01
Understanding the situation
We speak with the people who handle data and review the agreed systems and documentation. We collect customer requirements and criteria for any planned external assessment.
Business information protection
Dane Chronione — information protection
We review where important data is held and who can access it. We help organise document handling, improve safeguards and prepare your business for an external assessment.
Trusted by
Companies and institutions that need stable IT.
Clear rules for information across your business
We help prepare data access, sharing and protection for an external assessment. If the goal is TÜV NORD Polska’s Dane Chronione mark, current availability, rules and criteria are confirmed with that body before engagement. Virtline prepares the organisation; it does not issue this mark. The programme is distinct from accredited ISO 27001 certification.
What the work covers
The core scope combines review of data protection rules with system configuration checks. Code review, penetration tests and social engineering tests are optional, separately priced modules. Each test requires agreed systems, scenarios, authorisation and reporting. They are not automatically included in preparation for Dane Chronione.
Information and storage locations
We identify the data your business handles, where it is stored and which suppliers it is shared with. Paper records are included too.Employee and supplier access
We review accounts, roles and permissions. We organise how access is granted and removed, including when people change roles or leave.Document handling rules
We agree how information is labelled, shared, retained and deleted. Instructions need to reflect employees’ actual tasks.Safeguards and data recovery
We check account protection, encryption and backups. We test recovery of selected data and review how incidents are reported.ISO 27001 · TÜV NORD Polska
Virtline’s information security management system is certified by TÜV NORD Polska. The published certificate specifies its scope and validity.
View Virtline’s certificateHow our cooperation process works
We start with scope and priorities. Timing depends on the number of systems, existing safeguards and the changes your business chooses to implement.
02
Agreeing the rules
We describe information categories, responsibilities and required safeguards. We agree the sequence of changes, the scope of work and costs.
03
Implementation and team preparation
We introduce the agreed settings and procedures. We explain how employees should apply the new rules in everyday work.
04
Checking and handover
We check the completed changes and provide documentation. We agree access reviews, updates to the rules and any outstanding work.
Practical scope
What you receive at handover
The deliverables match the agreed scope and support ongoing work, not just a one-off audit.
An overview of data, systems and responsible people, together with agreed classification and sharing rules.
Instructions, descriptions of configuration changes and results of agreed checks, such as access reviews or data recovery tests.
A description of remaining gaps, priorities and responsibilities. We agree which tasks your business will handle and where support is needed.
Examples of information and safeguards
We assess confidentiality separately from the importance of data to business operations. Public information, such as a published price list, needs protection against changes and must be kept current. Internal information, including instructions and working reports, is shared with designated teams under agreed rules. Confidential information, such as personnel records, non-public contracts and trade secrets, is protected against unauthorised access. Business-critical data, such as an order database, needs to be available and recoverable regardless of its confidentiality level.
Tools that fit your business systems
We first check the capabilities of existing systems and licences. We select labels and classification rules for email, documents and repositories and identify tasks that can be automated. Data loss prevention (DLP) rules warn about or block agreed ways of transferring data; we test them before deployment. We organise shared folders, external links and supplier access. If a separate file transfer system is needed, we agree its scope. We also define which events to log, who receives alerts and how problems are reported.
Questions about data protection
When is this work useful?
+
When access to data is unclear, documents are scattered or a customer asks about your safeguards. The work can also help prepare the environment for an external assessment. You do not need to start by replacing every system.
Does Virtline issue the Dane Chronione certificate?
+
No. Virtline helps prepare the organisation. For the Dane Chronione mark, TÜV NORD Polska confirms the current rules and decision. We do not promise an award. ISO 27001 certification is a separate process performed by an appropriate accredited body.
Is TÜV NORD the only certification body?
+
Dane Chronione refers to TÜV NORD Polska’s programme; availability and criteria must be confirmed with the issuer. Authorised certification bodies perform accredited ISO 27001 certification. These are different assessments with separate rules and documents.
Does Dane Chronione replace ISO 27001 or GDPR obligations?
+
The programme should not be equated with ISO 27001 certification or treated as an exemption from personal data protection obligations. We agree the project scope and assessment criteria separately; the organisation retains ongoing responsibility for its data processing.
Organise information protection in your business
Tell us which data and systems you want to cover. If you are preparing for a customer audit or certification, include the scope and deadline. Do not send passwords or documents containing confidential data.
Discuss data protection