+49 40 257 660 933
+49 151 5225 6290
annika.schneider@clarius.legal
Our Data Protection Experts advise and support Companies and Municipalities
Continuous data protection advice from a Data Protection Expert gives you peace of mind in the face of constantly changing legal conditions.
We provide an external Data Protection Officer who advises you tailored to the needs of your Company.
Data protection vulnerabilities in your company – we help you eliminate them with a data protection audit
We offer you support with recurring tasks in the field of data protection.
With our team of TÜV®-certified lawyers and project-experienced attorneys, we ensure compliance with both existing and new regulations.
The CLARIUS.LEGAL Data Protection Experts give you peace of mind
When the GDPR was introduced in 2018, data protection regulations were standardized throughout the European Union. However, this does not answer all questions regarding data protection. Additionally, the ePrivacy Regulation and the ECJ’s decision on the Privacy Shield have made data protection requirements even more incomprehensible. Therefore, companies often times do not know how to navigate the complex landscape of these regulations. Benefit from the know-how of a reliable and efficient Legal Service Provider: CLARIUS.LEGAL
External Data Protection Officer or Data Protection Consultant Your contact person for everything data protection
With our experienced Data Protection Experts we are supporting your company. You have access to a contact person supporting you in data protection matters and ensuring GDPR compliance at all times.
An Overview: Our services in data protection
Your external Data Protection Officer by CLARIUS.LEGAL What an external Data Protection Officer can help you with
Contact person for data protection supervision
Forwarding incoming requests to your company
Annual reports
TÜV®-certified
The details And Data Protection Officer as a Service
CONTINUED
PRIVACY ADVICE
- General support in data protection matters that arise in your everyday business
- Data protection consulting when introducing new processes in your company (if necessary, carrying out a data protection impact assessment in accordance with Art. 35 GDPR)
- Reviewing or composing privacy policies for websites
- Reviewing or composing data processing contracts in accordance with Art. 28 III GDPR and Consent agreements in accordance with Art. 7 GDPR
Appointment of an
external
data protection officer (DSB) in accordance with
Art. 37 GDPR
- Appointment with the competent state authority
- Point of contact for the data protection supervision and responsible for receiving and sending incoming inquiries to your company
- Annual report and annual update call included
GAP ANALYSIS
- One-time as-is analysis of the data protection level and comparison with the target level of data protection
- Identification of potential risks and deficits with regard to the GDPR, German Federal Data Protection Act or other data protection standards and regulations
- Conceptualizing a catalogue of different data protection measures
- Creating a Data Protection Management System: „Plan –Do –Check –Act“
- Support with implementing new measures
- Data protection focused analysis of contracts
GDPR EU Representative in accordance with
Art. 27 I GDPR
- Point of contact for supervisory authorities and affected parties as representatives of companies that do not have an establishment in the EU but offer goods or services in the EU
- Handling requests for data processing for our customer
Record of processing activities (Creation and maintenance) in accordance with Art. 30 GDPR
- Creation or analysis of existing directories and review of GDPR compliance
- Adaptations and additions, if necessary
- Continuous Support
Technical and organizational measures (TOMs) in accordance with Art. 32 GDPR
- Data protection audit of current security standards and advice based on findings
MANAGEMENT AND REPORTING of data breaches
- Support in dealing with data breaches
- Creation of a contingency plan and support with notifications to supervisory authorities in accordance with Art. 33 GDPR
Internal
Data Protection
- Online data protection training - we help you to comply with the GDPR and the German Federal Data Protection Act
- Educational material for employees and management (with a special focus on new regulations under the GDPR)
- Creation of internal data protection guidelines and directives (e.g. instructions regarding password security, private internet use, handling of data, etc.)
Data Protection Officer as a serviceCLARIUS.LEGAL helps you stay up to date on everything data protection
Data protection in practiceUse Cases
COMMERCIAL EMPLOYEE (F/M/D) WITH A FOCUS ON CONTROLLING AND FINANCIAL ACCOUNTING
COMMERCIAL EMPLOYEE (F/M/D)WITH A FOCUS ON CONTROLLING AND FINANCIAL ACCOUNTING
Starting
now
Full-time or Part-time
possible
On site in Hamburg
Apply
now!
For the next possible date, we are looking for a (n)COMMERCIAL EMPLOYEE (F/M/D) WITH A FOCUS ON CONTROLLING AND FINANCIAL ACCOUNTING
Do you fancy a new challenge with prospects? Do you throw yourself into your tasks with enthusiasm and organisational skills and demonstrate your eye for detail? Welcome to CLARIUS.LEGAL!
Because our idea is to do everything differently right from the start – with flexible working conditions, an option for remote work and flat hierarchies. Based on our three areas of business Legal Outsourcing, Data Protection and Legal Tech, this approach helped us to establish ourselves as a high quality legal service provider. And we keep growing. That’s where you come in!
Become part of our team and let’s create the future of digital legal services together!
RESPONSIBILITIES
Financial accounting
Independent accounting and booking of all financial transactions
Preparation of monthly, quarterly and annual financial statements together with our tax office
Ensure compliance with accounting standards
Controlling
Preparation of financial analyses and reports to support management
Monitoring of budgets and identification of deviations
Develop recommendations to improve financial performance
Liquidity planning
Preparation and updating of liquidity forecasts
Monitoring the cash flow position and requirements
Identification of measures to optimise liquidity
Digitalisation of accounting processes
Evaluation and implementation of digital tools and systems to improve efficiency
Experience with ZOHO an advantage
Automation of accounting processes and procedures
Training of employees (f/m/d) in the use of digital accounting tools
YOUR PROFILE
Completed commercial training or a comparable qualification
Proven experience in financial accounting and controlling
Expertise in liquidity planning and management
Knowledge in the digitalisation of accounting processes and the use of relevant software
Strong analytical skills and a strong affinity for numbers
Ability to work in a team and independently
High accuracy and attention to detail
WHAT WE HAVE TO OFFER
Ideally on site at our headquarters in Hamburg, you can expect versatile tasks in a rapidly developing business field and an equally forward-looking company. We strive for an agile, happy Startup atmosphere, where everybody can contribute their ideas and move projects forward, because great ideas and proactive employees are what makes us stand out. And we can’t do that without you.
And next to our most important and most valuable benefit – a wonderful, collegial team – you can expect:
Flexible working hours
Full-time and Part-time opportunities
Further training
A buddy-program among colleagues
Regular reviews on development and training opportunities
Regular team events
Joint team calls with all colleagues, including those working remotely (f/m/d)
Flat hierarchies and and open-minded colleagues
Sponsorship of various health and wellbeing programs, such as JobRad
Free drinks and snacks in our head office in Hamburg
INTERESTED?We want to get to know you!
