Kolja S.
German GDPR Lawyer & DPO | T&Cs, DPAs & EU AI Act for SaaS
Top Rated | 100% Job Success | German-qualified lawyer (Rechtsanwalt), admitted in Berlin Former legal tech CEO and data protection team lead, now 11 Upwork jobs for startups and SaaS companies. Kept an AI wellness marketplace outside medical device rules. Signed GDPR memo delivered in 6 days. Send me a message and I’ll record a free 5-minute video review of your privacy policy or T&Cs, showing the top issues for the German and EU market and how to fix them. I help startups and SaaS companies sell in Germany and the EU without legal headaches through GDPR compliance, contract drafting and EU AI Act advice. Whether you're entering the EU from the US, getting asked for a DPA by every new customer, or trying to work out if the AI Act applies to your product, I build T&Cs, DPAs and compliance documents that hold up under German law, not copy-paste templates. CONTRACTS THAT HOLD UP T&Cs (AGB), SaaS agreements (MSA, SLA, licensing) and DPAs drafted or reviewed under German consumer law and T&C control. For an event ticketing platform, I built a DPA every organiser accepts online with one checkbox at signup instead of signing paper. COMPLIANCE THAT SCALES WITH YOU External DPO, GDPR implementation, DPIA, ROPA, internal policies, DSARs and international transfers (SCCs, EU-US DPF, UK Addendum, TIAs). I handled a UK healthcare company’s subject access request in around 16 billed hours, delivered on time and within the statutory deadline. FULL-STACK EU DIGITAL LAW GDPR, EU AI Act, Data Act, health data and EU platform rules in one place. For an AI wellness marketplace, I drafted the platform terms, brand partner agreement and DPA, with a non-medical wellness positioning built into the contract. SOURCE-BACKED, NOT GUESSWORK Every answer points to the provision and the official source. For a legal tech SaaS, I built a German retention-period matrix covering general obligations plus 8 sectors, which the client uses directly in its product. CORE SKILLS GDPR | GDPR Compliance | DSGVO | Data Protection Officer | External DPO | Data Privacy | Privacy Policy | Data Processing Agreement (DPA) | Terms and Conditions | AGB | Terms of Service | SaaS Agreements | MSA | SLA | Contract Drafting | Contract Review | Legal Translation | Legal Localization | EU AI Act | AI Compliance | Data Act | DPIA | ROPA | DSAR | Subject Access Request | SCCs | International Data Transfers | EU-US Data Privacy Framework | Cookie Consent | Website Legal Check | Data Retention | German Law | EU Law | ISO 27001 | TISAX | Information Security | Legal Memorandum
Earnings and projects
Last 6 months ÷ 6
Last 6 months: $4k
Billed in all: $7,738$7.7k
$574 in the last 6 months
Across 12 contracts
Earnings, last 30 days
Skill rankings: Top 11% in Privacy Impact Assessment
Ranked by MRR among everyone on Upwork with the skill.
- Privacy Impact Assessment19 freelancers · 🇩🇪 #1Top 11%🇩🇪#1 of 1
- #14AI Policy55 freelancers · 🇩🇪 #1Top 25%🇩🇪#1 of 1
- #30Data Protection223 freelancers · 🇩🇪 #1Top 13%🇩🇪#1 of 4
- #31GDPR Compliance Review149 freelancers · 🇩🇪 #2Top 21%🇩🇪#2 of 4
- #49Privacy Policy181 freelancers · 🇩🇪 #1Top 27%🇩🇪#1 of 2
- #64Terms & Conditions253 freelancers · 🇩🇪 #1Top 25%🇩🇪#1 of 2
- #65Policy Writing469 freelancers · 🇩🇪 #2Top 14%🇩🇪#2 of 5
- #68Contract Translation486 freelancers · 🇩🇪 #3Top 14%🇩🇪#3 of 14