Skip to content
Store / GDPR / GDPR Basic Pack
GDPR Pack · 3 documents

GDPR Basic Pack (RoPA + DPA + Policy)

The 3 documents a data protection authority asks for first, in one pack: Records of Processing Activities, Data Processing Agreement (DPA), and Privacy Policy.

Coming soon. This product is in preparation. Email us and we'll let you know as soon as it's ready to buy.
Outside the EU? All three documents are written around GDPR, but the same concepts (processing record, processor agreement, privacy policy) exist under most data protection laws worldwide. Adapt the authority name and legal basis cited to your own country (LGPD in Brazil, CCPA in California, PIPEDA in Canada...).
€49
VAT included · one-time payment
Coming soon → ← Back to store
Referenced article by article with the AI Act, GDPR and DAMA-DMBOK

What's included

  • RoPA — Records of Processing Activities (Excel, with examples already filled in)
  • DPA — Data Processing Agreement (Word, to sign with your vendors)
  • Privacy Policy — ready to publish on your website (Word)
  • Joint implementation PDF guide
  • Legal Notice
📄 Real content preview — first page of the document
Document preview

Why this pack exists

These three documents aren't independent: the RoPA identifies which vendors process data on your behalf, the DPA is the contract you need signed with each of them, and the privacy policy is what you communicate publicly about all that processing. Buying them as a pack ensures the three stay aligned from day one, instead of building them separately and finding inconsistencies during an audit.

Frequently asked questions

How is this different from buying just the RoPA?

The standalone RoPA covers only the processing record. This pack adds the Data Processing Agreement (DPA) — needed with any vendor that processes data on your behalf — and a publishable Privacy Policy for your website.

Do I need all three even as a freelancer or small business?

Yes. GDPR doesn't exempt based on company size — it exempts based on the type and volume of processing, which in practice almost any business with customers, employees, or vendors already exceeds.

Does this replace legal advice?

No. These are working templates that organize and speed up implementation, but they don't constitute legal advice or guarantee GDPR compliance on their own — see the included Legal Notice.

What format is it delivered in?

Editable Word and Excel for the three documents, a joint implementation PDF guide, and the Legal Notice.