GDPR KIT · EDITION 2026 · GERMAN OR AUSTRIAN VERSION
Audit-ready data protection documentation: record of processing activities, technical and organisational measures, processing on behalf of a controller, DPIA, data subject rights, deletion concept and personal data breach notification — with a legal reference at every obligation. The GDPR applies in the same way across the EU; the national provisions alongside it do not. You choose your jurisdiction and receive the version for your country — Germany (BDSG, TDDDG) or Austria (DSG, TKG 2021).
ARE WE IN SCOPE?
Anyone processing personal data must be able to demonstrate compliance with the principles — accountability applies regardless of company size Art. 5(2) GDPR, and the controller must implement appropriate technical and organisational measures and be able to demonstrate them Art. 24(1) GDPR. The frequently cited 250-employee limit for the record of processing activities exempts hardly anyone: it does not apply where the processing is likely to result in a risk to the rights and freedoms of data subjects, where it is not occasional, or where it involves special categories of data Art. 30(5) GDPR. On the data protection officer the two countries diverge: in Germany, in addition to the cases in Art. 37 GDPR, a threshold applies where as a rule at least 20 persons are constantly engaged in the automated processing of personal data § 38(1) BDSG; Austria has no such numerical threshold — there the duty to designate follows directly from the GDPR, supplemented by confidentiality and freedom from instructions § 5 DSG.
Inside the kit: a threshold analysis for the DPIA and a guided data protection officer assessment — each criterion with its legal reference, in the version for your jurisdiction.
INSIDE THE KIT
TRAINING PACK · FROM THE PLUS PACKAGE
For data protection training in person or online: slide deck from the principles through data breaches to data protection in everyday work, training concept, knowledge test with explanations and certificate of participation template. In the kit, the e-learning is available only in the Complete package.
WHY TWO VERSIONS
The fine framework is the same across the EU — up to EUR 20 million or 4 % of total worldwide annual turnover, and up to EUR 10 million or 2 % for documentation and security obligations (Art. 83(4) and (5) GDPR). What differs are the supervisory authority, the cookie rule and the national supplementary provisions. That is why your kit comes as one version per country: you buy DE or AT — no mixed “DACH” templates.
Legal references in the Word and Excel documents checked against the official full texts (EUR-Lex · gesetze-im-internet.de · RIS) — edition 2026, legal status August 2026.
E-LEARNING · IN THE COMPLETE PACKAGE OR ON ITS OWN
Eight chapters in around 45 minutes, one path for all employees. Told along a misdirected email on Friday at 16:50 and the 72-hour deadline that follows. German and English in one file, with audio. Runs as a standalone HTML file without installation or as SCORM 1.2/2004 in your LMS. At the end: assessment and certificate of participation with verification code.
ONE PAYMENT. NOT 36.
A kit is paid once. Subscription software bills every month for as long as you use it.
WHAT YOU GET AND WHAT YOU KEEP
| Compliance kit | Subscription software | Law firm or consultancy | Free template | |
|---|---|---|---|---|
| Payment | once, from EUR 990 net | recurring, monthly or yearly | fee per engagement | EUR 0 purchase price |
| After the contract ends | all files remain usable | access usually ends | as agreed | the template |
| Jurisdiction | DE or AT as separate editions; EU AI Act Kit as one EU-wide edition | varies by provider | individual | varies by publisher |
| Legal reference per statement | checked against EUR-Lex, gesetze-im-internet.de, RIS (Word and Excel documents) | varies by provider | depends on the mandate | varies by publisher |
| Legal-status updates | 12 months included | included in the subscription | on request | varies by publisher |
| Training | Plus: training pack; Complete: plus e-learning | varies by provider | on request | varies by publisher |
| Case-by-case legal advice | no — no legal advice | no | yes | no |
The columns describe models, not providers; no third-party prices. Terms: see the terms and conditions.
PACKAGES AND PRICES
All prices net and one-off. German or Austrian edition, 12 months of legal-status updates included, company licence for one legal entity and its group companies as set out in the licence terms in the kit. In the kit, the e-learning is included only in the Complete package.