Your contact person:
Please send us your application documents via the contact form linked below or by e-mail to bewerbung@clarius.legal and, if possible, state your salary expectations and earliest starting date.
Luise Adler
Attorney at law, Authorized Signatory, Chief Operating Officer
Luise Adler
Attorney at law, Authorized Signatory, Chief Operating Officer
Luise Adler
Attorney at law, Authorized Signatory, Chief Operating Officer
Challenge to legal tech providers: CLARIUS.LEGAL gets new shareholder structure and focuses on growth.
Challenge to legal tech providers: CLARIUS.LEGAL gets new shareholder structure and focuses on growth.
September 21, 2023
CLARIUS.LEGAL Rechtsanwaltsaktiengesellschaft is on course for growth. The legal service provider offers legal process outsourcing and legal tech services to companies. Up to now, the joint stock company has been active mainly in Germany and was part of the Schalast Group. This is now about to change.
The founder and long-standing director of the company, lawyer Dr. Georg Berger (54), is once again taking over the majority of CLARIUS.LEGAL Rechtsanwaltsaktiengesellschaft. Following a merger with an acquisition company, Berger, together with Dr. Johannes von Bismarck (57) and Nils Oberschelp (53), will in future hold approximately 90% of the shares in the company. Schalast & Partner Rechtsanwälte mbB will remain with a minority share, Prof. Dr. Christoph Schalast will remain a member of the supervisory board. With this step, CLARIUS.LEGAL Rechtsanwaltsaktiengesellschaft is deliberately opening itself up to other law firms for cooperation.
With this approach CLARIUS.LEGAL wants to grow nationally and internationally. A first cooperation was launched in Austria on September 1.
“We want CLARIUS.LEGAL to become the number one independent legal service provider in Europe. To this end, we will invest extensively in our product development and make even more intensive use of our strength in combining legal and technical expertise. While this is problematic in a traditional law firm structure, the new shareholder structure provides us with precisely this opportunity.” Berger justifies the decision.
Dr. Ernst Georg Berger
(Picture: Anna Dittrich)
Nils Oberschelp
(Picture: Anna Dittrich)
In many cases, legal tech has not yet gained widespread acceptance in legal departments because in-house counsel often do not have the time to use legal tech in the right way. But only then does technology add value. “Companies are looking for solutions to problems, not just more tech applications. The marriage of technology and law is something that only technology-savvy law firms can offer. We want to use this strength to avoid leaving the legal market to the legal tech providers.” says Berger.
Future independence is also crucial for the high-revenue area of legal process outsourcing. CLARIUS.LEGAL does not see itself as a competitor for traditional law firms. Berger emphasises that “CLARIUS.LEGAL is something like an external inhouse law firm with a tech department. We work like legal departments. We sometimes work on mandates together with traditional law firms, but we also work for law firms, for example on interim projects. It helps that we are no longer connected to a specific law firm.
About the new shareholders:
Johannes von Bismarck is a lawyer in Berlin and sits on various advisory boards of media and technology companies. He has 25 years of transaction and investment experience in telecommunications, media & technology. He is a qualified banker and holds a PhD in International Comparative Law (Humboldt University, Berlin and UCT, Cape Town).
Nils Oberschelp is an attorney and has more than twenty-five years of management experience in the media and digital business. He has held management positions at Gruner + Jahr in Hamburg and Vienna, DPV Deutscher Pressevertrieb GmbH, Motor Presse Stuttgart and Delius Klasing Verlag, among others.
Dr. Johannes von Bismarck
Do you have questions about CLARIUS.LEGAL tools and services?We are happy to support you!
Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
Back to the overview of all News & Insights
Any questions?Send us your inquiry.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Nils Oberschelp becomes Co-CEO of CLARIUS.LEGAL Rechtsanwalts-AG
Nils Oberschelp becomes Co-CEOof CLARIUS.LEGAL Rechtsanwaltsaktiengesellschaft
Nils Oberschelp becomes Co-CEOof CLARIUS.LEGAL Rechtsanwalts-AG
September 15, 2023
Nils Oberschelp will be appointed to the Executive Board of CLARIUS.LEGAL Rechtsanwaltsaktiengesellschaft as of October 1, 2023. In his role as Co-CEO, alongside founder and CEO Dr. Ernst Georg Berger, he will be primarily responsible for legal tech, as well as sales, marketing, IT and finance.
Dr. Ernst Georg Berger and Nils Oberschelp (f.l.t.r., Picture: Anna Dittrich)
Nils Oberschelp is an attorney at law and has more than twenty-five years of management experience in the media and digital business.
After holding various management positions at Gruner + Jahr in Hamburg and Vienna, he was CEO of DPV Deutscher Pressevertrieb GmbH for several years before becoming CEO of Motor Presse Stuttgart. Following this, Oberschelp was most recently CEO of Delius Klasing Verlag. He is also Chairman of the Supervisory Board of the strategy consultancy ADVYCE & PERLITZ.
“I am very much looking forward to helping shape the future of CLARIUS.LEGAL. The legal industry is becoming increasingly technology driven and our team at CLARIUS.LEGAL has developed innovative and pragmatic solutions to help our clients meet the ever growing demands. Together with the team, we would like to continuously expand this successful path in the coming years.” says Oberschelp.
“I am particularly looking forward to working with Nils Oberschelp, as we complement each other perfectly. His experience in transforming traditional business models into a digital future is exactly what we need in the legal sector.” adds Berger.
Nils Oberschelp (Picture: Anna Dittrich)
Dr. Ernst Georg Berger (Picture: Anna Dittrich)
Do you have questions about CLARIUS.LEGAL tools and services?We are happy to support you!
Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
Back to the overview of all News & Insights
Any questions?Send us your inquiry.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
CLARIUS.LEGAL AND LABACK LAW DECIDE ON INTERNATIONAL COOPERATION
CLARIUS.LEGAL AND LABACK LAWDECIDE ON INTERNATIONAL COOPERATION
The Hamburg-based legal service provider CLARIUS.LEGAL Rechtsanwaltsaktiengesellschaft and the Viennese law firm Laback Law will be going their separate ways in the future. As part of a strategic alliance, the two law firms will work together and start their cooperation in the area of legal tech with a whistleblower system.
Both cooperation partners are expanding their network into the respective neighbouring countries and extending their international range of legal services for clients with growth ambitions beyond the German and Austrian borders. Internationally active companies, which are already clients of CLARIUS.LEGAL and Rechtsanwaltskanzlei Laback Law, also benefit from the expansion, which now enables even more uncomplicated local advice for activities in the neighbouring country. In addition to external support for legal and compliance departments, the two law firms are placing a clear focus on the topic of legal tech.
