Skip to main content

Data protection
for companies

Compliant and tried and tested –
for companies of all sizes and in all sectors.

Employee data protection

A modern employment relationship requires data protection that keeps pace with developments in the HR sector. 

Employee data protection regulates the specific data protection requirements in the relationship between employers and employees. It is important to have the necessary expertise to ensure legal certainty in this sensitive area at all stages of the employment relationship, from the application process to the pension program—not only in times of economic prosperity, but also in difficult times that require change. 

Employees are at the heart of modern organisations. Making the best possible use of human capital is based on technology-driven structures. 

Modern HR platforms are powerful tools that require a high level of expertise to use in compliance with data protection law. 

Understanding perspectives

Thanks to our many years of advising national and international clients, we know the pain points of a progressive HR environment. 

We advise executive boards, management, works councils, and HR departments, and can build on the high level of trust our lawyers enjoy, even in delicate negotiations. 

Together, we develop goal-oriented, software-based solutions so that your most valuable resource can flourish in the way you want. 

Customer data protection/CRM

We put your customer relationship management (CRM) to the test.

Customer data risik

Customer data holds enormous potential, but this comes with responsibility and a host of risks. As the interface between the company and its customers, CRM can be 
a gateway for personal data breaches. That is why it is important to seek legal advice that is up to date, based on an understanding of modern systems, and backed by extensive expertise in complex legal requirements.

A company’s consistent focus on its customers is an essential part of a modern corporate philosophy. Such a focus requires the trustworthy and compliant handling of customer data. 

Compliant customer loyalty

Our legal advice ensures that the potential from acquisition to conversion and customer loyalty can be exploited in a compliant manner. Technology-driven marketing involving a large number of players requires analytical acumen and extensive expertise to ensure that leads do not become a nightmare but lead to success. 

We provide value-added advice on the implementation of advertising measures in both digital and analogue environments, the development of CRM systems, transfers of personal data to partners, and the development of digital presences on websites and social media. 

Group data protection

Making data usable – across the entire group. 

Everything would be so simple if the GDPR recognized the “group privilege.” However, even internal transfers of personal data within a group must meet the complex challenges of data protection law.

In these challenging times, companies must make data available to the entire group within the legally permissible framework in order to remain competitive and exploit the value of personal data. 

We provide support with legal expertise and modern software to turn tedious obligations into real added value! 


Cooperation with service providers

No company can do without the involvement of external service providers. The legal structuring of such cooperation requires considerable expertise. After all, complex data flows raise complex questions. 

We have a long track record in providing legal advice on national and international cooperation. We have been advising on both traditional  data processing agreements and joint controller constellations for many years. Long value chains also cast their shadow in the digital environment, which does not stop at national borders. 

Analytical and economic thinking is essential in order to grasp the complex issues, maintain clarity in a legally complicated environment, and deliver pragmatic solutions. 

Interview with Scheja & Partners

Technical and organisational data protection

Legal requirements need to be implemented at the operational level. Companies are expected to act in a risk-oriented manner, using state-of-the-art technology to create an appropriate level of protection for data subjects, e.g., through data protection by design and by default. 

We combine legal expertise with modern solutions. We use proprietary software to identify the relevant risks and address them with smart solutions. Our approach prevents assessment graveyards and translates smart checks directly into concrete measures. 

This innovative consulting approach is the answer to complex legal requirements. 

Let’s talk.

Dr. Gregor Scheja