In many cases, data protection in companies is still a subordinate issue. On the one hand, this is due to the fact that companies are not sufficiently informed about what data protection means in a company in detail. On the other hand, it is also because data protection is a rather unpopular and possibly an annoying topic in the company. But not only with the GDPR, companies of all sizes have an obligation to implement extensive processes and guidelines to enable data subjects to have more control over their personal data.