“Legal tech is emulating in the legal sector what has been common practice in other organisational areas for years. Especially in recent years, numerous companies have begun to take a serious interest in legal tech, but are often still deterred by high initial investments and implementation costs“, comments Dr Ernst Georg Berger, attorney-at-law and CEO of CLARIUS.LEGAL. “This is where we come in with low-threshold, needs-oriented solutions and combine them with our legal consulting expertise“, Berger continues.
“Legal and compliance departments, like many other areas, suffer from a lack of staff and have to deal with numerous new and old compliance obligations. It is only logical to master these with the support of technical solutions. In this respect, I see the development of legal tech as unstoppable“, Petra Laback, attorney-at-law and founder of Laback Law, is convinced.
Petra Laback, attorney-at-law and founder of Laback Law
Dr Ernst Georg Berger, attorney-at-law and CEO and founder of CLARIUS.LEGAL
Whistleblower Platform of CLARIUS.LEGAL and Laback Law
The first product that CLARIUS.LEGAL and Laback Law will jointly distribute in the future is a whistleblower platform that enables companies to fulfil their obligations under the EU Whistleblower Directive and the resulting national laws. The tool was developed by CLARIUS.LEGAL in 2021 and has been continuously optimised since then. As part of the cooperation, the two law firms have developed a white-label solution and also adapted the platform to Austrian requirements. The whistleblower platform is available as a tool-only variant or in combination with ombudsman services by a law firm. The secure, outsourced online platform enables one & two-way communication with the whistleblower and the management of the tips.
Do you have questions about the Whistleblower Platform?We are happy to support you!
Contact us by e-mail at whistleblower@clarius.legal or by phone at +49 40 257 660 900.
Back to the overview of all News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
THE USE OF ARTIFICIAL INTELLIGENCE IN COMPANIES: ADVANTAGES THAT DO NOT POSE A THREAT TO DATA PROTECTION?
THE USE OF ARTIFICIAL INTELLIGENCE IN COMPANIES:
ADVANTAGES THAT DO NOT POSE A THREAT
TO DATA PROTECTION?
The use of artificial intelligence in companies can significantly and sustainably improve production performance – but it also poses serious risks.
Artificial intelligence” (AI) is technology that enables computer systems to perform tasks that actually require human intelligence. AI is already being used in many industries to automatically process labour-intensive and time-consuming repetitive tasks that require many manual steps with the help of intelligent software solutions. For example, AI can be used on websites as a chatbot by asking it questions via a chat, to which it then provides answers specific to the question, thus ensuring contact with customers around the clock. This not only contributes to customer satisfaction, but also significantly reduces the workload on human workers.
But it is not only “question and answer” systems that are AI-enabled: By setting up automatic, digital inboxes, for example, AI can also facilitate the retrieval and assignment of customer messages, calculate deadlines or create customer profiles.
Clearly enormous potential. It is obviously advisable to identify internal company work structures and their potential for improvement in order to then make them more automated and effective by applying industry-specific tools with AI. Productivity and customer satisfaction could be sustainably increased.
So is AI an option with unlimited possibilities and no drawbacks? Not quite.
Despite all the application euphoria, we must not overlook the fact that the use of AI also creates new problem areas. In particular, problems arise with regard to the protection of internal company data. If personal and confidential data is entered into the AI tool when using it to write a client letter, for example, other users will also be able to access this data in the future. Cases of such unintentional data disclosure by a company’s employees are unfortunately not uncommon and, among other things, entail the risk of fines due to violations of the regulations of the GDPR as well as damage to the company’s image.
Companies must effectively counter these dangers. If the use of AI is educated and attentive to the dangers, a company could reap great benefits from the use of these systems in the future. Suitable measures for this include training employees on the (data-)secure handling of AI, as well as setting up an internal AI channel that prevents confidential data from being disclosed unnoticed. AI guidelines that provide guidance on possible questions to ask the AI are also indispensable.
We are happy to support you in the creation of appropriate guidelines.Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
BACK TO THE OVERVIEW OF ALL News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
DATA PROTECTION REVIEW OF NOTICE SYSTEMS
DATA PROTECTION REVIEW OF NOTICE SYSTEMSIndispensable! But why actually and what does such an examination include?
The Whistleblower Protection Act (HinSchG), which came into force at the beginning of July, obliges numerous companies to set up an internal whistleblower system. And as is usual with new obligations, the market already offers numerous offers with which companies can fulfill the requirements of the law. When making their selection, companies look at price-performance, user-friendliness, compatibility with existing systems, and much more. Whistleblower systems process personal data and should therefore be subjected to a comprehensive data protection review before they are introduced.
The protection of personal data is of utmost importance in today’s digital world. Once a whistleblower system is in place, it collects, processes and stores personal data. To ensure the confidentiality and integrity of this sensitive information, companies must ensure that they comply with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
It cannot be automatically assumed that this legal certainty exists for all software providers, as it naturally also depends on the individual requirements of the companies. To avoid the sometimes severe penalties for data protection violations from the outset, it is advisable to get your data protection officer on board directly during the introduction and to have the systems available for selection checked.
A data protection audit consists of several steps. After performing a threshold analysis, we look to see whether a data protection impact assessment from the software manufacturer is already available, and if not, whether one is even necessary in your case, or whether a comprehensive audit report alone should be prepared. If a privacy impact assessment is deemed necessary or an existing privacy impact assessment is cross-checked, these results are also addressed in an audit report.
The threshold analysis
In the threshold analysis, it is first checked whether the form of data processing is fundamentally subject to a high risk, Art 35 GDPR. At its core, the threshold analysis is a risk analysis that determines whether a data protection impact assessment (DPA) is necessary. The potential risk is determined by assessing the probability of occurrence and determining the severity of the potential harm of an event. When implementing a new technology in the form of a whistleblower platform in a company, it can always be assumed that whistleblowing employees would, for example, have to reckon with severe reprisals, possibly even threatening their existence, if the wrong people became aware of the contents of their tips because the newly implemented technology is incomplete, for example because it does not include a sufficient rights-role concept or technical and organizational measures are not implemented properly.
In the event of such a high risk, a DSFA must always be performed.
The data protection impact assessment
As soon as software is expected to pose a high risk to the rights and freedoms of natural persons, companies must conduct a data processing risk assessment when introducing it. The DSFA is used to identify and assess data protection risks and to develop suitable measures to mitigate the risk. It is usually prepared by the data protection officer and, accordingly, is often part of the data protection audit. If a data protection impact assessment already exists for the selected whistleblower system on the part of the software service provider, there is of course no need to prepare a second one. In this case, however, the auditor should review it in detail and include any necessary additions or changes.
