„We completed the implementation of the GDPR a couple of years ago.”
Are you sure about that?
Article 87 PDPA
Bases for establishing the factual status
The controller shall establish the facts on the basis of the evidence collected during the control procedure, and in particular documents, objects, views and oral or written explanations and statements.
