Alicja W.-Attorney-at-Law • External Data Protection Officer • IT Security Officer
Check rate
Experience
Integrated Security and Emergency Documentation for a 24/7 Logistics Company
Medium-Sized Logistics Company
- Creation of complete bilingual (DE/EN) security and emergency documentation: Business Continuity Plan / Disaster Recovery Plan, Incident Response Plan v2.0 with four case-specific playbooks (PICERL), Access Control Policy, Vulnerability Management Policy, Business Resilience Programme, Risk Governance Plan
- Consolidation into an integrated emergency manual (12 chapters) with immediate-action checklists for six emergency scenarios, a prioritized action table and a formal approval structure
- Review and documentation of the applicability of NIS2 and HinSchG, including the legal justification for non-applicability
Attorney-at-Law – IT Law and Data Protection
KONTENTIERT LEGAL
- Litigation and representation in extensive court proceedings in IT and data protection law before German courts – from out-of-court negotiations and court proceedings through appeals
- Legal representation of companies in data protection and IT law disputes: administrative fine proceedings, correspondence with supervisory authorities (with a focus on LDI NRW and LDA Bavaria), defense against claims for damages and injunctive relief brought by data subjects
- Drafting and review of IT-related contracts: data processing agreements, IT service agreements, SaaS and cloud agreements, international data transfers (SCC, TIA), data protection impact assessments
- Advice on regulatory developments: implementation of NIS2, DORA, Whistleblower Protection Act, AI Act, TDDDG – including client information and compliance roadmaps
- Core client segments: medium-sized companies, IT service providers, e-commerce companies, logistics, manufacturing, retail and healthcare
Founder & Owner – Compliance Consultancy for Data Protection, IT Security and E-Commerce
EASY DATENSCHUTZ
- Established and managed my own compliance consultancy for more than four years with full entrepreneurial responsibility – client acquisition, service delivery, quality assurance, pricing and practice administration
- Assumed the role of DPO under Art. 37 GDPR for more than 200 clients across industries: IT service providers, e-commerce, industry, construction, logistics, retail, healthcare, coaching providers, intermediaries and other service providers – from medium-sized companies with 24/7 operating requirements to internationally structured organizations
- Cross-border compliance support for clients in Germany, Poland, Italy and the United Kingdom: parallel application of the GDPR, UK GDPR, national data protection law and industry-specific requirements; correspondence with LDI NRW, UODO, Garante and ICO
- Set up and operated information security management systems: security policies, access control, vulnerability management, business continuity and disaster recovery, incident response with case-specific playbooks
- Led more than 300 data protection and IT security projects: records of processing activities, data protection impact assessments, audit reports, security documentation, emergency manuals, employee training and ongoing strategic and operational advice
- Crisis management for data breaches and cyber incidents: coordination of internal stakeholders, IT service providers, forensic providers and supervisory authorities – including timely notifications under Art. 33 GDPR within 72 hours
- Assessment of penetration test results (including Greenbone), development of risk-based remediation plans and formal risk acceptance procedures in accordance with ISO 27005 / BSI standards
Judicial and Public Administration Legal Clerkship – Second State Examination in Law
Wuppertal Regional Court
- Civil law placement at Velbert Local Court: independent drafting of judgments, courtroom service and performance of judicial duties under supervision (judicial assignment)
- Criminal law placement at the Wuppertal Public Prosecutor’s Office in the department for drug-related crime, organized crime and cybercrime: filing of indictments, case file work and representation at court hearings
- Administrative law placement in the administration of the NRW State Parliament, focusing on data protection and compliance – an authority-side perspective on regulatory processes
- Legal placement at a business law firm in Düsseldorf, focusing on data protection law and compliance
- Result: in-depth knowledge of the German judiciary and public administration from the inside – valuable in any subsequent dealings with courts and supervisory authorities
Student Assistant
Marco Schmitz MdL · NRW State Parliament
- Support with day-to-day political work, research on legislative procedures, meeting preparation and constituency work
- Insight into regulatory processes and the institutional framework of legislation in NRW
Research Associate
Boden Rechtsanwälte
- Handling legal mandates in intellectual property, data protection and IT law
- Research, drafting legal documents, client communication and file management alongside university studies and legal clerkship
Crisis support following data breaches and cyber incidents
Various mandates across industries
- Initial assessment within two hours, decision on reporting under Art. 33 GDPR, communication with authorities and notification of affected individuals under Art. 34 GDPR
- Managing immediate measures: securing evidence, containment, forensic investigation and recovery – with clear allocation of roles between management, IT, data protection and external service providers
- Audit-ready documentation of all decisions and communication steps to provide protection in any subsequent regulatory or court proceedings
Data protection compliance for e-commerce mandates
Several online retailers in the German market
- Ongoing DPO support and legal advice on developments in consumer protection, data protection and e-commerce law
- Preparing client updates on regulatory changes, including the implementation of EU directives in the German Civil Code, the Price Indication Ordinance and the EmpCo Directive
- Reviewing and drafting privacy policies, terms and conditions, data processing agreements and cookie consent concepts
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Professional Services, Government and Administration, Information Technology, Retail, Transportation, and Healthcare.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology, Legal, Operations, and Research and Development.