The audit report
The audit report summarizes the data protection audit for your company and shows which measures have already been implemented, are still being implemented and where there is still a need for improvement. In the following, we present a few of the most important points covered by our audit reports.
- Legal compliance
As a matter of principle, we check whether all relevant legal requirements are met. On the one hand, this concerns all relevant standards of the DSGVO, the BDSG and regularly the Telecommunications Telemedia Data Protection Act (TTDSG), but on the other hand also the requirements of the HinSchG. The paragraphs dealing with the processing of personal data, the confidentiality requirement and the tasks of internal and external reporting offices are particularly relevant. - Rights-role concept
Highly relevant and sensitive data can be received in the whistleblowing system, so it is essential to use a well thought-out rights-role concept to prevent the recipient of the whistleblowing from easily facing a conflict of interest. It goes without saying that it is unfortunate, for example, if an employee reports on grievances in the department and his department head is responsible for receiving the tip. Optimally, this problem can be solved by technical measures such as encryption mechanisms, pseudonymization and by an external ombudsman office. - Response mechanisms
Particularly in the area of data privacy, there are tight deadlines that companies absolutely must meet. For example, once a company becomes aware of a data leak internally, it has 72 hours under Art. 33 GDPR to report the data breach or mishap to the relevant supervisory authority and must even notify the data subject of the breach of their rights without delay, Art 34 GDPR. This time has passed faster than many a company would like. In order to be able to act as quickly and efficiently as possible in the event of a breach, it is essential to implement the response mechanisms in a technically clean manner from the outset and to clearly define which person has which responsibilities. - Order processing contract
As always when data is processed, a contract processing agreement (CPC) is mandatory. The software solution provider must ensure that all data accessed by its software is protected in a GDPR-compliant manner. This includes, for example, that a secure firewall exists or that the software provider does not knowingly share data. As a rule, these requirements are self-evident for most companies, but it is still important to contractually fix self-evident aspects. Whether the GCU meets the data protection requirements for processing is also checked and explained in the audit report. - Implementation of technical and organizational measures (TOMs)
Of course, not only the software provider, but also the company itself must implement appropriate technical and organizational measures (TOMs) in accordance with Art. 32 GDPR. These are, for example, access restrictions or the use of secure passwords. These measures are standard in most companies and should not pose a challenge.
And then?
Once the data protection audit has been completed, the ideal result is “Overall, this is an appropriate implementation of the requirements under EU Directive 2019/1937, the DSGVO, the BDSG and the Whistleblower Protection Act in terms of data protection. From a data protection perspective, this is the starting signal for the rollout of the selected solution. It becomes more difficult when the auditor raises concerns. If possible, companies should take immediate action to remedy the noted grievances. This could involve adjusting the system architecture, implementing additional security measures or revising data protection policies and procedures. Particular attention should be paid to technical and organizational measures. Working with data protection experts can help companies assess data protection concerns and minimize risks without losing sight of the cost-benefit ratio.
To prevent the data protection review from being carried out too late and leading to undesirable results, the data protection officer or consultant should ideally be involved at the beginning of the selection process. This security is provided by our whistleblower system, which was developed by attorneys and lawyers with data protection expertise in close collaboration with IT specialists.
If you are interested, please feel free to book a non-binding demo appointment. But even if you have already established or selected a whistleblower system, we are there for you and can take over the data protection audit.
WOULD YOU LIKE A NON-BINDING CONSULTATION?We are happy to support you!
Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
BACK TO THE OVERVIEW OF ALL News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
LIST OF DPF-CERTIFIED COMPANIES IS PUBLISHED
LIST OF DPF-CERTIFIED COMPANIES IS PUBLISHED
On July 10, 2023, the new adequacy decision between the European Union and the United States, known as the Data Privacy Framework (DPF), entered into force. This new framework agreement represents a significant step forward in transatlantic data protection rules by allowing EU companies to transfer personal data to data importers in the United States. U.S. companies can now certify by demonstrating compliance with DPF principles. A transfer of personal data to the listed companies can henceforth take place without further approvals or additional measures such as SCC and BCR.
The official list of DPF certified companies is now published and can be viewed here: https://www.dataprivacyframework.gov/s/participant-search. Certified companies include major technology companies such as Google and Microsoft.
This has a direct impact on your company. If you pass on personal data to certified companies, it is mandatory to update the data protection notices stored on your websites. The data transfer is now based on the DPF and no longer on the EU Standard Contractual Clauses (SCC).
Do you need assistance with the necessary adaptation of your data protection notices?We are happy to support you!
Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
BACK TO THE OVERVIEW OF ALL News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
ANONYMOUS REPORTING CHANNELS – NOT ONLY BENEFICIAL FOR WHISTLEBLOWERS
ANONYMOUS REPORTING CHANNELSNOT ONLY BENEFICIAL FOR WHISTLEBLOWERS
The Whistleblower Act in Germany aims to protect whistleblowers and obliges companies to set up reporting channels. Whistleblowers should be encouraged to report wrongdoing and protected from reprisals. In contrast to the EU Directive, German law does not require companies to set up anonymous reporting channels. Nevertheless, we have decided to allow anonymous tips in our solution, which nevertheless allow us to enter into a dialog with the whistleblower. Why? Not only whistleblowers, but also companies benefit from anonymous reporting channels.
An anonymous reporting system allows employees to report concerns confidentially and protect their identity. This creates a climate of trust, as employees are more likely to report grievances if they do not have to fear that their identity will be revealed. Implementing an anonymous reporting system sends the signal that companies are promoting a culture of integrity and accountability. This strengthens trust in the company and promotes a positive workplace culture.
Anonymous hotlines also offer advantages in terms of early detection and internal resolution of problems. Employees are encouraged to communicate their concerns internally and to fully disclose misconduct. This allows companies to identify problems early and take proactive measures to resolve them and mitigate risks. The risk of public disclosures or whistleblower activities involving the disclosure of information to external parties is minimized. Companies can protect their reputation and good name. And – thinking entirely in economic terms – avoiding public disclosures and protecting a company’s reputation can avoid significant costs for legal disputes, reputation management and image restoration. An anonymous reporting system thus helps to ensure the success of the company. Take advantage of an anonymous reporting system – for the benefit of the whistleblower and for the benefit of your company.
Are you wondering how to set up an anonymous reporting office and implement the law in the most meaningful way for your company?
We are happy to support you! Contact us by e-mail at clarius@clarius.legal
or by phone under +49 40 257 660 900.
BACK TO THE OVERVIEW OF ALL News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
DATA PRIVACY FRAMEWORK (DPF): NEW ADEQUACY DECISION FOR SECURE DATA TRANSFERS BETWEEN THE EU AND THE USA
DATA PRIVACY FRAMEWORK (DPF)NEW ADEQUACY DECISION FOR SECURE DATA TRANSFER BETWEEN THE EU AND THE USA
The European Commission adopted an adequacy decision for the EU-U.S. data protection framework on 10/07/2023 in the third attempt. This means that EU companies can now transfer personal data to data importers in the U.S. who certify compliance with the DPF principles, without the need for further approvals or additional measures (e.g., SCC and BCR).
