€20M
or 4% Revenue Max Fine
0
Hour Breach Notification
0
Data Subject Rights

Serving EU Customers? GDPR Applies.

If you process personal data of EU residents—even as a Canadian company—GDPR applies to you. The regulation has global reach and significant penalties.

ThinSky helps you understand your obligations, implement appropriate safeguards, and demonstrate compliance through documentation and technical controls.

Get GDPR Assessment

GDPR Data Subject Rights

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Rights related to automated decisions

GDPR Services

🔍

Gap Assessment

Evaluate your current practices against GDPR requirements. Identify compliance gaps and prioritize remediation.

🗺️

Data Mapping

Document processing activities, data flows, and legal bases. Build your Records of Processing Activities (ROPA).

📋

DPIA

Conduct Data Protection Impact Assessments for high-risk processing activities.

📝

Documentation

Privacy policies, consent mechanisms, DPA templates, and internal procedures.

🚨

Breach Response

Prepare for 72-hour notification requirements. Document decision-making process.

🌐

International Transfers

Implement appropriate safeguards for data transfers outside the EU. SCCs, BCRs, adequacy decisions.

Expanding to Europe?

Get GDPR-ready before entering the EU market

Start GDPR Assessment