Small company package - non-sensitive data

This package is ideal for organisations which only have a few customers or subscribers in the EU, providing the Data Protection Representative appointment at an affordable price.


Includes 2 FREE data request communications. Additional communications at €30 per communication




  • You hold or process the personal data of not more than 1,000 individuals in the EU
  • You do not process any sensitive data ("data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation" (Article 9(1)))


You may also want to consider our 'Bespoke Inquiry Landing Page and Email address' Add-On Product, available here, to provide your data subjects with contact points branded with your name and logo.


    DPR Group does not provide refunds or cancellaltions other than in the case of proven mistake (e.g. purchase of the incorrect product for the purchaser's company size).


    All documentation and communications will be provided electronically, and DPR Group will generally not provide physical certificates or documentation, nor will they enter into physical correspondence, except with a data subject at their request.


    Please ensure your organisation meets the relevant requirements for this product (number of data subjects, whether sensitive data is processed) as reporting this information incorrectly may invalidate the appointment of DPR Group as your Data Protection Representative. Full terms and conditions available at


    Organisations purchasing this product must not, in the last 3 years, have: (a) had a data breach which would require reporting to a supervisory authority in the EU as a result of Article 33 of GDPR, or which would have required reporting if GDPR had applied to the personal data which was the subject of such a breach, or (b) been found by a competent authority in any jurisdiction to be in breach of GDPR or any other data protection law, or has been investigated by such authority in respect of a potential breach such law. If this is not the case, please contact us at to discuss.



12 Northbrook Road,





©2019 BY DPR