Background
If the Commission decides that a third country (territory or sector) has an adequate level of protection, then the third country transfer is readily permitted.
For the U.S., the Commission issued two adequacy decisions prior to the entry into force of the GDPR: the Safe Harbor decision of June 26, 2000, which was invalidated by the ECJ on October 6, 2015 (Schrems I), and the Privacy Shield of 12.06.2016, which was also declared invalid by the ECJ on 16.07.2020 (Schrems II).
In both cases, the ECJ found that surveillance by U.S. authorities of EU citizens whose personal data had been transferred to the U.S. was not compatible with EU law. Another problem, he said, is the lack of effective law enforcement mechanisms for EU citizens in the United States.
Since July 2020, companies have had to transfer data to the U.S. subject to appropriate safeguards.
The Data Privacy Framework (DPF)
On May 23, 2022, the European Commission and the United States announced that they had agreed in principle on a new Transatlantic Privacy Framework and had also ensured that the concerns expressed by the ECJ in Schrems II would be addressed.
Yesterday, the adequacy decision finally went into effect.
Effects for companies
- This is still a self-certification mechanism: data importers in the US must self-certify their compliance with the DPF principles.
- It remains unclear what will happen to companies already certified under the Privacy Shield – whether new certification will be required or whether recertification will be possible.
- Necessary information is provided on https://www.dataprivacyframework.gov/s/. Currently, the website is still under construction and visitors are redirected to the Privacy Shield website.
- Data exporters in the EU must first ensure that the data recipient in the U.S. is already DPF-certified before any data transfer based on the new adequacy decision takes place.
- A data transfer impact assessment will no longer be required for third country transfers based on the DPF. However, if the data importer is not DPF-certified, then conducting a data transfer impact assessment remains necessary.
- Data protection declarations must be updated.
Do you have questions regarding data protection?We are happy to support you!
Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
Back to the overview of all News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
RECORDING VIDEO CONFERENCES – A PRACTICAL FUNCTION, BUT ALSO GDPR-COMPLIANT?
RECORDING VIDEO CONFERENCES –
A PRACTICAL FUNCTION,
BUT ALSO GDPR-COMPLIANT?
For many people, they are now part of everyday business life: video conferencing. A practical feature here is the recording function. In this way, what has been discussed can be looked up without any problems or those who are not present can be picked up. As with everything to do with the processing of personal data and metadata, however, some regulations of the GDPR must be observed. But what are they exactly?
Purpose of data processing
Before any recording takes place, the purpose and nature of the data processing must be clearly defined. It should be noted that the purpose of the recording is not necessarily the same as the purpose of the video conference. Each processing must be examined separately.
Legal basis of data processing
In data protection law, the legal principle of “prohibition with reservation of permission” applies: processing of personal data is only lawful if a legal basis according to Art. 6 GDPR legitimizes this processing.
Although processing on the basis of a legitimate interest can be considered to legitimize recording, this is negated by a balancing of interests: recording is in fact a major intrusion into the privacy of all parties involved. For this reason, obtaining consent is the appropriate legal basis for legitimization.
In addition, Section 26 of the BDSG must be observed in employment relationships, which imposes special requirements for the processing of employee data.
Consent
The General Data Protection Regulation sets high requirements for the effectiveness of consent:
- The declaration of consent should be formulated clearly and understandably.
- The data subjects must be informed about who is the data controller, what data is processed for what purpose and that there is a right of withdrawal.
- Consent must be given voluntarily. This means that the data subject must have a real choice regarding the recording. In professional contexts, this voluntariness may be doubtful due to the dependency of the employed person (cf. Section 26 (2) sentence 1 BDSG). Therefore, it is important to offer alternatives to the participants if they do not agree with the recording.
- The GDPR does not provide for a specific form for consent. However, the controller is obliged to be able to prove that effective consent has been obtained.
Obligation to inform
Participants shall be informed about the data processing and about their data subject rights. The BDSG stipulates that employees must be informed in text form about the purpose of the data processing and about their right of revocation (cf. Section 26 (2) sentence 4 BDSG).
What else must the responsible person pay attention to?
One difficulty of using videoconferencing services is data transfers to the US. Therefore, the GDPR requirements for the transfer of personal data to third countries must also be met.
In order to correctly inform about all processing operations, the event “video conference” has to be included in the list of processing activities according to Art. 30 GDPR. In addition, it is an obligation of data controllers to check whether a data protection impact assessment needs to be carried out in accordance with Art. 35 GDPR.
A note at the end
One point that almost always applies when processing data is the principle of data minimization. Only topics that are necessary for the conference should be discussed within the call.
Do you have questions regarding data protection?We are happy to support you!
Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
Back to the overview of all News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
THE GENERAL DATA PROTECTION REGULATION IS 5 YEARS OLD!
ADVANTAGES AND RISKS OF LEGAL TECH: Georg Berger as a guest on the podcast “Fachfragen” by Fachmedien Otto Schmidt
Are you familiar with the podcast “Fachfragen” by Fachmedien Otto Schmidt?
There, experts provide answers and suggestions for action on current hot topics in business, law and management – simply, quickly and briefly.
But how does data protection become relevant in day to day business?
The latest episode is about legal tech, its benefits and risks for companies. Our CEO Georg Berger took questions from presenter Kerstin Pferdmenges and together they produced an entertaining episode.
Have a listen 👉https://der-betrieb.de/meldungen/legal-tech/
Do you have any questions about legal tech?We are happy to support you!
Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
BACK TO THE OVERVIEW OF ALL News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
LIABILITY FOR THE ACCIDENTAL LOSS OR DETERIORATION OF GOODS IN E-COMMERCE
LIABILITY FOR THE ACCIDENTAL LOSS OR DETERIORATION OF GOODS IN E-COMMERCEDoes anything change if the customer issues
a so-called deposit permit?
Numerous delivery services now allow customers to specify a drop-off location where the supplier will deposit ordered goods, rather than having to accept goods themselves. If everything works well, this is a practical solution for both the delivery service and the customer, but it gets tricky when the supplier says the package will be left at the drop-off location, but the customer can’t find it there. In such cases, customers usually contact the seller whose goods have allegedly not arrived. And then? Is the seller responsible for ensuring that the goods reach the hands of the customer? Has the responsibility passed to the delivery service when the parcel is abandoned, or is it even the customer’s responsibility if he or she has given the delivery service permission to drop off the parcel?
