Data Protection

Practical advice in data protection

Data protection rules apply whenever an organisation processes personal data. Compliance requires clear purposes, a valid legal basis, appropriate safeguards and documentation showing how the rules are followed in practice. We advise companies, public authorities and other organisations on GDPR compliance, data governance and privacy-related risks.

Lawful processing, accountability and risk management

Effective data protection requires a clear understanding of the purpose, legal basis and responsibility involved in processing data. Legal and operational risks may arise where data is collected too broadly, retained for longer than necessary, shared without proper safeguards or used for purposes that were not clearly defined.

We advise clients on data processing activities and help them put appropriate legal, contractual and organizational measures in place. Our work covers new services and systems, customer and employee data, relationships with service providers, international data transfers and responses to data protection incidents and regulatory inquiries.

Areas of expertise:

  • Data protection in new services, systems and business processes
  • Customer, employee and marketing data
  • Controller and processor roles and responsibilities
  • Data processing agreements and service provider arrangements
  • International transfers of personal data
  • Profiling, monitoring and automated decision-making
  • Data subject requests and personal data breaches
  • Privacy notices and internal policies and procedures
  • Supervisory authority inquiries and proceedings

Responsible specialists

Maria Veermäe PHP: 2026-10-12 17:20:32 [notice X 0][/data02/virt151919/domeenid/www.glimstedt.ee/htdocs/wp-content/plugins/elementor/modules/global-classes/atomic-global-styles.php::410] Elementor\Modules\GlobalClasses\Atomic_Global_Styles::get_cache_root_key(): Implicitly marking parameter $key as nullable is deprecated, the explicit nullable type must be used instead [array ( 'trace' => ' #0: Elementor\Core\Logger\Manager -> shutdown() ', )]

Maria Veermäe

Attorney
Tristan Karu PHP: 2026-10-12 17:20:50 [notice X 0][/data02/virt151919/domeenid/www.glimstedt.ee/htdocs/wp-content/plugins/elementor/modules/global-classes/atomic-global-styles.php::410] Elementor\Modules\GlobalClasses\Atomic_Global_Styles::get_cache_root_key(): Implicitly marking parameter $key as nullable is deprecated, the explicit nullable type must be used instead [array ( 'trace' => ' #0: Elementor\Core\Logger\Manager -> shutdown() ', )]

Tristan Karu

Attorney

Related News & Cases