The scope of the services provided under the General Data Protection Regulation (GDPR) in public sector organisations
Data security in public service organisations business case

Public benefit organisations process personal data of aid beneficiaries, donors, volunteers and participants in social programmes. Challenges related to RODO arise here not only from limited resources, but also from field work, dispersed documentation and frequent involvement of third parties, such as local partners. Formal procedures are not infrequently lacking, leading to unknowing breaches - especially regarding sensitive data, consents for image publication or the transfer of information between project partners.
ODO 24 has implemented RODO projects for foundations, associations and NGOs working in the areas of education, health and social welfare. We conducted compliance audits, prepared consent template sets, privacy policies and instructions for field teams and project coordinators. We also helped structure relationships with partners and donors through entrustment agreements and processing procedures. As a result, organisations gained greater legal certainty, streamlined their operations and were able to more securely pursue their statutory objectives while respecting personal data.

Public benefit organisations process personal data of aid beneficiaries, donors, volunteers and participants in social programmes. Challenges related to RODO arise here not only from limited resources, but also from field work, dispersed documentation and frequent involvement of third parties, such as local partners. Formal procedures are not infrequently lacking, leading to unknowing breaches - especially regarding sensitive data, consents for image publication or the transfer of information between project partners.
ODO 24 has implemented RODO projects for foundations, associations and NGOs working in the areas of education, health and social welfare. We conducted compliance audits, prepared consent template sets, privacy policies and instructions for field teams and project coordinators. We also helped structure relationships with partners and donors through entrustment agreements and processing procedures. As a result, organisations gained greater legal certainty, streamlined their operations and were able to more securely pursue their statutory objectives while respecting personal data.
GDPR and cybersecurity – challenges for the automotive sector
Foundations and associations are increasingly operating online - managing projects remotely, using participant registration systems, donation platforms, communication and collaboration tools in the cloud. For larger public benefit organisations - especially those operating in networks, international structures or with publicly funded projects - data protection is not only an obligation under RODO, but also a real need to secure digital assets.
The data of beneficiaries, volunteers, staff and donors is often sensitive and subject to special protection. At the same time, these organisations are increasingly the target of cyber attacks - both accidental and targeted. Therefore, in addition to compliance with RODO, it is crucial to implement basic cyber security principles: controlling access to systems, encryption, managing backups, software updates and training the team on data protection.
Strengthening digital resilience is not only a technical issue it is an element of building credibility, reputation and lasting public confidence on which third sector activities are based.
We use recognized international standards.
This is how you recognize quality
We use recognized international standards. This is how you recognize quality
CIPM
Implementation of privacy and personal data protection system
ISO/IEC 27001
Information technology - Security techniques - Information security management systems
ISO/IEC 29134
Information technology - Security techniques - Guidelines for data protection impact assessment
ISO/IEC 27001
Privacy information management system
ISO 31000
Risk management - Principles and guidelines
PRINCE2 and SMC™
Project management methodologies
ISO 19011
Guidelines for auditing management systems
ISO/IEC 27005
Information technology - Security techniques - Information security risk management
What our customers say about our services
Marcin Wieczorek

„I am very impressed with the high level of substantive expertise of the training staff"
From 13 to 17 March I attended the "Course for Information Security Administrators" organized by ODO 24 sp. z o.o. I am very impressed with the high substantive level of the training staff and the comprehensive program. Working as an ABI requires knowledge not only of legal provisions but also of IT matters, which ODO 24 took into account. Noteworthy is the curriculum, which gradually introduces increasingly advanced nuances of personal data protection, starting from the legal basics and ending with practical aspects of auditing and working with documents within a company. The complete set of materials, editable documents and publications I received will facilitate my daily work as an ABI. I can certainly recommend ODO 24 as a reliable partner offering training services of a high standard.
Magdalena Węglewska

„We can wholeheartedly recommend ODO 24 as a professional and reliable partner"
For many years we have consistently placed great importance on the protection of the personal data of our customers as well as our employees. We took an active part in creating the "Code of Good Practice for the Protection of Personal Data of Customers and Potential Customers,” developed jointly by GIODO and the Polish Automotive Industry Association. Due to the complexity and variability of the rules on personal data protection, as well as Mazda’s dynamic development in Poland and the increasing volume of data we process, we decided to entrust the ABI function to a company specialized in this field. The decision to use the services of ODO 24 was primarily influenced by the experience and competence of the team of experts, the comprehensiveness of the offering and its flexibility in adapting to our organization. After a year of cooperation we can recommend ODO 24 as a professional and reliable partner.
Agnieszka Karłowicz

