necessary. We also provided a number of materials prepared by us in order to facilitate the implementation of his duties as a Controller under the requirements of the Regulation, namely:
- A manual containing practical steps to implement the General Data Protection Regulation.
- A manual containing a detailed description of the duties of the data controllers.
- A manual containing a detailed description of the rights of the data subjects and the terms and conditions for exercising the rights of data subjects under the Regulation.
- How to Prepare your website for the GDPR;
- Rules for working with clients and personal data;
- Terms for storing documents.