GDPR Art. 30 Helper

Anyone who processes personal data must keep a record of processing activities under Art. 30 GDPR. That applies to the online shop just as much as the physiotherapy practice or the trades business with employees. The supervisory authority can request it at any time, and a missing or incomplete record is one of the most common starting points in an audit. The Helper takes away the fear of the blank page.

For every processing activity Art. 30 requires a fixed set of entries: purpose of processing, legal basis, categories of data subjects and data types, recipients, planned retention periods, transfers to third countries, and the technical and organisational measures. The Helper lays these fields out for you in a structured way, so you forget no mandatory entry and overlook nothing.

So you do not start from scratch, the tool comes with ready-made templates for typical activities - such as payroll, applicant management, customer administration or newsletter dispatch. Each template comes with pre-filled suggestions for purpose, legal basis and periods that you adapt to your business instead of laboriously writing them yourself.

A built-in overview of the legal bases under Art. 6 GDPR explains in plain language when a processing operation rests on consent, contract, legal obligation or legitimate interest - with examples, so you choose the right basis with confidence. For each activity you also record whether data flows to a third country outside the EU, which triggers additional requirements.

Alongside the activities, the Helper records your company master data: controller, address, representative and the contact details of the data protection officer, if you need one. These belong in the header of every record and thus appear automatically in the finished document.

At the end the tool produces a clear PDF that you can print, file or present to the supervisory authority. Your entries are saved locally as a draft, so you can pause the work and continue later. Important: the Helper structures your entries and supports you in creating the record, but does not replace legal or data protection advice. Whether your record is complete and correct in your specific case is best checked with a data protection professional.