Summary
Attorney-at-law specializing in data protection and IT law, certified external Data Protection Officer, data protection auditor and IT Security Officer. Combines in one person what is otherwise covered in the market by three separate service providers: legal advice, operational compliance responsibility and technical and organizational security management.
Self-employed since 2022 in my own compliance consultancy, focusing on data protection, IT security and e-commerce – working across industries for service providers, intermediaries, industrial companies, construction companies, logistics companies, retailers, healthcare organizations, coaching providers and IT companies. Cross-border mandates in Germany, Poland, Italy and the United Kingdom; bilingual working approach (German/English, native Polish).
More than 8 years of specialized professional experience, over 200 clients supported and more than 300 completed projects. Familiar with the German legal and business environment from both perspectives: from the judiciary and public administration – with legal clerkship placements at the Wuppertal Public Prosecutor’s Office (cybercrime, drug-related crime, organized crime), at Velbert Local Court in civil law and in the data protection and compliance department of the NRW State Parliament – as well as from litigation practice, including representation in extensive court proceedings in IT and data protection law before German courts.
Known for taking on responsibility quickly and in a targeted manner: immediate ability to act in crisis and vacancy situations, clear leadership of interdisciplinary teams and confident coordination of management, IT, supervisory authorities and external service providers – with the aim of delivering auditable, documented results and measurable impact.
Skills
Data Protection Law
Gdpr · Bdsg · Tdddg
Data Processing Agreements
International Data Transfers
Correspondence With The Ldi
Representation In Administrative Fine Proceedings
It Security & Governance
Iso 27001 · Bsi It-Grundschutz
Isms Setup And Operation
Vulnerability Management
Bcp / Drp / Irp
Penetration Test Assessment
Crisis & Incident Response
Gdpr Art. 33 / 34 Notifications
Picerl Phase Model
Ransomware Response
Forensics Coordination
Crisis Communications
Additional Regulatory Expertise
Nis2 Directive · Dora · Hinschg · Kritis · Tdddg · Ai Act · Employee Data Protection · Video Surveillance · Health Data Protection
Languages
Education
Heinrich Heine University Düsseldorf
First State Examination in Law · Law · Düsseldorf, Germany
Certifications & licenses
Certification pursuant to Art. 37 GDPR
Statistics
Experience
Global experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Alicja is based in Düsseldorf, Germany.
Alicja speaks the following languages: German (Native), Polish (Native), English (Advanced), Spanish (Elementary).
Alicja has at least 8 years of experience. During this time, Alicja has worked in at least 6 different roles and for 6 different companies. The average length of individual experience is 1 year and 4 months. Note that Alicja may not have shared all experience and actually has more experience.
Based on recent experience, Alicja would be well-suited for roles such as: Integrated Security and Emergency Documentation for a 24/7 Logistics Company, Attorney-at-Law – IT Law and Data Protection, Founder & Owner – Compliance Consultancy for Data Protection, IT Security and E-Commerce.
Alicja's most recent position is Integrated Security and Emergency Documentation for a 24/7 Logistics Company at Medium-Sized Logistics Company.
In recent years, Alicja has worked for Medium-Sized Logistics Company, KONTENTIERT LEGAL, EASY DATENSCHUTZ, Wuppertal Regional Court, and Marco Schmitz MdL · NRW State Parliament.
Alicja is most experienced in industries like Professional Services, Government and Administration, and Information Technology. Alicja also has some experience in Retail, Transportation, and Healthcare.
Alicja is most experienced in business areas like Information Technology, Legal, and Operations. Alicja also has some experience in Research and Development.
Alicja has recently worked in industries like Professional Services, Government and Administration, and Information Technology.
Alicja has recently worked in business areas like Information Technology, Legal, and Operations.
Alicja holds a Master in Law from Heinrich Heine University Düsseldorf.
Alicja has 3 certificates. These include: Data Protection Auditor, External Data Protection Officer, and IT Security Officer.
Alicja is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 7 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Federico L.
Henry H.
Peter K.
Björn B.
Alexander S.
Najat D.
Markus W.
Dustin D.
Pierre G.
Nikolaus B.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Integrated Security and Emergency Documentation for a 24/7 Logistics Company
Stephan S.
Peter D.
Christian G.
Volker J.
Enrique G.
Christian D.
Sandra K.
Frank J.
Jens B.
Maxim R.
Nearby freelancers
Professionals working in or nearby Düsseldorf, Germany
Peter S.
Felix B.
Matthias B.
Songül D.
Reza S.
Dirk V.
Marijn S.
Rudolf E.
Gudrun A.
Alwin F.
