Looking for: German IT / Data-Protection Lawyer — SaaS App + Website (Launch Compliance)

We are a German-registered company launching app, a SaaS product available as a mobile app (iOS & Android) and a web application. It is a workspace for social-media content teams — creators, agencies, freelancers, and their clients — used to preview and plan upcoming posts, collaborate with role-based permissions, review and approve content, share files, manage a content calendar, view social-account insights, and generate AI-assisted captions. It includes invite-only in-app messaging. Key facts a lawyer will need: • Users: both B2B (agencies/businesses) and individual creators (B2C / consumers). • Data: account data, user-generated content, our customers’ clients’ personal data (we likely act as a processor), usage analytics, and content processed by an AI service for caption generation. • Monetisation: auto-renewing subscriptions (Free / paid tiers) sold via Apple/Google in-app billing and a web checkout. • Distribution: Apple App Store, Google Play, and our website. • The app does not publish to social platforms; connected accounts are read-only for insights. We have prepared a detailed internal compliance brief that we will share with the selected lawyer. What we need you to do A. Draft these documents (German, ideally with English versions), ready to publish 1. Privacy Policy / Datenschutzerklärung (GDPR Art. 13/14) — covering the app and the website. 2. Terms & Conditions / AGB — including consumer terms, subscription terms, and an acceptable-use / zero-tolerance clause for user content. 3. Impressum (§ 5 DDG) — for the app and the website. 4. EULA (end-user licence agreement). 5. Data Processing Agreement / Auftragsverarbeitungsvertrag (AVV) (Art. 28 GDPR) — for our business customers whose clients’ personal data is stored in the product. 6. Cookie / tracking consent setup and text (§ 25 TDDDG) for the website. 7. Subscription, withdrawal (Widerruf) and cancellation terms, including the § 312k BGB cancellation-button requirement. 8. Accessibility statement — if applicable (see assessment below). 9. A German-law usage-rights agreement (Nutzungsrechtsübertragung) for my app — transferring all exclusive, transferable, unrestricted usage rights in the code, designs and assets (work already done and ongoing) to my company, plus source-code handover, open-source disclosure, confidentiality and an originality warranty. Ready to sign. 10. trademark guidance for registering “Kreators Lab” (EUIPO / DPMA), or a referral. B. Provide these assessments and written guidance • Confirm our controller vs. processor role for the client personal data our customers store, and set up the matching AVV and sub-processor handling. • International data transfers: review our hosting, AI, analytics, and payment providers; advise on Standard Contractual Clauses and a transfer-impact assessment where needed. • AI feature: confirm the lawful basis and draft the consent wording for sending user/client content to an AI service. • BFSG / European Accessibility Act: assess whether the product is in scope and whether the micro-enterprise exemption applies to us; if in scope, advise on WCAG 2.1 AA / EN 301 549 obligations and the accessibility statement. • Data Protection Officer (DSB): assess whether one is mandatory for us. • DSA / DDG: assess any content-moderation or complaint obligations triggered by our invite-only messaging feature. • Consumer-law allocation: clarify which obligations sit with Apple/Google (as merchant of record for in-app billing) versus with us (for the web checkout). • Minors: advise on age threshold/consent (GDPR Art. 8) and handling if any users may be minors. What we will provide • A product overview, demo, and screenshots. • A list of the personal data we process and why. • A list of our processors (hosting, AI, analytics, payment) and their locations. • Company registration details and target markets. • Our technical implementation plan (so consent flows and disclosures can be built correctly). We will also need a final review of the implemented consent and acceptance flows (signup acceptance, AI consent, cookie banner, cancellation) before we go live. Please include: • A short note on your relevant experience (SaaS / apps / data protection), and whether you are a Fachanwalt. • Your proposed approach and which of the items above you can cover. • Your fee structure — a fixed-fee package for the document set is preferred; otherwise an hourly rate with an estimate. • Estimated timeline and current availability. • Anonymised examples or references if possible. Thank you!