Challenge.
STAHL KREBS didn’t just want to comply with data protection—they wanted to understand it and embed it into the company’s DNA. The goal was to transform data protection into an efficient, streamlined system that actively supports the company and to this end, they were looking for a partner that had the legal, technical and organisational expertise to deliver proactive, practical solutions that the employees would get behind and would make data protection a natural part of day-to-day work. The use of AI was also coming into sharper focus. What are the requirements of the AI Act? How can the risks be mitigated? The answer is a system that is secure, confidential, and fully compliant with legal standards.
We are extremely satisfied with Bechtle’s implementation and ongoing support of our data protection system. Our employees now benefit from realistic training on how to use artificial intelligence in compliance with data protection regulations and Bechtle has the in-depth expertise we can draw on at any time. This extensive knowledge has also helped us to systematically and efficiently embed data protection into our corporate culture.
Andre Christians, Assistant to the Managing Director, ERNST KREBS KG
Solution.
Bechtle delivered exactly what was needed—a sophisticated data protection system that works seamlessly in day-to-day business within legal frameworks, and is at the forefront of every employee’s mind. Bechtle’s external data protection officer advised the executive management, analysed processes, defined responsibilities and now acts as a point of contact for the company. Regular training courses on data protection and AI raise awareness of what is allowed, what needs to be documented, and how AI tools can be used in compliance with statutory regulations, with Bechtle explaining everything clearly to make it tangible so it becomes part of the corporate culture. Akarion adds the structure with its GRC Cloud that centrally records, documents and maintains all processes. From the directory to risk analysis—everything is kept right up to date. What’s more, Proofpoint’s phishing simulation trains employees to effectively and quickly identify real threats. At STAHL KREBS, data protection is far from being a one-off project. New tools, processes and threats are analysed at least once a month with optimisations made wherever necessary. Bechtle also analyses sensitive data such as personnel files and AI-powered systems to ensure the company remains up and running and on the right side of data protection laws.
Business benefits.
- External data protection experts deliver expertise and free up internal resources.
- Data protection impact assessments provide assurance when dealing with sensitive topics such as HR and AI.
- Ongoing training boosts awareness and skills among employees.
- Centralised documentation in the Akarion GRC Cloud support clear and audit-proof processes.
- Collaboration with Bechtle embeds data protection into the company’s corporate culture.
- An AI inventory gives an overview of the technologies in use and helps with carrying out risk analyses in accordance with the AI Act.
- Regular risk analyses ensure that all data protection-related developments are reviewed and documented.
- Phishing simulations with Proofpoint raise employees’ awareness of digital threats and data protection in day-to-day business.