Administration › Premises security
GDPR register and documents
Know what data you process - and why.
Upload the documents you have and answer questions about your processes - Privacio assembles the GDPR Article 30 register and the VDAI form. What we don't know, we mark instead of guessing.
Want to see a completed example first? Download a free record sample for your sector.
- Built by practising lawyers
- Data stays in the EU
- AI proposes, you confirm
- OrganisationFilled in
- Documents2 uploaded
- Questions9 of 14
- 4Register14 activities
Linden's lawyers have advised on data protection






Why it matters
Every organisation processes data. The register shows how.
The duty comes from everyday processes, not from your sector. Three almost everyone has:
01 · Employees
Employment and payroll
02 · Clients
Client contracts
03 · Premises
Video surveillance
How it works
Four steps from not knowing to order.
No legal training and no separate project. A small organisation needs a few working sessions.
Organisation
Name, sector, contacts.
Documents
Upload your policies and procedures if you have them. Optional.
- Work rules.pdf12 pages · read
- Video surveillance policy.pdf3 pages · read
Questions
We only ask what we could not find in your documents.
Do you film your premises or grounds?
Register
Review, confirm and download the register (.xlsx) and the VDAI form (.docx).
11 confirmed2 proposed1 not determined
What you get
A register you can show in an inspection.
The register has 24 columns covering every requirement of GDPR Article 30(1)(a)-(g). Gaps are visible at once.
| CActivity | DPurpose | ILegal basis | NRetention | KRecipients |
|---|---|---|---|---|
| Employee administration | Performing employment contracts | Contract; legal obligation | [TO CONFIRM] | Tax office, social insurance |
| Client contracts | Providing services | Contract | [TO CONFIRM] | Accounting service provider |
| Video surveillance | Protecting property | Legitimate interest | 14 days | Not determined |
- DownloadRecord of processing.xlsx14 activities
- DownloadVDAI form.docxFrom the confirmed register
Coming soon
DOC
Internal documents
DPIA
Impact assessment (DPIA)
AI Act
AI use governance

„No other area of law is as harmonised across the EU as data protection. Data collection makes up a large share of the work, which is where artificial intelligence adds the most value here.“
Attorney, managing partner, Linden
Your data stays in the EU
Storage, backups and AI processing run only in EU regions.
AI proposes, you confirm
Every proposal shows its source. The register and documents are built only from confirmed data.
No model training on your data
We use only providers that contractually commit not to train models on customer data.
Pricing
Pay per year. Start free.
See what your register is missing for free. Choose a plan when you are ready.
Start
€0
See what is missing.
- Register status overview
- 3 processing activities
- List of open questions
AnnualMost chosen
€99/ year
For a small organisation.
- Full register (.xlsx)
- VDAI form (.docx)
- Review reminders
Annual + AI
€149/ year
For organisations using AI tools.
- Everything in Annual
- AI Act module
- AI tools register
Impact assessment (DPIA), one-off
When is a DPIA needed?- Call recording
- €95
- Video surveillance
- €195
Question library
The questions managers actually ask.
Each question has its own page with an answer in plain language.
- Register and documentsDo we need a record of processing activities, and where do we start?
- Retention periodsHow long should employee data be kept?
- Supplier contractsDo you need a data processing agreement with an IT service provider?
- Impact assessment (DPIA)When is a data protection impact assessment (DPIA) required?
- Video surveillanceCan we film our premises and grounds?
- Breaches and the State Data Protection InspectorateWhat should you do when a personal data breach happens?