The documentation
EUR 990
Documentation + internal training
EUR 1,390
Documentation + training + e-learning
EUR 1,690
| Enthalten | Basic | Plus | Complete |
|---|---|---|---|
| Documents in folders 00 to 12, 14 and 15 | ✓ enthalten | ✓ enthalten | ✓ enthalten |
| Slide deck for data protection training (50 slides) | – nicht enthalten | ✓ enthalten | ✓ enthalten |
| Data protection training concept | – nicht enthalten | ✓ enthalten | ✓ enthalten |
| Knowledge test, certificate of participation template | – nicht enthalten | ✓ enthalten | ✓ enthalten |
| Data protection e-learning as an HTML file and SCORM 1.2/2004, up to 25 users | – nicht enthalten | – nicht enthalten | ✓ enthalten |
| 12 months of legal-status updates | ✓ enthalten | ✓ enthalten | ✓ enthalten |
| Company licence, personalised with company name, logo and licence ID | ✓ enthalten | ✓ enthalten | ✓ enthalten |
| Price net, one-off | EUR 990 | EUR 1,390 | EUR 1,690 |
Licence: one legal entity and its group companies under the licence terms in the kit; further companies or consultant use on request. Done-for-you completion: coming soon. Questions or a custom quote? Write to us via the contact form. Without a VAT ID, please order via the contact form. Contact
UPDATES
If the legal situation changes, you receive an updated document version by e-mail or download link — for 12 months from delivery. Afterwards, existing customers receive further updates on preferential terms. Your documents stay with you even after the update period (Terms § 8(6)) — nothing is locked, nothing expires.
HONEST LIMITS
THE KIT AT A GLANCE
| Scope | 69 documents in 16 folders (00 to 15) |
|---|---|
| Formats | Word (50), Excel (18), PowerPoint (1); e-learning as an HTML file and SCORM 1.2/2004 only in the Complete package |
| Target group | Companies that process personal data, in particular small and medium-sized enterprises |
| Jurisdiction | German edition (BDSG, TDDDG) or Austrian edition (DSG, TKG 2021), you choose when ordering |
| Legal status | 17.08.2026, the legal references in the Word and Excel documents checked against the official full texts (EUR-Lex, gesetze-im-internet.de, RIS) |
| Delivery | Download link within 48 hours of receipt of payment (working days), personalised with company name, logo and licence ID |
| Licence | Company licence for one legal entity and its group companies as set out in the licence terms in the kit |
| Updates | 12 months of legal-status updates included; the documents remain usable afterwards |
| Prices | Basic EUR 990 · Plus EUR 1,390 · Complete EUR 1,690 net, one-off |
FREQUENTLY ASKED
Yes. The documentation duties do not depend on that designation: the record of processing activities (Art. 30 GDPR), technical and organisational measures (Art. 32 GDPR) and the demonstration required by accountability (Art. 5(2) GDPR) apply irrespective of it. In Germany the duty to designate is added where, as a rule, at least 20 persons are constantly engaged in automated processing (§ 38(1) BDSG); Austria has no such numerical threshold (§ 5 DSG).
It contains a transfer impact assessment, a third-country transfer register and an overview of adequacy decisions. For the United States, Implementing Decision (EU) 2023/1795 on the EU-US Data Privacy Framework applies; it covers only organisations included in the Data Privacy Framework List. The action against that decision was dismissed by the General Court of the European Union on 3 September 2025 (T-553/23); the appeal is pending before the Court of Justice as C-703/25 P, and no decision had been issued as at the legal status of August 2026.
Choose Basic, Plus or Complete, confirm that you are buying as a business and pay by card or SEPA direct debit via Stripe, or by bank transfer against invoice; you receive an invoice with VAT ID. We deliver the personalised kit as a download link within 48 hours of receipt of payment (working days). No subscription. Questions or a custom quote: contact form.
Yes — for 12 months from delivery you receive updated document versions when relevant law changes. Afterwards, existing customers receive further updates on preferential terms; the delivered documents stay with your company permanently: perpetual right of use, no lock, no account.
You choose your jurisdiction when ordering and receive the version for your country. There is deliberately no mixed "DACH" version.
No. The kit is standardised compliance documentation with legal references — no advice on your individual case. For the final sign-off we recommend a review by your legal counsel where needed.
Legal status of the documents: 17.08.2026. The basis is Regulation (EU) 2016/679 (GDPR), together with the BDSG and the TDDDG in Germany and the DSG and the TKG 2021 in Austria. The legal references in the Word and Excel documents have been checked against the official full texts. Standardised documentation, not legal advice in individual cases.