Services ? so we can work together.

Data protection is not a legal issue and cybersecurity is not an IT issue. Both need an organization that knows what it is doing and can prove it.

Our services are geared to exactly these requirements: pragmatic and, above all, tailored to your company.

Arrange a non-binding initial meeting

After 30 minutes, you'll know if a collaboration is right.

Our core mandates

What you got from it:

You will know exactly where your company is well positioned in terms of data protection and cybersecurity, where the real risks lie, who is responsible for what in your organization and can prove this during audits.

For whom:

Companies that grow, operate internationally or finally need clear structures.

What we do:

  • Define roles, responsibilities and decision paths

  • Build processes and reporting that work in everyday life

  • Anchor governance structure for global roll-outs, new systems or after transactions

Request services
Senior Manager MarketingInternational sporting goods manufacturer
?We had customer data in many places ? but no governance that would have allowed us to centralize it securely and regulatory cleanly. Nicole changed that: clear data flows, a full risk assessment and a governance model that our marketing teams have been able to leverage on their own ever since.
Data Analyst & Global eCommerce Partner
As we expanded our Atlassian cloud infrastructure, we knew: Without a structured data protection audit, this does not work properly. Nicole has helped us clean up data transfers, sharpen authorization models and build a monitoring ? our collaboration tools have been running compliant since then and no longer interfere with operations.
Chief compliance officerInternational supplier
Nicole has analysed our existing structures and shown us where we really stand; Everything is factual and honest, and without scaremongering.
Legal Director CommercialSporting goods manufacturers
When it comes to sponsorship partnerships, the question always arises early on: Who is actually allowed to use the data of the customers and fans and who bears the responsibility for it? Nicole helped us to structure this cleanly: clear roles, watertight contractual bases and a framework that protects both our interests and those of the partner.

What you got from it:

Data protection and cybersecurity are part of your project from the beginning, as a basis that gives stability to the project.

For whom:

Program managers, CIOs, project managers for international system introductions, cloud migrations, e-commerce roll-outs.

What we do:

  • Introducing Privacy by Design and Security by Default in Project Structures

  • Clarify data transfers and governance requirements on a global scale

  • Make local requirements (e.g. market entry Africa, APAC) assessable

Request services
Global eCommerce PartnerInternational sporting goods manufacturer
An eCommerce roll-out in several African markets simultaneously, with different data protection requirements in each country. Nicole has not overwhelmed us with regulatory lists, but has developed directly actionable processes that have combined compliance and market speed.
Product ownerRetail innovation
We have introduced a training app for the retail sector and set up digital receipts in parallel. Nicole designed the consent processes, wrote the privacy statements for customers and created the internal training material. The app was directly positively received by our teams and customers, not a single critical response to data protection issues.
Head of Global eCommerceInternational sporting goods manufacturer
Thanks to Nicole and her team, we were finally able to develop and implement our own CMT and are no longer dependent on third-party providers.
Information security managerGlobal group
We had the ambition to make data protection risk assessments more efficient, but no structure for it. Nicole has set up an automated assessment system, which we now operate independently. What used to take weeks now runs in days.
Product owner
When setting up a joint webshop with a license partner, data protection was a core topic right from the start: Who operates the platform, who has access to order data, who is responsible for affected requests? Nicole has developed the entire data protection structure for the shop, from the order processing structure to the data protection declaration for end customers. The platform went live without open data protection issues."

What you got from it:

You know the privacy and cyber risks of the transaction before they become expensive and have a sound assessment for due diligence and integration.

For whom:

Corporate development, private equity, CFOs, legal departments in transactions, mergers and company sales.

What we do:

  • Privacy and Cybersecurity Due Diligence Before and During Transactions

  • Create due diligence reports and risk assessments

  • Support post-merger integration of data protection and security standards

Request services
Head of Legal / General CounseleCommerce companies
During a company spin-off with customer data transfer to the UK and Ireland, it was already clear to us that this would not be a standard project. Nicole has built the data protection framework for the entire asset deal; from the assessment of the portability of CRM data to the contractual basis. The deal went through cleanly, with no requests from regulators.
CFO / Managing Director
Building data protection from the ground up for a new company in the UK and Ireland, at the same time as the ongoing asset deal, was a real challenge. Nicole accompanied both at the same time: the due diligence side of the deal and the structural set-up on the ground. This saved us a lot internally and prevented mistakes that would have become expensive for us afterwards.
Program manager
Co-branding with a premium car manufacturer means: High expectations, complex contract structures and two large legal departments at the table. Nicole has taken over the entire data protection framework for the joint shop. Data flows between the two brands, consent management for customers and coordination with the partner data protection team. This has saved a lot of effort internally.

Supplementary mandates

For whom:

Companies that have to or want to order a:n DSB, but do not want to establish their own full-time position.

What you got from it:

You fulfill your DSB obligation with an independent authority and keep your head free internally through highly specialized DSB expertise, exactly when you need it. You focus on your core business.

We take over all legal tasks of a DPO, bring specialized expertise to your company and true complete independence ? without internal conflicts of interest.

What you got from it:

  • Legally compliant designation and complete assumption of tasks

  • Independent vision without operational blindness

  • Direct line to management and authorities

  • Continuous support without outflow of knowledge in the event of personnel changes

"Our external DSB is not only top-notch in terms of expertise. She thinks along, explains comprehensibly and is really a partner on an equal footing.
General Counsel / Chief Legal Officergroup
When it became clear to us that we needed a data protection officer at group level, the question was not whether, but how, this could work, without internal conflict of interest. The solution with 2fink solved this cleanly: independent perspective and great expertise"

What you got from it:

Your team gains confidence in decisions without having to get external help with every question. We support you and your team as a sparring partner, with specific questions, in building expertise or in developing best practices.

The goal is to increase competence in your organization.

What we do together:

  • Regular sparring sessions on current topics and cases

  • Support in building internal data protection and cybersecurity expertise

  • Support of decision-making processes as a critical external perspective

  • Development of best practices and internal standards

For whom:

Internal data protection officers, compliance teams, senior employees with data protection responsibilities.

IKS Manager and BR MemberGlobal automotive group
What we were missing was not another ? document, but someone with whom we can really think through data protection issues. With Nicole, there is a regular structure for the first time. Since then, we have been solving more internally and need fewer external voting rounds."
Request additional mandate

Entry level offer: GDPR Quick Check for Coaches

You are a self-employed:r coach, solo self-employed:r or run a micro-enterprise and want to know whether you have the most important basics in the field of data protection under control?

Flat rate: 325 ? net* (plus VAT)

We will go through your current processing, review your privacy policy, your most important tools and service providers and show you what is really necessary and what you can safely omit. In the package you will receive a 30-minute online video meeting, a written summary of the results and the next steps.
Book Quick-Check

Not sure which building block suits you?

In the non-binding initial consultation, we will find out together. Not a sales pitch. No pitch. Just an honest assessment of whether and how we can help you.

Arrange a non-binding initial meeting