GDPR and data protection — compliance with data protection law

The GDPR (General Data Protection Regulation) is the European Union’s data protection regulation. It applies to organisations in the EU, and also to organisations outside it — including companies in Serbia — that offer goods or services to people in the EU or monitor their behaviour there. Where it applies, compliance is a legal obligation — and it is also key to earning the trust of your users, clients and business partners. If you process personal data for EU clients, they will usually require GDPR-level protection in your contract with them.

Our GDPR implementation service lets your organisation manage personal data protection in a way that is clear, legally sound and technically workable.

What the service covers

  • An analysis of how you currently process personal data and where the risks are (GDPR gap analysis)
  • Preparing and updating all the documentation:
    • Privacy policy
    • Cookie policy
    • Consent wording and forms
    • Data processing agreements with processors
  • Procedures for responding to data subject requests (the rights of access, erasure, portability…)
  • Defining retention periods, security measures and internal access controls
  • Staff training on processing data correctly under the GDPR and Serbia’s Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti)
  • Support during inspections by the Commissioner for Information of Public Importance and Personal Data Protection (Serbia’s data protection authority) and with any complaints

Key benefits for your organisation

  • Compliance with the GDPR and Serbia’s Law on Personal Data Protection
  • Greater trust from clients, users and business partners
  • A lower risk of heavy fines and damage to your reputation
  • Properly structured, transparent processing of all types of personal data
  • A competitive advantage and readiness for international business

How STANDARDISO helps

Whether you are a small IT company, an e-commerce platform, a school, a clinic or a large corporation, data protection law applies to you. We help you meet all your obligations efficiently and without fuss.

Contact us for a free compliance assessment and a plan for bringing your organisation into line with the GDPR and Serbian law. Everyone on our team works in English, and we can prepare your documentation in English, Serbian or both.