As is often the case, the question cannot be answered in the same way for all cases. In principle, the transfer of risk in the case of sale by delivery to a place other than the place of performance is initially regulated in § 447 BGB. There it says in para. 1. „If, at the Buyer’s request, the Seller ships the sold item to a place other than the place of performance, the risk shall pass to the Buyer as soon as the Seller has delivered the item to the forwarding agent, the carrier or any other person or institution designated to carry out the shipment.” Thus, for the time being, a parking permit is irrelevant to this case. In principle, the risk is already transferred to the buyer when the item is handed over to the delivery service.
The situation is different, however, if the buyer – as is relatively common in e-commerce – is a so-called consumer (§ 13 BGB). This is because if a consumer is involved, the provision of Section 474 of the German Civil Code (BGB) applies to the purchase of consumer goods, and thus also the provision of Section 475 para. 2 BGB: “Section 447(1) shall apply with the proviso that the risk of accidental loss and accidental deterioration shall pass to the buyer only if the buyer has entrusted the forwarding agent, the carrier or the person or institution otherwise appointed to carry out the shipment and the contractor has not previously designated such person or institution to the buyer.“The case described here should not be the case in most online purchases: Not the buyer orders the delivery service, but the seller. The risk of accidental loss or deterioration shall thus initially be borne by the seller in the case of the sale of consumer goods, namely until the buyer has actually taken possession of the goods.
Nevertheless, the question remains as to what effect the granting of a parking permit by the buyer to the delivery service has on the transfer of risk and thus, if applicable, on the purchase contract. It should be noted here that the seller will usually have no influence on such parking permits, nor will he even be aware of them – at least as long as there are no problems with delivery. Such a parking permit, against the background of the relativity of the debt relationship, has no effect on the purchase contract as such, therefore the seller is affected by the resulting problems. The Seller may refuse further obligation to indemnify in the case of a delivery permit only if he can show and prove that he handed over the goods to the delivery service, the Customer gave a delivery permit to the delivery service and the goods were also deposited at the place of delivery without any external damage. This is often associated with a high level of effort. This is because, although the statutory provisions may result in the risk of loss having passed to the buyer at the time of deposit at the desired location, if the buyer claims that no deposit was made at the desired location, the seller must prove otherwise and remains liable under the purchase contract – either for redelivery or reimbursement of the purchase price. The seller is dependent on the cooperation of the delivery service to provide evidence. Only this person can provide information about the parking permit and prove that delivery was made at the desired location. If this is not the case, the seller could only assert recourse against the delivery service in the internal relationship. But here, too, the seller would have to be able to demonstrate and prove that the delivery service was responsible for the damage. The evidence situation is thus extremely unfavorable for the seller and, in the worst case, leads to conflicts with the buyer and also with the delivery service, which e-commerce companies should always be aware of and which makes proper claims management indispensable.
We are happy to support you! Contact us by e-mail at clarius@clarius.legal
or by phone under +49 40 257 660 900.
BACK TO THE OVERVIEW OF ALL News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
ADVANTAGES AND RISKS OF LEGAL TECH: GEORG BERGER AS A GUEST ON THE PODCAST "FACHFRAGEN" BY FACHMEDIEN OTTO SCHMIDT
ADVANTAGES AND RISKS OF LEGAL TECH: Georg Berger as a guest on the podcast “Fachfragen” by Fachmedien Otto Schmidt
Are you familiar with the podcast “Fachfragen” by Fachmedien Otto Schmidt?
There, experts provide answers and suggestions for action on current hot topics in business, law and management – simply, quickly and briefly.
But how does data protection become relevant in day to day business?
The latest episode is about legal tech, its benefits and risks for companies. Our CEO Georg Berger took questions from presenter Kerstin Pferdmenges and together they produced an entertaining episode.
Have a listen 👉https://der-betrieb.de/meldungen/legal-tech/
Do you have any questions about legal tech?We are happy to support you!
Contact us by e-mail at clarius@clarius.legal or by phone at +49 40 257 660 900.
BACK TO THE OVERVIEW OF ALL News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
HOLISTIC LEGAL TECH CONCEPT FOR SUPPLY CHAIN COMPLIANCE RECEIVES AWARD
HOLISTIC LEGAL TECH CONCEPT FOR SUPPLY CHAIN COMPLIANCE RECEIVES AWARD
Federal government assumes costs of € 109,000,000 for the implementation for companies. CLARIUS.LEGAL wins Best of Legal in the Compliance category with a legal tech platform that cuts costs.
Companies are burdened with more and more legal compliance, reporting and monitoring obligations. Consequently, against the background of increasing requirements, legal tech solutions that combine legal know-how and technical efficiency are coming into focus. Thus, the topic of legal tech also received special attention at this year’s Best of Legal Awards ceremony on 29 November 2022. The winner of the Compliance category, CLARIUS.LEGAL Rechtsanwaltsaktiengesellschaft, convinced with a holistic advisory approach and a targeted legal tech solution to comply with the current Supply Chain Act.
The recently passed “Supply Chain Sourcing Obligations Act” is another stumbling block for companies that want to be compliant despite ongoing workloads. “Legal and compliance departments currently have a massive problem – although they do not lack legal know-how, they generally lack capacities and interface competence between law and technology in order to cope with the many new and old compliance obligations,” reports Dr Ernst Georg Berger, lawyer and CEO of CLARIUS.LEGAL.
With the current Supply Chain Act, the federal government assumes annual costs of around 43.47 million euros and a one-off expense of around 109.67 million euros for the economy. (see printed matter 19/28649) The next compliance obligation will be a regulation on whistleblower protection in the following year at the latest, which in effect creates an obligation to introduce a whistleblower tool.
This is where CLARIUS.LEGAL comes in and offers a comprehensive solution for fulfilling legal obligations. In doing so, the companies benefit from the combination of legal services and technical expertise.
The specially developed ComplyChain platform offers a precisely tailored tool for data collection, automated data evaluation and AI-based monitoring of data and its update from publicly available sources. “Especially this monitoring of public information solved by means of artificial intelligence is an element that should not be underestimated and offers users enormous advantages apart from optimised data management,” says Berger. This is because the Supply Chain Act not only requires auditing of suppliers, but also ongoing auditing. It is also essential to keep an eye on press reports in order to be informed about publicly reported abuses.
With the ComplyChain platform, CLARIUS.LEGAL has created the core of a holistic solution for supply chain compliance. The legal service provider complements this tool optionally with further legal tech solutions such as a whistleblower platform or a contract generator. Last but not least, however, the concept benefits above all from the legal competences of the Rechtsanwaltsaktiengesellschaft. “CLARIUS.LEGAL customers are not confronted with a tool that only takes care of the technical side, but leaves the user alone with the content. Instead, they receive support throughout the entire process, from data collection and analysis to advice on supplier contract adjustments – entirely in line with the customer’s needs,” assures Berger.
