About
IT & Privacy Lawyer (Imprint of my law firm) and founder of matterius.
Work Experience
- Senior Associate at Hogan Lovells in Munich in the practice area „Technology, Media & Telecommunications“
- Head of Compliance Data Protection at the truck manufacturer MAN (today part of Volkswagen), responsible for the global data protection programme
- Since 2009 lawyer in solo practice
Education
- two state exams "with honors" (each with two-digit points)
- Ph.D. in telecommunications law
Recognitions
- Handelsblatt - named in "Germany's Best Lawyers" for Data Protection Law and IT-Law in the years 2020 and 2021
- Kanzleimonitor - listed number 1 in "Leading Lawyers for IT Law" and number 2 in "Leading Lawyers for Data Protection", each for the years 2021/22
Selected Publications
- Reducing Liability Risks as a Software Provider, Reseller or Consultant (English)
- Template "Data Protection Policy" for the implementation of the GDPR in companies (German, English version coming soon).
- Checklist for ensuring GDPR compliance of Software, Cloud/SaaS-Services and IT-systems (German)
- Guideline for the implementation of the GDPR by B2B IT-Providers (Data Processors) (German)
- Guideline for GDPR-compliant direct marketing (German)
Client Voices
"goal-oriented approach" (10x)
"excellent legal knowledge" (8x)
"pragmatic and practical " (7x)
"thinks entrepreneurially" (6x)
"understands well business objectives" (4x)
"sound industry knowledge" (2x)
"predictable costs" (2x)
Matters handled by Dr. Thomas Helbing
Data protection law review of SAP's controller processor agreements for cloud and support services (Cloud DPA).
Data Processing Agreement (DPA)
EU Standard Contractual Clauses (SCC)
GDPR
SAP
SAP Cloud Services
SAP DPA
SAP Professional Services
SAP SuccessFactors
Schrems II
SAP Clouddienste Kunden
Financial (Banking & Insurance)
Industrial Machinery & Equipment
Large (>1000 employees)
Germany
Data Protection Law
Contracts
Sole advising lawyer
2022
Germany
500.000 - 5 Mio. EUR
10 - 50 hours
SAP
Drafting of an audit concept and data protection audit of video surveillance systems in public transport systems
General Data Protection Regulation (GDPR)
Checklist
Public Transportation
Accountability
Video Surveillance (CCTV)
Public transport provider with over 100 million pa
Governmental
Transportation and Logistics
Large (>1000 employees)
Germany
Data Protection Law
Advice
Sole advising lawyer
2022
Germany
10 - 50 hours
Contract drafting and data protection advice for an IoT platform for the management of photovoltaic systems
Internet of Things (IoT)
Energy Portal
Renewable Energies
Photovoltaics (PV)
Renewable energy solutions provider
Energy and Utilities
Information Technology
Large (>1000 employees)
Germany
Data Protection Law
Information Technology Law / IT-Law
Contracts
Sole advising lawyer
2021
Germany
10 - 50 hours
Advising a provider of a social intranet solution including employee app on contracts and data protection
Cloud Computing / SaaS
Enterprise Social Network
Social Intranet
Employee App
Social Intranet Anbieter
Information Technology
Small (10-100 employees)
Germany
Data Protection Law
Information Technology Law / IT-Law
Contracts
Sole advising lawyer
2020
Germany
10 - 50 hours
Contract negotiation for international IT provider with automotive clients on complex IT outsourcing contracts
IT-Outsourcing
SCRUM
Development Operations (DevOps)
Agile Software Development
Leading global technology consultancy
Automotive
Information Technology
Large (>1000 employees)
Information Technology Law / IT-Law
Sole advising lawyer
2019
Germany
50 - 500 Mio. EUR
251 - 1000 hours
Kunden in der Automobilwirtschaft
Advising a B2B SaaS provider in the energy sector on contract drafting and data protection
Cloud Computing / SaaS
Software as a Service (SaaS)
SaaS provider in the energy industry
Energy and Utilities
Information Technology
Small (10-100 employees)
Germany
Data Protection Law
Information Technology Law / IT-Law
Advice
Sole advising lawyer
2022
Germany
500.000 - 5 Mio. EUR
51 - 250 hours
Advising an operator of a global B2B logistics platform on data protection
Cloud Computing / SaaS
Data Analytics
Plattform-Business
Data Protection Policy
Data Protection Notice
International Data Transfer
Location Data
Logistics
B2B logistics platform operator
Information Technology
Transportation and Logistics
Small (10-100 employees)
Germany
Data Protection Law
Information Technology Law / IT-Law
Advice
Sole advising lawyer
2022
Germany
51 - 250 hours
Beratung und AGB-Gestaltung für einen mittelständischen Automobilzulieferer bei der Vernetzung seiner Maschinen
Cloud Computing / SaaS
Predictive Maintenance
Internet of Things (IoT)
Mittelständischer Maschinenbauer
Automobil
Industrieanlagen & -maschinen
Mittel (100-1000 Mitarbeiter)
Deutschland
Datenschutzrecht
Informationstechnologierecht / IT-Recht
Compliance
Allein beratender Anwalt
2023
Deutschland
500.000 - 5 Mio. EUR
51 - 250 Stunden
Ongoing advice to a bank service provider on data protection, including scoring and use of payment transaction data
CRR-VO
MaRisk
Scoring
Account Transactions
German Banking Act (KWG)
Payment Transaction Data
Service provider for banks
Financial (Banking & Insurance)
Information Technology
Germany
Data Protection Law
Advice
2022
Germany
5 - 50 Mio. EUR
51 - 250 hours
Ongoing data protection advice to an international industrial services provider
eLearning
M&A
Data Subject Rights
Data Protection Training
Internal Investigations
International industrial services provider
Chemicals
Pharma
Mining, Oil & Gas
Large (>1000 employees)
Data Protection Law
Advice
Sole advising lawyer
2022
Germany
51 - 250 hours
Additional Information
This is a lawyer profile page. Listed matters experience may also stem from work at previous law firms.