Lawyers Expertise Events News Career DE

Janina Winz, LL.M.

Certified Information Privacy Professional Europe (CIPP/E)

Janina advises medium-sized and large enterprises, start-ups and public authorities on all matters of data protection law as well as legal issues relating to digitalization, artificial intelligence and IT security. Her areas of advisory focus include the implementation of the GDPR, the establishment of data protection management systems, supporting technology-based projects and data protection audits.

Her expertise extends to contract drafting in technology and data protection law, data protection support for outsourcing projects, employee data protection, advisory services in connection with compliance investigations and the development of internal company policies. She represents clients in supervisory authority proceedings and technology- and data-related disputes.

Janina holds a Master of Laws (LL.M.) from the University of California, Berkeley, with specializations in Law & Technology and AI Law & Regulation, and is certified as a Certified Information Privacy Professional Europe (CIPP/E).

Recent work

  • Ongoing data protection advisory services for a leading European real estate service provider, including the establishment of a data protection management system, implementation of data protection requirements across all business units and centralization of corporate functions
  • Ongoing advisory services for major German commercial airports on all data protection law matters
  • Advising companies in the healthcare and medical sectors, including matters relating to the handling of sensitive data and contract drafting
  • Developing and customizing internal data protection and AI policies for medium-sized and large enterprises
  • Supporting and representing companies in supervisory authority proceedings
  • Advising on AI projects, including contract drafting, works council co-determination matters, copyright issues and providing AI training
  • Representing clients in technology- and data-related disputes
  • Providing training and workshops for managing directors, executives and employees
  • Advisory services for numerous medium-sized and large companies on all employee data protection matters

 Curriculum vitae

  • Study of Law at Julius Maximilian University of Würzburg and Universitat de Barcelona, 2003 to 2009
  • European supplementary studies with degree as European Legal Expert (Univ. Würzburg), 2003 to 2009
  • Research Associate at Kapellmann, 2010 to 2015
  • Legal clerkship at the Higher Regional Court Düsseldorf, 2013 to 2015, with placements including at Kapellmann and the Federal Commissioner for Data Protection and Freedom of Information
  • Attorney-at-Law at Kapellmann since 2015
  • Lecturer for Business Creation and Management at HSD Düsseldorf University of Applied Sciences, Faculty of Architecture & Design, 2019 to 2023
  • Executive Master of Laws (LL.M.) at the University of California, Berkeley, School of Law, 2025

Further qualifications and memberships

  • Member of the German Association for Data Protection and Data Security (GDD)
  • Member of the International Association of Privacy Professionals (IAPP)
  • Certified Information Privacy Professional Europe (CIPP/E) by the International Association of Privacy Professionals (IAPP)
  • LL.M. Executive Track AI Law and Regulation Certificate, UC Berkeley Center for Law & Technology (BCLT), 2025
  • LL.M. Executive Track Law & Technology Certificate, UC Berkeley Center for Law & Technology (BCLT), 2025
  • Supplementary studies with degree as European Lawyer (University of Würzburg)

Expertise

Publications

Books and book contributions
Articles
2013

Winz/Scheef, Die Rügepflicht im Anlagenbau, BauR 2013, 655-665

Miscellaneous
2018

Winz, Schreckgespenst Datenschutz, DAB 04/2018, S. 44-45

Winz, Schreckgespenst Datenschutz, Deutsches Architektenblatt, online veröffentlicht am 03. März 2018 (zum Artikel)

Events

26.10.2021
Kapellmann Aktuell | Datenübermittlungen in die USA & Co.

Wie ist die Rechtslage ein Jahr nach dem Schrems II-Urteil des EuGH?

Competencies: Data protection law

Organizer: Kapellmann und Partner Rechtsanwälte mbB

Address: #Online

30.09.2021
Monatsbriefing - Recht im Verband | Datenschutzrecht für Verbände – die häufigsten Fehler und wie man sie vermeiden kann

Am 25. Mai feiert die DS-GVO ihr dreijähriges Jubiläum seit ihrer Geltung. Gleichwohl sorgt sie bei vielen Verbänden nach wie vor für große Verunsicherung und Unmut. Der pandemiebedingte „Digitalisierungsschub“ verschärft die Datenschutzdebatte zusätzlich. Doch was ist bloßer Mythos und was gehört zum datenschutzrechtlichen Pflichtprogramm eines Verbandes? Was sind die wesentlichen Fallstricke in der täglichen Verbandstätigkeit und wie lassen sie sich vermeiden? Diese und andere Fragen möchten wir anhand von Beispielen aus der Praxis beantworten.

Competencies: Data protection law

Address: #Online

07.07.2021
Kapellmann Aktuell | Umgang mit Datenschutzanfragen

- Haftungsfallen und praktische Tipps

Competencies: Data protection law

Organizer: Kapellmann und Partner Rechtsanwälte mbB

Address: #Online

Show all events

Lawyers Expertise Events News Offices Career Publications About Kapellmann Sustainability