We are happy to support you! Contact us by e-mail atclarius@clarius.legal
or by phone under +49 40 257 660 900.
BACK TO THE OVERVIEW OF ALL News & Insights
Any questions?Please feel free to send us your request.
Your contact person:
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Annika Schneider
Marketing Manager
Customer service when it comes to legal issues
- Claims Management • Legal Process Outsourcing
Customer service when it comes to legal issueswhen legal issues are in the foreground
Communication on warranty issues and representation in courtbold
If customers assert warranty claims against our client, a globally active electronics group, we take over customer care. To do so, we are fully integrated in all relevant internal processes. We achieve even more efficiency by means of our automated workflows. If customer service cases escalate, we represent our client in court.
Handling data breaches
- Legal Process Outsourcing • Data Protection
Handling data breachesWe’ll take care of it
We support an internationally operating telecommunications company in the area of data protection. We assess possible data protection breaches. We review relevant cases and use the insights we gain to effectively communicate with data protection authorities and the German Federal Network Agency. Throughout the process, we are fully integrated into internal processes.
To busy for routine tasks — Let CLARIUS.LEGAL take over
- Legal Outsourcing • Contract Review
To busy for routine tasks — Let CLARIUS.LEGAL take overWe support your legal department by taking over everyday tasks
A large international investment advisor was looking for a legal service provider that could help their legal department with routine tasks, so that their own staff could focus more on the company’s strategic alignment. CLARIUS.LEGAL relieves this client by reviewing all types of contracts (e.g. data processing contracts, non-disclosure agreements or purchasing contracts).
Data protection customer inquiries
- Legal Process Outsourcing
Data protection customer inquiries — we answer themCommunication with data protection authorities
Correspondence with data protection authorities and the German Federal Network Agency as well as answering customer inquiries related to data protection: We handle the communication for the subsidiary of a large international telecommunications company. We support customer service with inquiries regarding customer data and alleged data breaches. We gather and prioritize all relevant information and draft responses to customers and authorities.
Permanently relieve your internal legal department during company takeovers
- Contract Review • Corporate Housekeeping
Permanently relieve your internal legal department during company takeovers We review and negotiate purchase agreements
After the acquisition of a former competitor, a large international telecommunications company achieved a permanent relief of its own legal department by letting us take over reviewing and negotiating purchasing agreements.
Customer service when it comes to legal issues
- Legal Outsourcing • Claims Management
Customer service when it comes to legal issuesTaking over communication on warranty issues and representing you in court
If customers assert warranty claims against our client, we take over customer care. To do so, we are fully integrated in all relevant internal processes. We achieve even more efficiency by means of our automated workflows. If customer service cases escalate, we represent our client in court.
Data protection communication, audits, professional education
- Data Protection & Legal Tech
Data protection communication, audits, professional educationWe take over data protection workloads and help educate on data protection
We handle requests from data subjects who assert their rights under the General Data Protection Regulation against our client, a globally active electronics group. In the process, we gather all relevant information and take over communication. In addition, we support data protection projects, e.g. with our vendor audit platform for the auditing of providers from a data protection point of view or the training of employees on data protection-related topics.
Authority inquiries under control
- Legal Process Outsourcing
Authority inquiries under control CLARIUS.LEGAL takes over communication with Authorities
For our client, a globally active electronics group, we answer enquiries from the authorities. Record, coordinate, transmit: CLARIUS.LEGAL takes care of the entire communication with investigative authorities for the globally operating group. Our service goes even further: we prepare reports for the compliance department at international level on the nature, scope and content of such requests from authorities. In addition, we are entrusted with the creation, continuous expansion and improvement of internal policies for dealing with such requests from authorities.
From large-scale data protection projects to day to day support with data protection matters
- Legal Process Outsourcing • Data Protection
From large-scale data protection projects to day to day support with data protection mattersDocumentation — Evaluation — Negotiation
An Asian manufacturer of optics, camera and reprography products trusts CLARIUS.LEGAL when it comes to guidance with large-scale data protection projects and day to day support with data protection matters. We provide the legally required documentation of data processing, data transfer, evaluation and negotiation of data processing contracts.
CLARIUS.LEGAL as your external legal department
- Legal Outsourcing • Contract Review
CLARIUS.LEGAL as your external legal departmentUse your resources for what matters to you
One of our clients provides remote workstations, managed and cloud services, data centers, business applications, security and network devices across the country. Its nearly 40 hubs are spread throughout Germany. We help this digital game changer strive by taking over all legal tasks. We pose as a central point of contact for management and advise on all legal matters, especially reviewing and revising contract drafts that are needed on a daily basis.
Legal Tech, Manpower, Know-how
- Legal Outsourcing • Whistleblower-Platform
Legal Tech, Manpower, Know-howAlways the right legal services for our clients
We provide a whistleblower platform for a provider of cloud-based telecommunications solutions. Our legal experts pose as Ombudspersons and are always available to our client. The company has also appointed us as its data protection officer.
By your side as you grow dynamically
- Legal Outsourcing • Data Protection • Claims Management • Contract Lifecycle Management • Legal Tech
By your side as you grow dynamically — with legal know-how and Legal TechWe support in key legal areas, e.g. employment law
We advise a telecommunications company that operates and expands its own broadband fibre optic network as an external legal department on integration following corporate acquisitions. We also provide support in the area of labour law in particular. We start from scratch creating all the templates that a newly structured company needs. That includes employment contracts and labor instructions or policies. In addition, we advise on legal matters concerning employee social security or transfer of business matters. We also represent the company in legal disputes and implemented a Data Protection Management System to constantly ensure compliance with data protection regulations.
Legal support beyond day to day business
- Legal Outsourcing • Contract Review • Contract Lifecycle Management • Vendor-Audit-Plattform • Legal Tech
Legal support beyond day to day businessWe keep contract templates up to date
We support the General Counsel of a large multi-national automotive company with fundamental civil, commercial and corporate law issues that go beyond day-to-day business. On of our tasks is reviewing and continuously revising contract templates. Furthermore, we created the current Code of Conduct.
Comprehensively Managed Legal Services
- Legal Outsourcing • Legal Process Outsourcing • Data Protection • Claims Management
Comprehensively Managed Legal ServicesSupport in all areas of law
We provide comprehensive legal support to a renowned US based company with over 50,000 employees operating in the automotive, transportation and energy sectors. We review, draft and negotiate contracts for the General Counsel in the economic region of Europe, Middle East and Africa (EMEA Region). We review and revise existing general terms and conditions and draft new ones, where necessary. We represent the Client in legal disputes revolving around contract and employment law. For our client, we manage multiple law firms and other external legal service providers in different jurisdictions. After supporting the client in an EMEA-wide data privacy compliance project, we now also provide services as data privacy officer for numerous legal entities of the Group and support the Group Privacy Office in the U.S. on German data privacy issues.