„A practical approach, continuous advisory availability, and positive working relationships"
We have been working with ODO24 for over a year. For us it has been a year of peaceful breathing and a sense of security: at least regarding personal data protection :-) The people at ODO are professionals who explain matters that are incomprehensible to the average person in an understandable way. They understand not only their profession but, which is very important to us, business and its requirements. A practical approach, constant advisory availability, and great relationships — all of this means I can recommend this Company to anyone who wants to work and sleep peacefully.
Tomasz Siwicki

„I recommend the company ODO 24 as a professional partner"
For several years we have been cooperating with ODO 24 in the field of personal data protection. A professional team that efficiently helped us to comply with the requirements of the GDPR. We make use not only of the experts’ knowledge but also of professionally prepared e‑training, thanks to which we were able to train several hundred employees in a very short time. I highly recommend ODO 24 as a professional partner delivering services at the highest level.
Opinion of the participants
Tomasz G.
2 years ago
I wanted to thank you for the wonderful training I've had at your company, the materials were very well prepared, and the instructor has shown tremendous knowledge and experience.
Aleksandra P.
2 years ago
Training at a very high level, I highly recommend!!! Training materials very useful in everyday work.
Sławomir M.
2 years ago
Mrs. Mecenas, it was an honor to be able to take part in this training, and thank you very much for your professional approach and valuable practical guidance.
Wacław T.
3 years ago
The IOD course organized by ODO24 has met all my expectations, a very practical approach, concrete examples and professional support.
Maria K.
1 year ago
The training was conducted in a way that was understandable even to those without previous experience in this field.
Piotr N.
10 months ago
Very good training, a lot of practical examples, a little bit too little time to ask questions, but overall I'm satisfied.
Anna W.
8 months ago
A professional approach, a great atmosphere during the training, the instructor answered all the questions thoroughly, and I highly recommend ODO24!
Jan K.
1 year ago
It's the best personal data protection training I've ever had, specific examples from real life, not just a dry theory, I recommend it to anyone who works with GDPR.
Katarzyna J.
6 months ago
The training meets my expectations. A lot of practical knowledge, good materials. The only drawback is too much group, so less time for individual consultations.
Michał L.
4 months ago
Excellent training! A very competent conductor with vast experience. Everything explained in a clear and understandable way. The training materials are very useful.
Joanna D.
3 months ago
I recommend ODO24 training to anyone seeking a sound knowledge of the field of ODO: professional service, excellent organisation and excellent teaching facilities.
Andrzej S.
2 months ago
Sometimes the pace was a little too fast, but the conductor was happy to return to the topics discussed earlier at the request of the participants.
RODO in public service organisations questions and answers
The cost depends on the size of the organisation, the number of projects and the scope of data processed (e.g. data of beneficiaries, volunteers, donors). We offer flexible packages tailored to the financial capabilities of public benefit organisations (OPP) – including options for NGOs carrying out public tasks. We prepare individual quotations.
The most common are a lack of consents for processing sensitive data, informal transfers of data to project partners and disorganised registration forms. There is also often a lack of up-to-date data processing agreements and the storage of data without a defined purpose or retention period.
Yes – even the smallest organisation, if it processes personal data, is subject to the provisions of RODO. Implementation does not have to be expensive or complicated – we help choose proportionate solutions.
These are the data of beneficiaries of assistance, health data, data concerning living situation and disability, as well as data of volunteers and donors. High risk is also associated with the data of children and socially excluded persons.
Yes – every form, participant list or registration for a project, online or offline, must meet the requirements of RODO. You must clearly inform about the purposes of processing and obtain consent where required.
No – we help implement simple, effective and legally compliant solutions that do not hinder carrying out social activities. Our approach is tailored to the nature of non-governmental organisations.
Yes – we have worked with foundations, associations, operators of EU-funded projects and local organisations operating in the field. We know the challenges NGOs face and how to effectively protect data in their activities.
Yes! We offer a free consultation for foundations and associations – we will analyse your activities and suggest how to implement RODO in a simple, secure and affordable way.
Our greatest value is the trust of our customers.
How can we help you?
Write or call, we will find a solution






