You assume that a data exchange with an affiliated company is automatically permitted, because you both belong to the same group of companies? Unfortunately, data protection law entails certain pitfalls, of which we would like to protect you. According to the EU General Data Protection Regulation, there is no “group privilege” as a matter of principle – this means that even intra-group data transfers still have to be justified, and we will be happy to assist you with this.