Compliance

Q: What steps should a company take to properly implement GDPR?

A typical process includes GAP analysis , data flow mapping , execution DPIA (Personal Data Protection Impact Assessment) , contract review, implementation of security measures and introduction of internal policies. We definitely recommend consulting with an expert during implementation. Contact us!

Q: What is WHISTLEBLOWING and why is it important for a company?

Whistleblowing means the possibility of safe report unethical or illegal behavior within the organization. It is essential for risk management, corporate culture and compliance with legal obligations.

Q: What legal requirements exist for WHISTLEBLOWING?

The legal framework stipulates obligation to implement a reporting system for companies above a certain number of employees, including regular reporting and whistleblower protection.

Q: What is ESG and why is it important?

ESG includes environmental, social and governance aspects of business. It is crucial for companies in terms of reputation, regulatory obligations and access to financing.

Q: Who must submit an ESG REPORT and from when?

According to the directive CSRD many medium and large businesses must implement mandatory ESG reporting The obligation is gradually being extended to other entities.

Q: What information does a quality ESG REPORT include?

The ESG report contains data on emissions , energy consumption , carbon footprint , climate protection measures, social indicators (diversity, wellbeing, equal opportunities) and elements Corporate Governance .

Professional legal services in the field of compliance

GDPR, whistleblowing, ESG – doesn't it mean anything to you? Do you have a company and simply want to do everything right and solve problems before they arise? Then it's the right time to start solving corporate compliance.

We perform compliance audits and our training will turn you into a compliance specialist who will know everything you need.

Top experts

Our lawyers have extensive experience and deep knowledge in the field of compliance.

Complex services

We provide complete legal advice from the preparation of preventive programs to the solution of problems that have already arisen.

Individual approach

We handle each case with the utmost care and adapt to the client's needs.

GDPR:

Legal advice related to the handling of personal data

We provide all legal advice related to the protection of personal data.

Preparation of documentation related to GDPR

We prepare all documents related to the protection of personal data, such as internal directives, contracts for the processing of personal data, consents of data subjects and more.

Legal audit of personal data processing

We perform an analysis of the current situation, draw attention to shortcomings and propose suitable methods of correction.

WHISTLEBLOWING:

Providing legal advice in the field of whistleblowing law

We provide legal advice regarding the rights and obligations of both whistleblowers and organizations.
We conduct employee training and we prepare manuals for correct and effective whistleblowing solutions.

Preparation of whistleblowing policies and strategies

We revise for clients or from scratch we prepare whistleblowing strategies or policies so that everything in their companies is set up efficiently and effectively.
At the same time, we help clients put these policies into practice so that they don't just stick to theory, which is pointless in itself.

Representation of clients in whistleblowing disputes

We represent clients in whistleblowing disputes, both from whistleblowers and organizations.

IS G:

Legal advice in the field of sustainability (E – Environmental)

We provide advice on legal requirements related to environmental protection, including compliance with regulations regarding reducing emissions, waste, recycling, energy efficiency and sustainable use of natural resources.
We perform compliance audits, we advise on the implementation of ecological measures and provide support in obtaining certifications.

Legal advice in the field of social responsibility (S – Social)

We advise on social responsibility, which includes labor law, equal opportunities, human rights, employee protection and personal data protection.
We advise on creating inclusive working conditions, evaluating compliance with labor law, solving issues of discrimination and bullying in the workplace and ensuring compliance with regulations on personal data protection (see e.g. GDPR).

Consulting in the field of corporate governance (G – Governance)

We help with the implementation and management of corporate governance policies, transparency and ethical rules. It's about compliance with the rules of good governance, proper control and risk management, which result from the company's activities.
We create and implement ethical codes, we advise on risk management, protection against corruption and fraud, and setting up procedures for transparency and management accountability.

ESG audit, ESG reporting

We also perform for clients ESG audits (ESG Due Diligence) and process ESG reporting.

JUDr. Ing. Jan Vych

attorney and partner

What is GDPR and who does it apply to?

The General Data Protection Regulation (GDPR) is a set of rules that governs processing of personal data in the EU. It applies to all companies that work with personal data — including most medium-sized and large businesses.

What are the main obligations of a company under GDPR?

The most common corporate obligations under GDPR include determining legal basis for processing, leadership records of processing activities, securing technical and organizational measures, regular staff training, correct setting processing contracts and transparent client information.

What steps should a company take to properly implement GDPR?

A typical process includes GAP analysis, data flow mapping, execution DPIA (Personal Data Protection Impact Assessment), contract review, implementation of security measures and introduction of internal policies. We definitely recommend consulting with an expert during implementation. Contact us!

What are the possible sanctions for violating the GDPR?

Violations of GDPR can lead to significant penalties — up to EUR 20 million or 4% of global annual turnoverThe amount of the fine depends on the severity, duration and impact of the infringement, but may be saved for both small and large companiesIn addition to fines, other sanctions may be imposed, such as corrective action to remedy the situation.

What is WHISTLEBLOWING and why is it important for a company?

Whistleblowing means the possibility of safe report unethical or illegal behavior within the organization. It is essential for risk management, corporate culture and compliance with legal obligations.

What legal requirements exist for WHISTLEBLOWING?

The legal framework stipulates obligation to implement a reporting system for companies above a certain number of employees, including regular reporting and whistleblower protection.

What is ESG and why is it important?

ESG includes environmental, social and governance aspects of business. It is crucial for companies in terms of reputation, regulatory obligations and access to financing.

Who must submit an ESG REPORT and from when?

According to the directive CSRD many medium and large businesses must implement mandatory ESG reportingThe obligation is gradually being extended to other entities.

What information does a quality ESG REPORT include?

The ESG report contains data on emissions, energy consumption, carbon footprint, climate protection measures, social indicators (diversity, wellbeing, equal opportunities) and elements Corporate Governance.

How is an ESG AUDIT performed?

The ESG audit is carried out in several steps: first, the scope of the audit is determined (scoping), then data and internal documentation are collected. This is followed by an assessment of the level of ESG management (maturity assessment) and data validation (data verification). The auditor interviews key personnel and conducts gap analysis against CSRD/ESRS requirements or internal standards. The result is a final report with an assessment and recommendations for improvement.