IT-Schulungen · Hünfelden and Offenbach
IT training built for non-specialists
Most people who handle personal data at work are not privacy professionals. They are office managers, HR staff, administrators who inherited IT duties, or Datenschutzkoordinatoren carrying the topic alongside a full workload. Our sessions are designed for exactly that audience: practical IT-Schulungen in German or English, delivered as Virtual Classroom formats or on site, with a Teilnahmebescheinigung for every participant.
Audience
Who the training is for
Four groups come up again and again. General staff who process personal data daily and need to recognize when something is off. IT-Administratoren whose role now includes protecting personnel data and configuring systems accordingly. Datenschutzkoordinatoren inside an organization who need working knowledge rather than legal depth. And Datenschutzbeauftragte who need refresher sessions to stay current as regulations shift.
We ask about the audience before designing anything, because a session for administrators looks nothing like a session for front-office staff. If your group mixes roles, tell us in advance — we plan the exercises so nobody sits through material that never touches their desk.
Front office
Recognizing a request, knowing when to escalate, handling everyday personal data with care.
Administrators
Account lifecycle, log retention, backup handling and deletion routines that hold up in practice.
Formats
Virtual Classroom and on site
Sessions run as live Virtual Classroom events or in person at your location or ours. Virtual formats suit distributed teams and shorter attention windows: two half-days often work better than one long block. On-site sessions suit teams that need to discuss their own processes with real documents on the table.
Group sizes stay small enough that people actually ask questions — between six and fifteen participants for most topics. We do not run recorded webinars as a substitute for training, because the value sits in the exchange, not the slides.
Entry level
What a fundamentals session covers
The entry-level seminar walks through BDSG and EU-DSGVO basics in plain language: what counts as personal data, what a legal basis is, what the principles of processing mean in daily work.
Participants practice recognizing, assessing and implementing privacy requirements in realistic situations drawn from their own sector. No prior legal knowledge is assumed, and the exercises stay on paper and in conversation rather than in a system nobody has seen before.
The goal by the end of the day is simple: you know when to handle something yourself and when to escalate it to whoever carries privacy responsibility. That line is different in every organization, so we spend time on it directly instead of leaving it to interpretation.
Refresher sessions for privacy roles
What has changed since last time
Privacy work changes. New guidance appears, retention questions get revisited, and topics like NIS-2 or the EU Data Act enter the picture alongside classic DSGVO duties. Refresher sessions cover current developments and, more importantly, what they mean operationally for the people who have to act on them.
The tasks that pile up between audits
For Datenschutzbeauftragte and Datenschutzkoordinatoren, we also work through recurring workflow issues: handling Betroffenenrechte requests, maintaining Löschkonzepte, and keeping the record of processing activities accurate when systems change.
How often to come back
Most organizations benefit from an annual refresher, plus a session whenever a significant regulatory change touches their sector. If your team shares privacy duties across several people, we can run the refresher once for everyone instead of repeating it person by person.
Technical track
Training for IT-Administratoren
This track sits at the intersection of technical controls and data handling. Participants learn which measures count as technically and organizationally adequate, how access concepts connect to privacy requirements, and what the privacy documentation expects from the systems they administer.
The material stays close to the actual work: user account lifecycle, log retention, backup handling, deletion routines. Administrators leave with a clearer sense of where their decisions affect compliance, and with vocabulary that lets them talk to whoever holds privacy responsibility without a translator.
See how this connects to our IT consulting work
Betroffenenrechte
Betroffenenrechte in practice
Access, correction, deletion, restriction. On paper these are four clean rights. In practice each one triggers a search across systems, a judgment about exceptions, and a reply within a legal deadline.
Training covers how to run that as a repeatable workflow: who receives the request, who checks the legal basis for refusing or limiting it, how the answer is documented. Organizations that handle these requests rarely tend to have a process that works on the first try. We build the process in the session, using your actual systems as the reference point.
Löschkonzepte
Deletion concepts that survive the office
A deletion concept fails when nobody knows which retention period applies to which document type, or when the filing structure makes targeted deletion impossible. Sessions cover how to define retention periods, where they come from, and how to connect them to the way documents are actually stored.
We also touch the uncomfortable cases: email archives, shared drives, backup copies. There is no elegant solution for every one of them, and pretending otherwise wastes everyone's afternoon. The aim is a concept your team can follow without a manual.
Municipal and public-sector privacy
Local government has privacy constraints that generic corporate training does not address. Municipal offices handle citizen data under specific rules, work with committees and external bodies, and often operate with limited specialist staff.
We cover this as a distinct topic, drawing on the kind of practice questions that come up in Hessian municipal privacy work. Participants from public administration get material that reflects their actual obligations rather than a corporate template adapted on the fly.
NIS-2 and the EU Data Act in the training room
Both topics now appear in privacy training alongside DSGVO, which signals something worth noticing: data governance extends beyond classic personal-data questions. NIS-2 brings cybersecurity governance into the same conversation as privacy organization, and it is relevant for Datenschutzbeauftragte and coordinators who increasingly sit near security decisions.
The EU Data Act raises questions about data access and sharing that most organizations have not yet had to answer. Our sessions position both as business implementation topics, not legal theory — what changes in your processes, who owns the decision, and where the two topics overlap with work you already do on Datenschutz.
Teilnahmebescheinigung
Every participant leaves with a certificate
Every participant receives a Teilnahmebescheinigung after the session. It records the topic, the date, the format and the duration. For organizations, these certificates are useful evidence that staff handling personal data have been trained — the kind of documentation that shows up in audits and in conversations with supervisory authorities.
We issue them as a matter of course; nobody has to ask. If your organization needs a specific format for internal records, we can align it — send us an example and we will match the fields your file expects.
Questions we hear before a session
Is training available in English?
Yes. Sessions run in German or English, and mixed-language groups are workable with advance notice.
What group size works best?
Between six and fifteen participants for most topics. Smaller groups suit process-heavy sessions where we work with your actual documents.
Do participants need prior privacy knowledge?
For fundamentals sessions, no. Refresher and administrator tracks assume some existing familiarity with DSGVO basics.
How often should a Datenschutzbeauftragter refresh their knowledge?
Most organizations benefit from an annual refresher, plus a session whenever a significant regulatory change touches their sector.
Telling us who is in the room is the first step
A useful proposal needs four things: which roles will attend, roughly how many people, whether the session should run in German or English, and whether you prefer Virtual Classroom dates or a visit to your office. From there we suggest a topic mix and a session length that fits the working day.
POT Falkenberg GmbH is a Unternehmensberatung led by Geschäftsführerin Waltraud Falkenberg, registered as HRB 6640. Alongside IT-Schulungen we handle IT-Beratung, Datenschutz, Büroorganisation and administrative Dienstleistungen, so a training session often continues into process work if that is what your team needs.
Hünfelden
Nassauer Straße 5
65597 Hünfelden
Germany
Branch office
Kaiserstraße 29
63065 Offenbach
Germany