The GDPR has been in force for years and the LOPDGDD complements it at national level, yet data protection remains the great pending subject for many Spanish businesses. Self-employed professionals, small and medium-sized enterprises, and large companies alike live with a legal risk that, in many cases, they ignore or underestimate.
The problem is not only a lack of knowledge of the regulations, but also the tendency to rely on low-cost consultancy services without the necessary qualifications, or to copy privacy policies from other websites without adapting them to the specific reality of the business.
"90% of the businesses that come to us believe they are already compliant. The problem is not a lack of willingness: it is not knowing what is being overlooked."
Mario P. Talamillo · Managing Partner, Certix®
What does genuinely complying with data protection actually involve?
It is not simply a matter of publishing a privacy policy on a website. Complying with the regulations means analysing what data your business processes, for what purpose, how long you retain it, what security measures you apply, and how you manage individuals' rights requests.
Every business has a different reality. A law firm processes very different data from an online shop or a dental clinic. That is why generic documents do not work: they create a false sense of compliance that can prove more harmful than having nothing in place at all.
About Certix
Certix is a data protection consultancy based in Burgos, providing services throughout Spain. Our team consists exclusively of professionals specialised in this field: at Certix® there are no sales staff or account managers.
You will always be attended by a data protection professional who knows the regulations, understands your business, and designs real solutions for your organisation.
If you have questions about your current situation or about your current data protection provider, contact us and we will analyse your circumstances.
This content is for informational purposes only and does not constitute legal advice. The application of regulations to each specific case requires individual analysis.