External Data Protection Officers for Companies & Municipalities
Structured. Transparent. Collaborative.

Our collaboration is structured, transparent, and practice-oriented.

After a brief introduction and clarification of your requirements, we proceed step-by-step with:

1. Initial Consultation & Assessment
   During the initial consultation, we will work together to gain an overview of your data protection organization, existing processes, and systems. This will provide an initial, realistic picture of your current implementation of GDPR requirements—before we delve into a detailed analysis during the audit.
2. 
   Audit & Action PlanDuring the audit, we assess how effectively your organization is implementing data protection requirements—going far beyond a mere process-based perspective. We examine structures, responsibilities, and technical and organizational measures, and identify where risks or gaps exist.
   The result: a concrete, prioritized action plan that immediately shows you what needs to be done—clear, practical, and actionable.
3. Appointment as Data Protection Officer & Ongoing Support
   Once appointed, we assume the role of external Data Protection Officer and assist you with the practical implementation of data protection requirements.
   We advise, train, and support you on an ongoingbasis—ensuring that data protection within your organization remains clear, secure, and easy to implement.
4. Reporting
   We ensure continuity in data protection: with regular reports, clear recommendations, and up-to-date information on legal changes.
   ➜ Our goal: to make data protection an integral part of your compliance strategy—efficient, practical, and integrated across all areas of your business.

In brief: We view data protection not merely as a mandatory task, but as an integral component of your IT strategy and corporate security.

An external Data Protection Officer from ceterion offers you in-depth expertise and organizational relief – without tying up additional internal resources.

Your Advantages at a Glance:

• Compliance & Guidance:
  We ensure that your company meets all GDPR and BDSG requirements—including documentation and reporting obligations.
• Expertise on demand:
  Our certified data protection and IT experts bring up-to-date legal, technical, and organizational expertise to the table.
• Efficiency & Relief:
  You save internal resources—we handle audits, training, and communication with regulatory authorities.
• A Head Start in Trust:
  Your customers, partners, and employees will see that you take data protection seriously—this strengthens your image and builds trust.
• A Holistic Approach:
  As IT and data protection specialists, we consider both areas together—to ensure sustainable security and digital sustainability.

Conclusion:
An external data protection officer is more than just a mandatory requirement—they are your partner for robust processes, effective data protection, and future-oriented IT.

Our mandates are clearly structured and transparently calculated – without hidden costs or ambiguous expenses.

For companies, we offer ongoing support by an external Data Protection Officer under the following conditions:

Monthly retainer:
750 EUR / month
✔️ Includes 3.5 hours of consulting and implementation time per month

These hours include, for example:

• Responding to data protection inquiries
• Review and maintenance of records of processing activities
• Support for Data Protection Impact Assessments (DPIAs)
• Drafting of policies or data processing agreements

Flexible & scalable:
If additional support is needed—for example, for projects, audits, or short-term reviews—additional consulting hours can be arranged on a case-by-case basis, naturally at transparent hourly rates.

Conclusion:
With our monthly service agreement, you receive reliable data protection support, predictable costs, and dedicated contacts who understand your IT and business processes.

Inquire now without obligation – and discover how we can support your company in a future-oriented and efficient manner.

Our Data Protection Check is the initial step towards achieving an appropriate level of data protection and ensuring the long-term legal compliance of personal data handling. It forms the basis for assuming the mandate as an external Data Protection Officer and provides transparency regarding the current state of your data protection organization.

Objective and Approach

With a view to establishing a robust data protection management system, an initial inventory analysis is required.

This is carried out in two steps:

1. Workshop – Determining the Status Quo (approx. 3 hours)

• Joint recording of existing data protection measures and processes
• Reconciliation with legal requirements according to GDPR and BDSG
• Identification of initial areas for action

2. Audit – In-depth Analysis and Evaluation (approx. 3 hours, on-site)

• Conducting an audit based on a standardized questionnaire (aligned with legal requirements and best practice standards)
• Verification of compliance with data protection obligations and organizational measures
• Evaluation of technical and organizational measures (TOMs) 

Results and Benefits

Upon completion of the workshop and audit, you will receive:

• A detailed report documenting the current data protection level
• A catalog of measures, prioritized by the urgency of any measures yet to be established
• An effort estimate for implementing the recommended steps
• A clear basis for decision-making regarding further action and the assumption of the data protection mandate

Your Advantage

The Data Protection Check provides you with a practical overview of your data protection compliance, identifies risks and optimization potential, and enables you to manage data protection strategically and efficiently.

Concurrently, it serves as a binding foundation for the mandate of ceterion AG's external Data Protection Officer – thus ensuring seamless and structured support from day one.

Conclusion:
The Data Protection Check is not a theoretical assessment, but a concrete, structured first step toward implementing data protection requirements— at a transparent, fixed price and with results you can put into practice immediately.

Yes – ceterion can fully support data protection services within an IKZ (Inter-municipal Cooperation) model. In this model, several municipalities – for example, within a district – consolidate their data protection tasks to leverage synergies and reduce costs.

We integrate our services in such a way that all participating municipalities benefit from centralized, coordinated data protection support.

Key Benefits:

• Cost savings through joint commissioning and efficient structures
• Maximum flexibility through individual customization for each municipality
• Uniform data protection standards and coordinated procedures
• Central point of contact for all participating municipalities

The IKZ model is ideal for cities, municipalities, and districts that wish to implement their data protection obligations collaboratively, economically, and with a future-oriented approach.

Yes – upon request, we would be pleased to connect you with one of our references who have successfully implemented data protection projects.

This provides you with direct insight into our working methods and the results achieved.