Wie ist die Rechtslage ein Jahr nach dem Schrems II-Urteil des EuGH?
Janina Winz, LL.M.
Certified Information Privacy Professional Europe (CIPP/E)
Janina advises medium-sized and large enterprises, start-ups and public authorities on all matters of data protection law as well as legal issues relating to digitalization, artificial intelligence and IT security. Her areas of advisory focus include the implementation of the GDPR, the establishment of data protection management systems, supporting technology-based projects and data protection audits.
Her expertise extends to contract drafting in technology and data protection law, data protection support for outsourcing projects, employee data protection, advisory services in connection with compliance investigations and the development of internal company policies. She represents clients in supervisory authority proceedings and technology- and data-related disputes.
Janina holds a Master of Laws (LL.M.) from the University of California, Berkeley, with specializations in Law & Technology and AI Law & Regulation, and is certified as a Certified Information Privacy Professional Europe (CIPP/E).
Recent work
- Ongoing data protection advisory services for a leading European real estate service provider, including the establishment of a data protection management system, implementation of data protection requirements across all business units and centralization of corporate functions
- Ongoing advisory services for major German commercial airports on all data protection law matters
- Advising companies in the healthcare and medical sectors, including matters relating to the handling of sensitive data and contract drafting
- Developing and customizing internal data protection and AI policies for medium-sized and large enterprises
- Supporting and representing companies in supervisory authority proceedings
- Advising on AI projects, including contract drafting, works council co-determination matters, copyright issues and providing AI training
- Representing clients in technology- and data-related disputes
- Providing training and workshops for managing directors, executives and employees
- Advisory services for numerous medium-sized and large companies on all employee data protection matters
Curriculum vitae
- Study of Law at Julius Maximilian University of Würzburg and Universitat de Barcelona, 2003 to 2009
- European supplementary studies with degree as European Legal Expert (Univ. Würzburg), 2003 to 2009
- Research Associate at Kapellmann, 2010 to 2015
- Legal clerkship at the Higher Regional Court Düsseldorf, 2013 to 2015, with placements including at Kapellmann and the Federal Commissioner for Data Protection and Freedom of Information
- Attorney-at-Law at Kapellmann since 2015
- Lecturer for Business Creation and Management at HSD Düsseldorf University of Applied Sciences, Faculty of Architecture & Design, 2019 to 2023
- Executive Master of Laws (LL.M.) at the University of California, Berkeley, School of Law, 2025
Further qualifications and memberships
- Member of the German Association for Data Protection and Data Security (GDD)
- Member of the International Association of Privacy Professionals (IAPP)
- Certified Information Privacy Professional Europe (CIPP/E) by the International Association of Privacy Professionals (IAPP)
- LL.M. Executive Track AI Law and Regulation Certificate, UC Berkeley Center for Law & Technology (BCLT), 2025
- LL.M. Executive Track Law & Technology Certificate, UC Berkeley Center for Law & Technology (BCLT), 2025
- Supplementary studies with degree as European Lawyer (University of Würzburg)
Practice groups
Expertise
- Data protection law
- Corporate law/M&A
- Corporate compliance
Publications
Winz, Schreckgespenst Datenschutz, DAB 04/2018, S. 44-45
Winz, Schreckgespenst Datenschutz, Deutsches Architektenblatt, online veröffentlicht am 03. März 2018 (zum Artikel)
Events
Competencies: Data protection law
Organizer: Kapellmann und Partner Rechtsanwälte mbB
Address: #Online
Am 25. Mai feiert die DS-GVO ihr dreijähriges Jubiläum seit ihrer Geltung. Gleichwohl sorgt sie bei vielen Verbänden nach wie vor für große Verunsicherung und Unmut. Der pandemiebedingte „Digitalisierungsschub“ verschärft die Datenschutzdebatte zusätzlich. Doch was ist bloßer Mythos und was gehört zum datenschutzrechtlichen Pflichtprogramm eines Verbandes? Was sind die wesentlichen Fallstricke in der täglichen Verbandstätigkeit und wie lassen sie sich vermeiden? Diese und andere Fragen möchten wir anhand von Beispielen aus der Praxis beantworten.
Competencies: Data protection law
Address: #Online
- Haftungsfallen und praktische Tipps
Competencies: Data protection law
Organizer: Kapellmann und Partner Rechtsanwälte mbB
Address: #Online