This service is for companies established outside the European Union that collect, process or monitor the personal data of EU residents. The GDPR applies regardless of where you are incorporated. If your platform serves European users or you handle the data of B2B clients in the EU, you have obligations that call for real legal analysis, not a compliance checklist. This service maps your data flows, establishes the lawful basis for each processing activity and produces the documentation you need to demonstrate accountability before a supervisory authority asks for it.
GDPR compliance for a company outside the EU is a different exercise from that of a European entity: data flows are less obvious, the obligation to appoint a representative may apply, and contractual exposure to clients and processors in the EU calls for real legal analysis. This engagement maps your actual data exposure in the EU, produces the documentation that demonstrates accountability and brings your digital presence into line with European requirements. The result holds when a supervisory authority asks for it, before or after an incident.
A unilateral confidentiality agreement signed by PASSAS before the video consultation, available at no additional cost on request. It binds the firm alone — no signature is required from the client — and adds an explicit contractual layer on top of the professional secrecy obligations inherent to the practice of law.
A 60-minute working session by video call in which we analyse your situation, your specific needs and our ability to help you. We assess whether we can take on the matter and give you the fixed price in advance. You can book it directly through the Google Calendar link on our website and pay €90 by Stripe.
Legal analysis of the business model that determines which rules affect the company, what legal risks exist and what documentation is mandatory before operating. Covers the sectoral regulatory framework, data protection obligations, essential contracts and any applicable authorisation or licensing requirements.
The documentation required for GDPR compliance and, more broadly, for any rules on data protection and on the processing and transfer of data, including international transfers, both in dealings with users and with the providers that process data on your behalf, with the legal mechanisms needed to operate without regulatory exposure.
The legal documentation required to operate online: legal notice, privacy policy, cookie policy and, where applicable, terms of sale. Drafted with legal precision and adapted to the specific activity, not carried over from another website. Complies with the GDPR and with information society services rules.
At PASSAS we work fast, and we intend to be faster than the competition without losing quality along the way. That is why we like to tell you how long you will wait for your service. It is an indicative figure, since some engagements are more complex than others. The Engagement Letter sets out a deadline tailored to your matter, one we will do everything we can to meet, or to beat. That is our commitment to quality.
We tell you what you will pay for your service: at PASSAS we work with a transparent fee policy. That said, we are not a marketplace. Every service is tailored and the fees follow the workload borne by the lawyer in charge. Even so, we want to give you an indicative price for this service, so that deciding to instruct us and booking your virtual consultation is easier.
We know how much it matters that the lawyer you instruct has real command of the subject you are handing over. We have written on questions related to the service you are considering.
Qué votó realmente el Parlamento Europeo el 9 de julio sobre el Chat Control 1.0 y por qué la prórroga hasta 2028 depende ahora del Consejo.
Deducted from your first invoice if you go on to instruct us. VAT included.
Minutes to talk to a registered EU lawyer who will answer your questions and assess your case.
Remote. No car, no waiting room, no commuting, no paperwork. An EU lawyer in your living room.