SYSTEMS · DATA · DIGITAL BUSINESS MODELS
Putting technology to work.
Clarifying responsibility.
Digital projects need sound agreements and a considered approach to data. We support providers, clients and affected individuals with the legal aspects of software, platforms and new technologies.
Discuss your matterIT contracts. Data protection. Digital responsibility.
YOUR MATTER
Developing, purchasing or using an application involves different rights and obligations. Data protection also concerns the people behind the data. We start with the actual processes and our client's role.
We draft contracts for digital products and services. The scope of services, rights of use, cooperation, remuneration and liability should fit the business model. The role under data protection law is established by reference to the actual processing.
We support the procurement, introduction and operation of digital systems. We consider dependencies, responsibilities, data access and a possible change of provider. Legal requirements are coordinated with the relevant specialist departments.
We assess your position in relation to data processing, digital services and asserted claims. This includes access and erasure requests as well as contractual problems. The scope and limits of possible action are explained in light of the particular facts.
OUR SERVICES
Contracts, technology and data protection are interconnected. We distinguish the respective issues and bring them together to inform decisions; a legal review does not provide a guarantee of technical security.
Defining services and cooperation precisely.
We support providers with clear boundaries to their services, remuneration and cooperation obligations. We advise clients on requirements, rights of use, acceptance and handling deviations. We draft development, implementation and maintenance agreements around the actual project. Milestones, changes and documentation are structured so that expectations and responsibilities can be traced later.
Defining use, availability and exit.
We advise cloud and SaaS providers on describing their services and contractual operating conditions. We support customers with service levels, data access, security commitments and a possible change of provider. We assess duration, adjustments, subcontractors and return of data. Responsibilities under data protection law are assessed separately by reference to the actual processing.
Ensuring clear accountability for processing.
We support businesses and institutions in assessing the legal position of their data processing and putting appropriate agreements and information in place. We advise service providers on their own role and their clients' requirements. We consider purposes, legal bases, data flows and responsibilities. Implementation is coordinated with those responsible internally and, where applicable, the data protection officer.
Assessing requests and responses carefully.
We help data subjects establish which data about them is processed and which rights may apply. We advise controllers on handling incoming requests, identity checks and competing interests. Access, rectification and erasure are assessed separately. Documentation, deadlines and the rights of other individuals also form part of the work.
Defining the use and legal role.
We advise developers and providers on contractual responsibilities and the legal framework for their system. We support businesses and institutions in selecting and using AI applications. The intended purpose, data, human oversight and respective role are established first. These determine the duties, information issues and arrangements with employees, customers or other affected individuals that need to be assessed.
Connecting the legal response with the technical investigation.
We support affected organisations in legally assessing an incident and addressing information and notification issues. We advise service providers on contractual obligations, cooperation and alleged liability. We help affected individuals assess their own claims. Specialists investigate the technical causes; we assess their findings for the legal steps required.
Structuring reliable digital business relationships.
We support operators and traders with contract terms, information duties and dealings with users. We advise business and private users on contractual problems, account restrictions and asserted claims. We examine the specific service, ordering process and the platform's role. Consumer law, data protection and content are included as separate areas of review where needed.
Comparing contractual commitments with actual performance.
We advise private and business customers on service failures, contractual changes and termination issues. We support providers in assessing claims made against them and establishing clear contractual terms. The service description, purpose of use and documented course of events are decisive. We distinguish general contractual issues from specific telecommunications-law requirements and clarify the scope of the review needed.
WORKING TOGETHER
We translate technical projects into legal questions that can be assessed. This requires an understanding of the actual processes as well as the contracts and the parties' roles.
We establish the service, use, participants and systems. For incidents, we first record when the issue became known, the steps already taken and imminent deadlines.
We assess the legal roles and prioritise outstanding matters. Required technical information, external input and costs are agreed with you.
We prepare or negotiate the agreed documents and assist with enquiries or disputes. Changes to the project are assessed for any necessary legal adjustments.
QUESTIONS & ANSWERS
An initial guide to common questions. Your legal position, the documents and the facts determine the assessment of your individual case.
Legal information: 1 November 2026
No. What matters is the actual role in processing personal data. Processing on behalf of a controller requires a corresponding allocation of tasks and instructions. We review the processes and draft an appropriate agreement. A contract template alone does not determine the actual role.
Article 15 GDPR concerns confirmation of processing, access to one's own personal data and further information prescribed by law. The scope, identity and potentially competing rights must be assessed in each case. We assist with making requests and with their proper handling by the controller.
Whether notification is required depends in particular on the risk assessment. Where a notification duty applies, notification must generally be made without undue delay and, where feasible, within 72 hours of becoming aware. The assessment, competent authority and possible information to affected individuals must be clarified promptly.
No. The European legal framework distinguishes in particular by risk, intended purpose and the roles of those involved. We therefore begin with the specific system and its use. Data protection, contractual rights and further statutory requirements may also be relevant. The law in force at the time of the assessment is decisive.
Yes. We compare the service description and contract terms with your project. This includes rights of use, implementation, remuneration, change procedures, data access and termination. Technical suitability and capability may need to be assessed by your specialists.
Yes. We assess the specific contractual or data protection position and the available evidence. Before accepting the engagement, we check potential conflicts of interest and whether the matter falls within the agreed scope of our work.
Our work concerns legal assessment and structuring. Technical testing, forensic analysis and incident remediation are carried out by suitably qualified specialists. We coordinate the legal work with their findings and the responsible individuals.
