As a small company we have elected to not define a Data protection officer but instead senior management will deal with all requests as a team.