Audit and GDPR procedures for one of the largest gambling companies in Poland

For one of the largest companies in the gambling sector in Poland and a member of an international group of companies, we performed a GDPR audit and afterwards we have implemented procedures related to the protection of personal data. The process took place in 3 stages, which included the analysis of the company’s documents, procedures and processing activities, designing the best solutions together with the head of IT department and their implementation.

The company is a provider of on-line sports betting as well as the owner of over 100 stationary points of sale, which included the need to regulate the customer service process both in the traditional channel and through the web and mobile application. The task required also taking into consideration that the company works as a member of an international group which resulted in the need to regulate cross-border data transfers between the members of the group and their service providers. The contract also included the design of solutions such as the preparation of procedures and documentation for the production of personal data in the company. We have also developed and provided executive documentation and the content of authorizations for consents.

In the last stage of the project, we participated in the launch of the designed personal data protection solutions, conducted training for key personnel helped to check the effectiveness of the implemented solutions.