We replace the internal legal department
- Legal Outsourcing
We replace the internal legal departmentLegal advice in all relevant aspects of business
For an innovative service provider for cloud-based network solutions, we act as the internal German legal department. In close cooperation with the Group’s legal department, we provide legal advice in the areas of civil, corporate, labour, real estate, commercial and tax law.
Reviewing supplier contracts at short-notice, keeping contract templates up to date
- Contract Review • Legal Outsourcing • Contract Lifecycle Management
Reviewing supplier contracts at short-notice, keeping contract templates up to date Supporting an automotive manufacturer in day to day business
We support the legal department of the research and development center of an Asian automobile manufacturer in its day-to-day business. We regularly review supply contracts and non-disclosure agreements at short notice. Furthermore, we keep contract templates up to date to always include up to date jurisdiction and regulations.
From data protection documentation to contract renewals
- Contract Review • Data Protection • Contract Lifecycle Management
From data protection documentation to contract renewalsFor a DAX-listed chemical company
We prepare the legally required data protection documentation for a global market leader in the full-range chemical products sector. We negotiate and review data processing contracts and handle contract renewals under the Schrems II judgment for the DAX-listed company.
Standardize contracts
- Legal Process Outsourcing • Contract Lifecycle Management
Standardizing contracts — we handle coordination and communication Legal project management for contract standardization
We support a long-established German manufacturer of industrial technology, consumer goods and building services engineering with legal project management. In a global contract standardization project, we handle all coordination and communication with stakeholders in all relevant jurisdictions.
Our project lawyers are integrated in the legal departments of our clients to effectively support them with cases
- Legal Outsourcing • Interim Support
Our project lawyers are integrated in the legal departments of our clients to effectively support them with cases Exclusively for a multinational insurance company
Our project lawyers handle a large number of legal disputes for one of the largest primary insurers in Germany. The multinational insurance company has exclusively entrusted our lawyers with this task.
Data Protection during contract negotiations
- Legal Outsourcing • Data Protection
Data Protection during contract negotiations Data Protection for a major hospital operator
We advise one of the largest players in the German hospital market on data protection issues, e.g. contract negotiations in light of the Schrems II judgment. The client is one of the three largest private hospital operators in Germany and employs more than 45,000 people.
CLARIUS.LEGAL supports your legal department
- Legal Outsourcing • Data Protection • Claims Management
CLARIUS.LEGAL supports your legal department Contract Review — Litigation — Compliance
An automotive supplier realized that its own legal department was experiencing overload. The solution: As a legal service provider we support in-house lawyers with flexibility and as needed. CLARIUS.LEGAL is at your service right where you need it: With contract reviews, negotiations, litigation or in the areas of compliance and data protection.
CLARIUS.LEGAL as your External Legal Department
- Legal Outsourcing • Data Protection • Contract Review • Contract Lifecycle Management
CLARIUS.LEGAL as your External Legal Department Contract Management — Data Protection — Comprehensive Legal Support
A company in the electrical industry headquatered abroad was looking for a partner who could support their German business by comprehensively taking on legal tasks. CLARIUS.LEGAL provides this client with a team that now forms the in-house legal department.
Senior attorney at law (w/m/d) focus on data protection/compliance
Senior attorney / lawyer (w/m/d)focus on data protection / compliance
Starting
now
Full-time or Part-time
possible
Remote or
in our Hamburg Office
Apply
now!
For the next possible date we are looking nationwide for SENIOR ATTORNEYS / LAWYERS (F/M/D) WITH A FOCUS ON DATA PROTECTION / COMPLIANCE
Are you passionate about data protection issues and already have some experience? Do you identify with a modern corporate structure based on teamwork and a healthy work-life balance? Welcome to CLARIUS.LEGAL!
We want to do things differently right from the start – with flexible working conditions, remote work and flat hierarchies. Based on our three areas of business Legal Outsourcing, Data Protection and Legal Tech, this approach helped us to establish ourselves as a high quality legal service provider. And we keep growing. That’s where you come in!
Become part of our team and let’s create the future of digital legal services together!
RESPONSIBILITIES
Advice on data protection law
Advice in the area of compliance
Examination of facts with regard to compliance and data protection requirements
If applicable, assumption of the function of the external data protection officer
Representation of our clients in disputes in and out of court
Conducting data protection audits using our legal tech tools
Project management in the compliance and data protection area
Maintaining and expanding client contact
Carrying out training courses
Contact person (f/m/d) for the relevant supervisory authorities
YOUR PROFILE
Completed law studies or comparable degree
Bar admission
Several years of relevant professional experience
Experience in legal project management and leadership of staff (f/m/d)
Certification as a data protection officer (f/m/d) is a plus
Affinity for legal tech services
Fluent in German and English both written and spoken
Motivation, flexibility and strong teamwork and communication skills
Commitment and desire to take on responsibility
Willingness to travel and service mentality
WHAT WE HAVE TO OFFER
At CLARIUS.LEGAL, you will find diverse and multifaceted challenges in a fast-growing field of business and a future-oriented company. We strive for an agile, happy Startup atmosphere, where everybody can contribute their ideas and move projects forward, because great ideas and proactive employees are what makes us stand out. And we can’t do that without you.
And next to our most important and most valuable benefit – a wonderful, collegial team – you can expect:
Flexible working hours
Full-time and Part-time opportunities
100% remote work, hybrid model or full on-site work in the Hamburg office possible
Further training
Assumption of the lawyer’s liability insurance
Regular reviews on development opportunities
A buddy-program among colleagues
Regular team events
Flat hierarchies and and open-minded colleagues
Sponsorship of various health and wellbeing programs, such as JobRad
Free drinks and snacks in our head office in Hamburg
And more.
INTERESTED?We want to get to know you!
Your contact person:
Please send us your application documents via the contact form linked below or by e-mail to bewerbung@clarius.legal and, if possible, state your salary expectations and earliest starting date.
Luise Adler
Attorney at law, Authorized Signatory, Chief Operating Officer
Luise Adler
Attorney at law, Authorized Signatory, Chief Operating Officer
Luise Adler
Attorney at law, Authorized Signatory, Chief Operating Officer
Act now Let us advise you
Whether you are looking for an external Data Protection Officer or need advice on specific data protection matters:
We are at your service. Get in touch.
Your contact person:
Annika Schneider Marketing Manager
Annika Schneider Marketing Manager
Annika Schneider Marketing Manager