GDPR AUDIT

ITrust assists companies in achieving GDPR compliance, taking into account specific laws and regulations within each EU member state (such as the French Data Protection Act (Loi Informatique et Libertés), the Spanish LSSI, etc.).

ITrust, your partner for GDPR compliance

Any company established within the European Union, or targeting EU residents, that processes personal data must comply with the General Data Protection Regulation (GDPR). In an increasingly data-driven economy, this obligation applies to numerous organizations.

As an expert in GDPR compliance, ITrust offers a comprehensive suite of services to support organizations, regardless of their size or industry sector:

  • Website compliance remediation
  • Global compliance remediation
  • Awareness training
  • Tailored support

Our services cover all essential aspects to guarantee your compliance, while reinforcing the trust of your clients and partners.

Website audit and compliance remediation

This audit focuses on your company's websites to analyze cookie usage and the various data processing operations carried out.  

Cookie audit

  • Identification of cookies used
  • Verifications:
  • Cookie management policy
  • Effective blocking of unauthorized cookies

Audit of collected data

  • Mapping of collected personal data (processing activities and data categories)
  • Compliance of collection and processing:
    • Legal bases
    • Necessity of data collection
    • Sensitive data
    • Retention periods

Audit of the exercise of data subject rights.

  • Processes and response times for requests regarding GDPR data subject rights:
    • Right of access
    • Right to rectification
    • Right to object
    • Right to erasure
    • Right to data portability
    • Right to restriction of processing

Audit of commercial communications sent to email addresses collected on the site

  • Identification of cookies used
  • Verifications:
  • Cookie management policy
  • Effective blocking of unauthorized cookies

Audit of data subject information and processing transparency

  • Mapping of collected personal data (processing activities and data categories)
  • Compliance of collection and processing:
    • Legal bases
    • Necessity of data collection
    • Sensitive data
    • Retention periods

Comprehensive compliance remediation

This audit enables the analysis of all processing activities carried out by the company, beyond those originating from websites.

Processing activities mapping

  • Personal data processing activities;
  • Categories of personal data processed;
  • Purposes of processing activities;
  • Internal or external stakeholders processing data, including third-party vendors;
  • Cross-border data flows detailing the origin and destination of data, particularly to identify transfers outside the European Union.

Data processing audit

  • Personal data processing activities;
  • Categories of personal data processed;
  • Purposes of processing activities;
  • Internal or external stakeholders processing data, including third-party vendors;
  • Cross-border data flows detailing the origin and destination of data, particularly to identify transfers outside the European Union.

Data collection compliance audit

  • Identification of cookies used
  • Verifications:
  • Cookie management policy
  • Effective blocking of unauthorized cookies

Records audit

  • Verification of compliance for mandatory records to be established within the organization:
    • Record of processing activities carried out as a data controller;
    • Record of processing activities carried out as a data processor;
    • Record of incidents related to data processing.

Training and awareness

Our GDPR training program

GDPR training raises awareness among all your employees regarding GDPR in order to establish best practices related to the processing of personal data within your organization.

  • General overview of the GDPR
  • Scope of the GDPR: data, individuals, fundamental principles
  • Key obligations 
  • Key penalties 
  • Data breach management 
  • Data Protection Officer (DPO): legal framework (designation, missions) and operational implementation (in practice).
GDPR Training

Benefits of GDPR compliance

Risk identification

Risk identification

Governance optimization

Reputational enhancement

Anticipation of regulatory changes

Audit preparedness

Competitive advantage

Alignment with international standards

Strengthened relationships with business partners

Contact us

An initial consultation with our team will allow us to fully understand your requirements and provide you with a tailored quote.