You will get a comprehensive GDPR-compliant Personal Data Mapping
Top Rated
Top Rated
Project details
Creating a GDPR-compliant Personal Data Mapping is a crucial step in understanding how your business processes personal data. I will conduct a detailed audit to gather information on every data processing activity within your organization. This audit will map where and how personal data is processed. I will also provide a questionnaire to cross-verify and fill in any missing details.
During the audit and through the questionnaire, I will gather the key details required by GDPR Article 30, such as:
The identity and contact details of the data controller (and representative, if applicable)
The purposes of processing
Categories of data subjects and personal data
Recipients of personal data, including any third countries or international organizations
Transfers of personal data and safeguards in place
Storage periods or retention criteria
Security measures applied to protect data
By covering all aspects of your data processing activities, this mapping ensures full compliance with GDPR, increases transparency, and mitigates legal risks. It will enhance trust with your customers and show your commitment to data protection.
During the audit and through the questionnaire, I will gather the key details required by GDPR Article 30, such as:
The identity and contact details of the data controller (and representative, if applicable)
The purposes of processing
Categories of data subjects and personal data
Recipients of personal data, including any third countries or international organizations
Transfers of personal data and safeguards in place
Storage periods or retention criteria
Security measures applied to protect data
By covering all aspects of your data processing activities, this mapping ensures full compliance with GDPR, increases transparency, and mitigates legal risks. It will enhance trust with your customers and show your commitment to data protection.
Field of Law
InternationalTarget Country
WorldwideLanguage
EnglishService Type
Legal Assistance, Legal Writing, Documentation Review, Regulation & ComplianceWhat's included $200
These options are included with the project scope.
$200
- Delivery Time 5 days
46 reviews
(46)
(0)
(0)
(0)
(0)
This project doesn't have any reviews.
AW
Andrew W.
Apr 25, 2026
GDPR and ePrivacy Advice
Working with Christian was the best experience I have had here on Upwork. I reached out to see if he could help me with a specific topic, hoping to have a call, he went ahead without us having a contract and gave me to the point, solid answers on the same day, I was seriously impressed.
DH
Danielle H.
Jan 27, 2026
Cookie Policy Statement Review
Great to work with!
JM
Jeffrey M.
Dec 4, 2025
GDPR , ePrivacy and Cybersecurity
Chris’s work in identifying the missing GDPR components on our website was exceptionally thorough. He provided a clear, well-organized checklist for each GDPR category, complete with actionable notes on what is needed to achieve compliance. He also included the specific GDPR legal references, which will be very helpful if I need to cite the regulations directly. Throughout our time working together, he communicated clearly and consistently, and he wrapped up the project with a well-summarized final report.
NA
Nasib A.
Jul 7, 2025
Need for GDPR Expert with capability to attest GDPR compliance report (CIPP/E or CPA certified)
Christian has been a delight to work with. His proactiveness, level of knowledge, and ownership towards the project were nothing short of spectacular, and I am glad that we collaborated. He helped us navigate through the complexities of GDPR with his established process and communication, resulting in our compliance.
I look forward to working with him again and would highly recommend him!
I look forward to working with him again and would highly recommend him!
CN
Cecilia N.
May 16, 2025
Investigation of cookies and other website technologies
Christian knew exactly what I was looking for and delivered. Christian really is that unicorn one only hopes to find, which is a rare combination of engineering and privacy skills as well as well-structured results. I highly recommend working with him.
About Christian
GDPR consultant, DPO, Ethical Hacker .
100%
Job Success
Riedseltz, France - 9:57 pm local time
I am an experienced GDPR Data Protection Officer, previously registered with the ICO in the UK and the CNIL in France. My expertise spans GDPR and E-privacy regulations, supplemented by a comprehensive understanding of various international privacy laws. As a consultant specializing in GDPR and web security, I am an active member of both the IAPP and AFCDP, prominent associations in GDPR and Privacy Law. My network includes connections with regulatory bodies like the ICO and CNIL, and I am fluent in French, German, Alsatian, and English.
Throughout my professional journey, I have served a diverse clientele across the globe, including Europe, the UK, Asia, the USA, Australia, and Canada, spanning various industries such as SMEs, large multinational corporations, and NGOs. My sectoral experience is broad, covering SAAS, food delivery, technology, and more.
For insights into my work and client feedback, please refer to my Upwork profile, which features ratings and reviews. Additionally, I run a personal blog where I share knowledge on GDPR and cybersecurity topics.
I specialize in ensuring GDPR and E-privacy compliance, alongside cybersecurity consulting, which is integral to GDPR compliance. My resources on privacy laws are extensive and global in scope. My services focus on:
Evaluating and updating privacy and cookie policies for GDPR adherence, based on specific GDPR articles.
Performing thorough website audits, reporting on compliance status, and recommending enhancements for better adherence.
Advising on the development of GDPR and E-privacy compliant strategies for websites or applications.
Providing chat-based support, with optional documentation creation.
Drafting essential GDPR documentation, including privacy policies, data processing agreements, standard contractual clauses, and comprehensive procedures and records for GDPR compliance, such as for data breaches or data subject access requests.
It's important to note that website compliance alone does not equate to full GDPR compliance, as there are broader considerations to be addressed.
I also offer a complimentary guide titled "GDPR-What.pdf," which outlines essential steps towards achieving GDPR compliance.
Warm regards,
Christian HEINTZ
Steps for completing your project
After purchasing the project, send requirements so Christian can start the project.
Delivery time starts when Christian receives requirements from you.
Christian works on your project following the steps below.
Revisions may occur after the delivery date.
Respond to the questionnaire , and provide full user access to website/app
To gather all necessary information, I need full access to all parts of the website/app, just like a regular user or customer. This includes creating an account, logging in, and using the account to experience all relevant data processing activities