Single course
from EUR 490 net
up to 25 participants; larger companies on request
Buy nowDATA PROTECTION E-LEARNING · EDITION 2026 · GERMAN OR AUSTRIAN COURSE VERSION
Data Protection E-Learning
The course takes the GDPR to where it fails in daily work: lawful bases, data subject rights, technical and organisational measures, processing on behalf of a controller and international transfers, data breaches and the data protection impact assessment. It is aimed at everyone who works with personal data — and gives the data protection officer evidence that awareness was raised. You choose the course version for Germany (German Federal Data Protection Act, BDSG) or Austria (Austrian Data Protection Act, DSG).
Course contentfrom EUR 490 net up to 25 participants · larger teams on request · bundle of all 5 from EUR 2,190 net
WHY THIS TRAINING
The GDPR names awareness-raising and training — as a task, not as a course obligation for every company.
The tasks of the data protection officer include monitoring compliance with the regulation “including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits” Art. 39(1)(b) GDPR. Independently of that, any person acting under the authority of the controller who has access to personal data may process it only on instructions from the controller, and the controller has to take steps to ensure exactly that Art. 29 and Art. 32(4) GDPR — whoever is to act on instructions has to know and understand them. Finally, the controller must be able to demonstrate compliance with the principles Art. 5(2) GDPR. An express provision that every company has to train every individual is not in the regulation; documented awareness-raising is the practical way to evidence these three points. In Germany there is the additional rule that a data protection officer has to be designated where, as a rule, at least 20 persons are constantly engaged in automated processing § 38(1) BDSG; in Austria the DSG supplements the regulation and the Austrian Data Protection Authority supervises.
The course raises awareness across the workforce and documents that with a certificate of participation for each person. It replaces neither the data protection officer nor the record of processing activities, and it is neither a data protection impact assessment nor legal advice. The certificate of participation documents attendance; it is not an official certification — for instance under Art. 42 GDPR.
COURSE CONTENT
Chapters and format.
- 01Friday, 4:50 pm
- 02On what grounds?
- 03What the recipients may ask for
- 04What technology prevents
- 05Who else holds the data
- 06The 72 hours
- 07Tuesday, back to routine
- 08What stays with you
26 slides · quiz: 12 of 76 questions
Preview followsCourse screenshots will be added when the courses are final.
- Standalone HTML file (runs in the browser, no installation) or SCORM 1.2/2004 for your LMS.
- Final quiz with a printable certificate of participation and verification code.
- Legal-status updates for 12 months included; afterwards on preferential terms.
- German and English in one file, with audio.
WHO IT IS FOR
For everyone who handles personal data.
Employees with access to data
Sales, HR, accounting, support: this is where the typical cases arise — the wrong distribution list, a private cloud account, an access request in the inbox, a lost laptop. The chapter “Tuesday, back to routine” works with exactly these situations, not with article numbers. Designed for employees at screen-based workplaces: the stories play out in email, chat and login.
Data protection officers and controllers
For them the course is the tool for a task the regulation names: awareness-raising and training of staff involved in processing operations Art. 39(1)(b) GDPR. The certificates of participation go into the evidence base for accountability Art. 5(2) GDPR.
Germany or Austria
The regulation applies directly in both countries; the national supplements and the supervision differ. DE: BDSG, the competent supervisory authority of the respective federal state. AT: DSG, Austrian Data Protection Authority. You receive the version for your jurisdiction, not a mixed “DACH” edition.
PRICING
One price for Germany and Austria.
Bundle — all 5 courses
from EUR 2,190 net
AI literacy, data protection, cybersecurity awareness, whistleblower protection, anti-discrimination
Buy the bundleCustomisation on request: we insert your reporting office, internal processes and contact persons into the course; individual courses or additional chapters are created on request — via the contact form.
FREQUENTLY ASKED
In short.
Is data protection training mandatory for every company?
Not in such general terms. The GDPR names awareness-raising and training of staff involved in processing operations as a task of the data protection officer (Art. 39(1)(b) GDPR), requires that persons acting under the authority of the controller process data only on instructions (Art. 29, Art. 32(4) GDPR), and places the accountability obligation on the controller (Art. 5(2) GDPR). Documented training is the usual and evidenceable way to meet these requirements — but a course obligation for every company is not written into the law in that form.
We have no data protection officer — do we still need the course?
The requirement to process only on instructions under Art. 29 and Art. 32(4) GDPR and the accountability obligation under Art. 5(2) GDPR apply regardless of whether a data protection officer has been designated. Whether a designation is required follows from Art. 37 GDPR and, in Germany, additionally from § 38(1) BDSG (as a rule at least 20 persons constantly engaged in automated processing, and, irrespective of the number of persons, processing that is subject to a data protection impact assessment).
How do I order?
Online on this page: choose the course, enter your jurisdiction (Germany or Austria) and the number of participants, confirm that you are buying as a business and pay by card or SEPA direct debit via Stripe, or by bank transfer against invoice; you receive an invoice with VAT ID. The course file (HTML or SCORM) with your company name and logo arrives as a download link within 48 hours of receipt of payment (working days). Questions or more than 25 participants: contact form.
Do participants receive a certificate of participation?
Yes. After passing the final quiz, each participant can print a certificate of participation with name, course, date and verification code. It documents participation; the law does not require a certificate.
Is the course kept up to date?
Yes — for 12 months the course content is updated when the legal situation changes. Afterwards, existing customers receive further updates on preferential terms.
Germany or Austria?
There is a separate course version for each jurisdiction with the national legal references and authorities. Prices are identical.