About
IT & Privacy Lawyer (Imprint of my law firm) and founder of matterius.
Work Experience
- Senior Associate at Hogan Lovells in Munich in the practice area „Technology, Media & Telecommunications“
- Head of Compliance Data Protection at the truck manufacturer MAN (today part of Volkswagen), responsible for the global data protection programme
- Since 2009 lawyer in solo practice
Education
- two state exams "with honors" (each with two-digit points)
- Ph.D. in telecommunications law
Recognitions
- Handelsblatt - named in "Germany's Best Lawyers" for Data Protection Law and IT-Law in the years 2020 and 2021
- Kanzleimonitor - listed number 1 in "Leading Lawyers for IT Law" and number 2 in "Leading Lawyers for Data Protection", each for the years 2021/22
Selected Publications
- Reducing Liability Risks as a Software Provider, Reseller or Consultant (English)
- Template "Data Protection Policy" for the implementation of the GDPR in companies (German, English version coming soon).
- Checklist for ensuring GDPR compliance of Software, Cloud/SaaS-Services and IT-systems (German)
- Guideline for the implementation of the GDPR by B2B IT-Providers (Data Processors) (German)
- Guideline for GDPR-compliant direct marketing (German)
Client Voices
"excellent legal knowledge" (6x)
"goal-oriented approach" (6x)
"pragmatic and practical " (5x)
"thinks entrepreneurially" (4x)
"understands well business objectives" (4x)
"predictable costs" (2x)
Matters handled by Dr. Thomas Helbing
Advising a leading German scientific research institution on data protection in research projects and employee data
Anonymization
Coopertation Agreements
Data Protection Consent
Joint Controller
Privacy Policy
Scientific Research
Artificial Intelligence (AI)
Leading german scientific research organization
Healthcare and Life Sciences
Information Technology
Non-Governmental Organization (NGO)
Large (>1000 employees)
Germany
Data Protection Law
Advice
Sole advising lawyer
2022
Germany
251 - 1000 hours
Major German bank with over 4 million customers
Financial (Banking & Insurance)
Large (>1000 employees)
Germany
Data Protection Law
Advice
Sole advising lawyer
2022
Germany
> 1000 hours
Confirmedby client
Confirmed by client
Datenschutzberatung und Vertragsgestaltung für einen Anbieter eines vernetzen, selbstlernenden Heizungssystems
Datenschutzkonzept
Heizungssteuerung
Startup
Internet of Things (IoT)
Vilisto (Anbieter einer selbstlernenden Heizungssteuerung)
Energie und Versorgung
Informationstechnologie (IT)
Klein (10-100 Mitarbeiter)
Deutschland
Datenschutzrecht
Informationstechnologierecht / IT-Recht
Verträge
Allein beratender Anwalt
2022
Deutschland
51 - 250 Stunden
Confirmedby client
Confirmed by client
Advising Personio, a German unicorn for cloud-based HR software, on data protection and T&Cs.
Cloud Computing / SaaS
HR Software
Payroll Accounting
Recruiting
Unicorn
Software as a Service (SaaS)
Personio (Cloud-based HR software provider)
Information Technology
Large (>1000 employees)
Germany
Data Protection Law
Information Technology Law / IT-Law
Advice
Sole advising lawyer
2022
Germany
Confirmedby client
Confirmed by client
Durchführung eines Transfer Impact Assessments (TIA) zum Einsatz von Amazon Cloud Services (AWS)
Amazon Web Services (AWS)
Transfer Impact Assessment (TIA)
Schrems II
Drittlandsübermittlung
Internationaler Datentransfer
SaaS Anbieter
Informationstechnologie (IT)
Groß (>1000 Mitarbeiter)
Deutschland
Datenschutzrecht
Beratung
Allein beratender Anwalt
2022
Deutschland
AWS (Amazon Web Services)
Confirmedby client
Confirmed by client
Advising a clinical trial service provider on data protection and contract matters
Clinical Research Organization (CRO)
Clinical Trials
Data Processing Agreement (DPA)
Privacy Policy
Data Protection Consent
Joint Controllership
Sponsor
Service provider for clinical trials
Information Technology
Pharma
Micro ( < 10 employees)
Germany
Data Protection Law
Contracts
2022
Germany
51 - 250 hours
CRO, Sponsors
Confirmedby client
Confirmed by client
Advising an IT consulting firm specialized in digital analytics on data protection and contracts
Adobe Analytics
Digital Marketing
Google Analytics
Optimizely
Tableau
Tealium
Tracking
Usercentrics
Web Analytics
Cookies
Digital analytics consulting firm
Information Technology
Small (10-100 employees)
Germany
Data Protection Law
Information Technology Law / IT-Law
Advice
Sole advising lawyer
2022
Germany
51 - 250 hours
Confirmedby client
Confirmed by client
Beratung eines Open Banking und Data Analytics FinTechs zum Datenschutz
Data Analytics
Kontodatenanalyse
Kontoinformationsdienst
Open Banking
PSD2
ZAG
Zahlungsauslösedienst
Big Data
FinTech
B2B Infrastruktur FinTech
Finanzwesen (Banken & Versicherungen)
Informationstechnologie (IT)
Datenschutzrecht
Beratung
Allein beratender Anwalt
2021
Deutschland
51 - 250 Stunden
Data protection law review of SAP's controller processor agreements for cloud and support services (Cloud DPA).
Data Processing Agreement (DPA)
EU Standard Contractual Clauses (SCC)
GDPR
SAP
SAP Cloud Services
SAP DPA
SAP Professional Services
SAP SuccessFactors
Schrems II
SAP Clouddienste Kunden
Financial (Banking & Insurance)
Industrial Machinery & Equipment
Large (>1000 employees)
Germany
Data Protection Law
Contracts
Sole advising lawyer
2022
Germany
500.000 - 5 Mio. EUR
10 - 50 hours
SAP
Drafting of an audit concept and data protection audit of video surveillance systems in public transport systems
General Data Protection Regulation (GDPR)
Checklist
Public Transportation
Accountability
Video Surveillance (CCTV)
Public transport provider with over 100 million pa
Governmental
Transportation and Logistics
Large (>1000 employees)
Germany
Data Protection Law
Advice
Sole advising lawyer
2022
Germany
10 - 50 hours
Additional Information
This is a lawyer profile page.