News and resources on
data protection
Page 7 of 7
GDPR: complete guide to the General Data Protection Regulation
Everything you need to know about the GDPR (Regulation (EU) 2016/679): structure, principles, lawful bases, rights, obligations, DPO, DPIA, international transfers and penalties. With tables.
LOPDGDD: complete guide to the Spanish Data Protection Organic Act
Everything you need to know about the LOPDGDD (Organic Law 3/2018): structure, obligations, rights, penalties, mandatory DPO and digital rights. With tables.
Data protection for freelancers and businesses: obligations and solutions in 2026
The real GDPR and LOPDGDD obligations for freelancers and SMEs in 2026: what compliance actually involves, the most frequent mistakes and how to comply without turning it into a never-ending project.
What is data protection: complete guide
What data protection is and what obligations the GDPR and LOPDGDD impose on any company or self-employed professional processing personal data in Spain: principles, legal bases, rights and minimum documentation.
Record of Processing Activities (RoPA): what it is and how to do it
What the Record of Processing Activities under art. 30 GDPR is, who is required to keep it, what it must include and a practical example of a RoPA row ready to use.
Data processor: what it is and when you need one
What the data processor is under art. 28 GDPR, how it differs from the controller, when a supplier is one and what contract must be signed with it.
GDPR at language and training academies: minimum documentation from the first student
GDPR compliance tailored to an academy: proportional RoPA, information notice at enrolment, contracts with technology providers, operational security policy and parental consents for under-14s.
Academy management software: the art. 28 GDPR contract many academies lack
How to regulate the relationship with the academy management software under art. 28 GDPR: mandatory DPA, minimum content, international transfers, data export when switching provider and breach notification.
Marketing agencies as data processors: contracts and responsibilities with their clients
How a marketing agency regulates its role as a processor under art. 28 GDPR: addendum with each brand-client, processor/controller duality, sub-processors (SaaS platforms), breaches and return of data on closing.
What your website needs to comply with the GDPR and the LSSI-CE
Legal notice, privacy policy, cookie policy, a banner compliant with the AEPD Guide, forms, email marketing and international hosting: the common layer applicable to any Spanish website.
Do you need direct expert advice?
At Certix you will be attended by a data protection expert, with no sales teams involved.