OneTrust Experts in Germany

Industry: Finance/Insurance

• Sparring partner for the data protection team
• Taking over tasks from the data protection backlog
• Updating data protection processes
• Updating TOMs
• Revising template documents (including DPA, data protection guidelines)
• Conducting audits (authorization concept, software development)
• Taking over tasks from day-to-day operations
• Processing data protection reports
• Conducting DPIA and TIA
• Reviewing data processing agreements
• Designing and delivering trainings
• Standard Data Protection Model
• AI and data protection

Result: Successfully supported the data protection team, worked through the data protection backlog, and delivered trainings successfully

• Analysis of the existing reporting platform including processes and governance topics with stakeholders from sales and marketing.

• Detailed analysis and evaluation of client-defined requirements for existing reporting and new dashboards.

• Supporting stakeholders in managing sales processes and early detection of KPI trends.

• Use of Microsoft Power BI as central analysis and reporting platform.

• Developing a proposal for the necessary evolution of processes and the Power BI platform.

• Gathering current business processes and defining company-wide KPIs in coordination with stakeholders.

• Analysis and inventory of the client's Power BI platform.

• Analysis of processes and data governance.

• Recording and documenting current business processes.

• Developing recommendations for process and reporting platform improvements.

• Designing and implementing dashboards in Power BI.

• Defining company-wide KPIs and aligning them with stakeholders.

• Microsoft Power BI.

• Data analytics.

• KPI definition and reporting.

• Dashboard design and data visualization.

• Stakeholder management and requirements management.

• Privacy by Design and by Default
• Working with OneTrust: creating and managing records for requesters
• Interface role: mediation and communication between the DPO and the specialist departments, including clarifying data protection questions
• Handling data protection incidents: analysis, documentation, and coordination of measures
• General advice on data protection topics: support with data protection-related questions
• Process optimization: identifying room for improvement in processes and implementing changes
• Documentation & reporting: creating reports on data protection incidents or general data protection topics for the DPO and weekly reports for the line manager for presentation in the performance board
• Risk assessment & compliance: support in assessing data protection risks in new projects or processes
• Distribution and independent handling of email requests or requests from the DPO: all incoming tickets are divided among team members, with no specialization in the tasks. Tickets are created and tracked in Jira.

Approach/Methods:

• Stakeholder management
• Communication at C-level
• Timeline and implementation plan

• Defined product vision, roadmap, and subscription-based monetization model.
• Architected multimodel AI orchestration (Gemini + GPT fallback) ensuring reliability and cost efficiency.
• Designed explainable insight engine with confidence scoring and agile antipattern detection.
• Built and deployed full-stack architecture (FastAPI, PostgreSQL, React) with secure authentication and quota governance.
• Tech: Python, FastAPI, PostgreSQL, React, TypeScript, Stripe, Gemini API, OpenAI API.

• Planning, steering, and monitoring the Corporate Responsibility Tech Enablement project for IT
• Concept and implementation of the EUDR (EU Deforestation Regulation)
• Concept and implementation of the Eco-Design Regulation
• Continued support of projects within the Corporate Responsibility strategy
• Definition and review of guidelines (e.g. governance, success metrics) and, if needed, analysis of issues and their solutions
• Overall project management, marketing, communication, and quality assurance for the projects
• Creation of the project plan including timeline/roadmap, budget, and resources
• Ensuring compliance with budget and deadlines
• Defining guidelines for project control, methods, and priorities
• Planning and tracking resources and effort, also together with other IT teams
• Evaluation of projects and preparation of results (reporting to management)
• Identification and reduction of risks
• Regular communication with stakeholders
• Steering internal and external stakeholders and service providers (Jira, Confluence, backlog management, task tracking, SharePoint, MS 365 platform etc.)
• Development of standards and process automation

Label: Azure Cloud, Jira, Confluence, Power BI, SAP BW, AWS, Miro, Bee360, Draw.io, SharePoint, MS 365 platform, Trello etc.

• Operating Model Design: Designed and rolled out a 3-tier AI Governance Operating Model, defining organizational structures, roles, tooling, guidelines and processes across Corporate, Business Units, and Implementation layers to manage compliance for 200,000+ employees.
• EU AI Act Compliance: Led the strategic screening and risk classification of 3,800+ AI applications, implementing automated assessments for prohibited practices and General Purpose AI (GPAI) requirements.
• Enterprise Roll-out: Orchestrated the deployment of an internal GPT platform and Generative AI tools, defining the value proposition and adoption strategies for 10,000+ users.
• AI Literacy Architecture: Designed a modular AI training framework to transition the workforce from legacy manual workflows to AI-assisted processes.
• Executive Storylining: Developed strategic narratives for the CIO and Board to secure buy-in for AI investments, translating technical model performance into business-value summaries.
• PMO Infrastructure: Built the end-to-end PMO infrastructure using Jira, Confluence, and Azure Boards to track transformation progress and cross-entity dependencies.

• As a freelancer, I help companies build and use online marketing and analytics strategically.

