Building Antifragile Businesses Together

I serve as your external DPO, helping your organization meet its legal obligations under GDPR and other privacy laws. I monitor compliance, advise on data protection strategy, support DPIAs, liaise with regulators, and act as a contact point for data subjects.

Whether required by law or chosen voluntarily, my DPO service gives you expert guidance without the cost or conflict of appointing someone internally — ensuring your privacy program is independent, practical, and effective.

I draft clear, plain-language policies and notices — including privacy policies, terms of use, and disclaimers — tailored to your jurisdiction and business model. I help ensure compliance with legal frameworks like GDPR, CCPA, and others, and support cookie banner setup and privacy UX that meets regulatory standards while building trust with your users.

I design and implement end-to-end privacy programs tailored to your business size, industry, and regulatory environment. This includes data mapping, policy and procedure development, staff training, privacy impact assessments, vendor management, and integration with cybersecurity and compliance efforts.

The result: a practical, scalable privacy program that fits your operations and meets legal obligations under applicable laws.

I help you conduct DPIAs to identify and manage privacy risks in data processing activities — particularly those involving sensitive data, large-scale monitoring, or new technologies.

My support includes data mapping, risk evaluation, documentation, and guidance on mitigating measures — all aligned with GDPR and other applicable regulations. The result: a compliant, defensible DPIA that supports safe and lawful processing.

I assess your current privacy practices, policies, and data flows to identify gaps, risks, and compliance issues. This includes reviewing your privacy policy, cookie banners, data handling procedures, vendor agreements, and legal bases for data processing.

You get a practical report with specific recommendations to align with regulations and reduce the risk of complaints, fines, or data breaches.

I help integrate privacy into your products, services, and processes from the start — not as an afterthought. This includes advising on data minimization, default settings, user consent flows, and risk mitigation throughout the development lifecycle. The result: compliant, privacy-respecting solutions by design.

Evaluation of your cybersecurity posture aligned with NIS 2, GDPR (Art. 32), ISO 27001, SOC 2, and other applicable frameworks.
Identification of risks related to infrastructure, software vulnerabilities, vendor dependencies, and human factors.
Prioritized recommendations to address critical threats, misconfigurations, and access control weaknesses.
Gap analysis for companies preparing for certifications or client security reviews.

I support your organization in handling data subject requests under laws like GDPR and CCPA — including access, deletion, correction, and portability. I help build clear workflows, review request validity, ensure timely responses, and reduce the risk of non-compliance or disputes.

I assist in preparing for and managing communications with data protection authorities and other regulators. This includes drafting responses, coordinating documentation, and representing your position clearly and compliantly — whether during routine inquiries, audits, or investigations.

I help you respond quickly and effectively to data breaches — from initial assessment and containment to legal analysis, notification requirements, and post-incident review. I guide you through reporting obligations under laws like GDPR and support internal and external communications to minimize impact and liability.

I review your vendors’ agreements, terms of use, and privacy policies to identify risks and ensure clarity. I draft contracts for clients, contractors, and vendors — tailored to your needs and business model.

I handle negotiations on your behalf or support you directly, including strategy development, so you enter every deal prepared and protected.

Evaluation and oversight of third-party vendors to ensure they meet data protection and compliance standards. This service includes assessing privacy and security risks, reviewing contracts, and implementing controls to reduce exposure and maintain accountability across your vendor ecosystem.

I support both startups and investors through every stage of the investment process. For startups, I provide legal structuring, compliance guidance, and help prepare for funding — from pitch to due diligence.

For investors, I offer deal analysis, risk assessment, and legal support for safe, compliant investments. I assist with term sheets, shareholder agreements, and governance frameworks.

I help design and document business continuity plans that prepare your organization for unexpected disruptions — whether technical, operational, legal, or environmental.

This includes identifying critical processes, assessing risks, defining recovery strategies, and drafting clear, actionable plans. My approach ensures your team knows what to do when things go wrong — minimizing downtime, protecting data, and maintaining compliance.

I help businesses plan and manage international corporate structures — from country risk assessments to entity setup, restructuring, and legal registrations. I offer strategic tax consulting, ensure regulatory compliance, and support privacy and cybersecurity requirements.

I work with local experts, assist with relocation and cross-border employment, and draft key documents like incorporation papers, bylaws, and shareholder agreements — all tailored to your business.