Data protection law

With our legal expertise we provide support for companies and their digitisation plans from the basic concept to going live.

It may be necessary in the case of critical business processes to examine compliance with data protection laws by providing an expert opinion. Our evaluations always conclude with a clear result and a practical recommendation for action. If necessary, we also accompany the preparation of data protection impact assessments.

Whether asset deal or share deal, we advise companies on the legally secure transfer of customer data in connection with corporate transactions. The question of the permissibility of access to personal data by the potential acquirer regularly arises as early as the due diligence stage. We also provide advice to insolvency administrators on the realisation of assets involving personal data.

We prepare all necessary legal texts: Data protection information for websites and apps, advertising consent, declarations of consent or social media guidelines. This also includes the actual textual design of potentially annoying cookie banners and the integration of content management tools.

In the course of implementing the GDPR, we have supported data protection projects in many companies, primarily larger ones. We help you to make your company or individual areas compliant with the GDPR. In most cases, this now involves a re-evaluation of the list of processing activities or data protection management systems that have been introduced.

When working with service providers and cooperation partners, the question of the legal basis for data protection always arises. We examine whether this is the case from a data protection perspective (Art. 28 GDPR, Art. 26 GDPR or controller-to-controller) and draw up the necessary legal texts.

Over the past 2 years, we have investigated more than 2,000 cases of possible data protection breaches to determine whether the incident should be reported to the relevant data protection authority. In many cases, the result is that notification is not required because there is no likely risk to the data subjects. You will usually receive documentation of the incident and a clear recommendation on the obligation to report it, together with information on legally required immediate measures, on the same day.

We advise companies on all legal issues concerning the contemporary workplace. Our HR-IT team will assist you in all questions of employee data protection. From the digitalisation of the application procedure to the digital personnel file for home office and mobile working to the use of digital control and monitoring measures – we will put the digitalisation of your personnel department and employee management on a secure footing in terms of data protection and employment law.

We have been representing clients in proceedings against German data protection authorities long before the GDPR came into force. However, the number and importance of these proceedings has increased significantly in recent years. Our data protection litigation team handles many challenging proceedings for companies against data protection authorities. While there are potentially large GDPR fines in some cases, there are sometimes (seemingly) minor issues that need to be resolved.

…this is not us. We are not offering to provide an external data protection officer because we consider ourselves precluded from doing so by our professional regulations. As lawyers, we cannot advise you on data protection issues and at the same time perform the functions of the monitoring data protection officer. However, we work together with specialised data protection officers, in whose services we have great confidence. Please do not hesitate to contact us in this regard.