• Together, we develop a sustainable strategy to reach your target audience, use data sensibly and in compliance with data protection, and set up your website optimally.

• I rely on close, long-term collaboration – transparent, pragmatic, and without unnecessary jargon.

• My goal is to make your company strong digitally and give you the tools to make informed decisions.

• I work at a senior level in my role.

• Skills:

• Digital (Web) Analytics

• Marketing Technology

• Web Data Protection (GDPR & TDDDSG)

• Cookies & Cookie Banners

• Data Strategy

• Google Analytics

• Google Tag Manager

• Google Ads

• Digital Project Management

As a bridge between Legal, IT, and Marketing, my responsibilities include conducting technical due diligence, documentation, and designing privacy-compliant IT functions across multiple B2P Telefónica Germany brands as part of the RAITT digitalization program. Focused on aligning web and app services with GDPR, TDDDG, and Privacy by Design & Default principles.

Core responsibilities included analysing and visualising data flows across customer journeys, validating tracking and martech integrations, and supporting IT teams in designing privacy-compliant digital architectures. Delivered documentation for internal legal assessments and maintained OneTrust governance and cookie-banner accuracy.

Services and technologies involved:

• Identity & Authentication: CIAM (OAuth2, OIDC), login and session handling, customer account services
• Analytics & Measurement: Google Analytics (GA4), Google Tag Manager (Server-side Tagging & Data Stream Design), event tracking and tagging
• Advertising & Attribution: Google Ads, Google DoubleClick / Campaign Manager, Meta Pixel, affiliate partner integrations
• Experience & Personalisation: Adobe Experience Manager (AEM), Adobe Target, Adobe Experience Platform (AEP), Adobe Edge Network
• Security & Delivery: Cloudflare (CDN), PayPal FraudNet
• Compliance & Governance: OneTrust CMP, consent categories, cookie governance, TDDDG-compliant banner logic
• General web/app services: partner APIs, data transfers, tracking schemas, consent-dependent data activation

• Topics: Business Analysis, Data Privacy, Data Management, Stakeholder Management, Conceptualization
• This project focuses on developing and implementing a strategic approach for data deletion in SAP systems. The goal is to identify the relevant data and structures during system migration to ensure both data privacy and IT system efficiency. At the same time, downtime should be minimized and regulatory requirements met.
• Development of a comprehensive approach for data deletion in SAP systems, considering data privacy and business requirements.
• Ensuring efficient and structured data transfer to the new system.
• Optimizing system efficiency and reducing downtimes during migration.
• Creating functional and technical concepts to ensure compliant and sustainable data management.
• Topic preparation: Detailed study of the "data deletion" area to lay the foundation for a structured data migration.
• Definition of project structure: Setting roles, interfaces and the project's organizational structure.
• Regulatory requirements: Analysis of data privacy regulations and business requirements to define deletion criteria.
• Approach: Developing possible scenarios and methods for data cleansing and deletion.
• Deletion concepts: Creating functional and technical deletion concepts that structure the implementation and provide clear guidelines.
• Setting deletion criteria: Defining which data and structures to delete or transfer.
• Responsibilities: Clarifying responsibilities within the project team and among stakeholders.
• Analysis of ongoing activities: Identifying and collecting existing activities in the "data deletion" area.
• Effort, cost and timeline planning: Creating estimates for resources, effort and budget.
• Implementation initiatives: Developing and executing concrete measures to apply the defined deletion strategies.
• IT system efficiency: Analyzing the existing IT infrastructure to identify optimization potential for data deletion and transfer.
• Technology trends: Evaluating new technologies and tools that can support the data cleansing process.
• Cost-benefit analysis: Assessing the financial impact of data cleansing and the introduction of new solution approaches.
• Risk management: Identifying potential risks during implementation and developing appropriate mitigation measures.
• This project lays the foundation for a sustainable and compliant data transfer to a new SAP system. With a clear approach to data deletion, it meets data privacy requirements, reduces downtimes and increases the efficiency of the new system. The results and recommendations will help companies develop a future-proof data strategy that meets legal and business needs.

• Creating AI governance, especially including the works council
• Drafting the AI framework works agreement, MS Copilot works agreement, and AI testing schemes

• Creating documentation to meet legal requirements for deleting personal data
• Creating practical process descriptions
• Implementing legal deletion requirements in coordination with IT and business units

• Worked in the IT infrastructure of the Deloitte team.
• Planned assignment as service catalog manager at an insurance company in Hanover.

• Development of a tailored action plan based on TISAX requirements
• Support during the implementation of security measures
• Ongoing advice on creating and maintaining an ISMS
• Implementation of Intervalid as a workflow solution for certification, audits & ISMS maintenance
• Preparation for certification

• Project management and product owner for ERP migration to Odoo
• Designed a central single sign-on system (AWS Cognito) for all digital portals
• Coordinated complex system integrations (SAP, payment providers) with technical and business stakeholders
• Budget responsibility and resource management