About
IT & Privacy Lawyer (Imprint of my law firm) and founder of matterius.
Work Experience
- Senior Associate at Hogan Lovells in Munich in the practice area „Technology, Media & Telecommunications“
- Head of Compliance Data Protection at the truck manufacturer MAN (today part of Volkswagen), responsible for the global data protection programme
- Since 2009 lawyer in solo practice
Education
- two state exams "with honors" (each with two-digit points)
- Ph.D. in telecommunications law
Recognitions
- Handelsblatt - named in "Germany's Best Lawyers" for Data Protection Law and IT-Law in the years 2020 and 2021
- Kanzleimonitor - listed number 1 in "Leading Lawyers for IT Law" and number 2 in "Leading Lawyers for Data Protection", each for the years 2021/22
Selected Publications
- Reducing Liability Risks as a Software Provider, Reseller or Consultant (English)
- Template "Data Protection Policy" for the implementation of the GDPR in companies (German, English version coming soon).
- Checklist for ensuring GDPR compliance of Software, Cloud/SaaS-Services and IT-systems (German)
- Guideline for the implementation of the GDPR by B2B IT-Providers (Data Processors) (German)
- Guideline for GDPR-compliant direct marketing (German)
Client Voices
"goal-oriented approach" (10x)
"excellent legal knowledge" (8x)
"pragmatic and practical " (7x)
"thinks entrepreneurially" (6x)
"understands well business objectives" (4x)
"sound industry knowledge" (2x)
"predictable costs" (2x)
Matters handled by Dr. Thomas Helbing
Advising a leading German scientific research institution on data protection in research projects and employee data
Anonymization
Coopertation Agreements
Data Protection Consent
Joint Controller
Privacy Policy
Scientific Research
Artificial Intelligence (AI)
Leading german scientific research organization
Healthcare and Life Sciences
Information Technology
Non-Governmental Organization (NGO)
Large (>1000 employees)
Germany
Data Protection Law
Advice
Sole advising lawyer
2022
Germany
251 - 1000 hours
Major German bank with over 4 million customers
Financial (Banking & Insurance)
Large (>1000 employees)
Germany
Data Protection Law
Advice
Sole advising lawyer
2022
Germany
> 1000 hours
Confirmedby client
Confirmed by client
Datenschutzberatung und Vertragsgestaltung für einen Anbieter eines vernetzen, selbstlernenden Heizungssystems
Datenschutzkonzept
Heizungssteuerung
Startup
Internet of Things (IoT)
Vilisto (Anbieter einer selbstlernenden Heizungssteuerung)
Energie und Versorgung
Informationstechnologie (IT)
Klein (10-100 Mitarbeiter)
Deutschland
Datenschutzrecht
Informationstechnologierecht / IT-Recht
Verträge
Allein beratender Anwalt
2022
Deutschland
51 - 250 Stunden
Confirmedby client
Confirmed by client
Advising Personio, a German unicorn for cloud-based HR software, on data protection and T&Cs.
Cloud Computing / SaaS
HR Software
Payroll Accounting
Recruiting
Unicorn
Software as a Service (SaaS)
Personio (Cloud-based HR software provider)
Information Technology
Large (>1000 employees)
Germany
Data Protection Law
Information Technology Law / IT-Law
Advice
Sole advising lawyer
2022
Germany
Confirmedby client
Confirmed by client
Ongoing advice of a leading international provider of employee surveys on contract matters and data protection
Anonymization
Employee Feedback
Employee Survey
Software as a Service (SaaS)
Employee survey provider
Information Technology
Services
Medium (100-1000 employees)
Data Protection Law
Information Technology Law / IT-Law
Advice
Sole advising lawyer
2024
Germany
500.000 - 5 Mio. EUR
251 - 1000 hours
Confirmedby client
Confirmed by client
Advising global provider of leading health app with 300 million users on GDPR compliant redesign of privacy notices
Apps
Children Data Protection
Data Protection Advice
Data Protection Consent
Health App
Health Data Protection
Privacy Policy
International provider of a health app
Healthcare and Life Sciences
Information Technology
Medium (100-1000 employees)
Canada
Data Protection Law
Advice
Sole advising lawyer
2024
Germany
10 - 50 hours
Confirmedby client
Confirmed by client
Durchführung eines Transfer Impact Assessments (TIA) zum Einsatz von Amazon Cloud Services (AWS)
Amazon Web Services (AWS)
Transfer Impact Assessment (TIA)
Schrems II
Drittlandsübermittlung
Internationaler Datentransfer
SaaS Anbieter
Informationstechnologie (IT)
Groß (>1000 Mitarbeiter)
Deutschland
Datenschutzrecht
Beratung
Allein beratender Anwalt
2022
Deutschland
AWS (Amazon Web Services)
Confirmedby client
Confirmed by client
Advising a clinical trial service provider on data protection and contract matters
Clinical Research Organization (CRO)
Clinical Trials
Data Processing Agreement (DPA)
Privacy Policy
Data Protection Consent
Joint Controllership
Sponsor
Service provider for clinical trials
Information Technology
Pharma
Micro ( < 10 employees)
Germany
Data Protection Law
Contracts
2022
Germany
51 - 250 hours
CRO, Sponsors
Confirmedby client
Confirmed by client
Advising an IT consulting firm specialized in digital analytics on data protection and contracts
Adobe Analytics
Digital Marketing
Google Analytics
Optimizely
Tableau
Tealium
Tracking
Usercentrics
Web Analytics
Cookies
Digital analytics consulting firm
Information Technology
Small (10-100 employees)
Germany
Data Protection Law
Information Technology Law / IT-Law
Advice
Sole advising lawyer
2022
Germany
51 - 250 hours
Confirmedby client
Confirmed by client
Beratung eines Open Banking und Data Analytics FinTechs zum Datenschutz
Data Analytics
Kontodatenanalyse
Kontoinformationsdienst
Open Banking
PSD2
ZAG
Zahlungsauslösedienst
Big Data
FinTech
B2B Infrastruktur FinTech
Finanzwesen (Banken & Versicherungen)
Informationstechnologie (IT)
Datenschutzrecht
Beratung
Allein beratender Anwalt
2021
Deutschland
51 - 250 Stunden
Additional Information
This is a lawyer profile page. Listed matters experience may also stem from work at previous law firms.