Kulitz & Twelmeier

What Kulitz & Twelmeier does

Kulitz & Twelmeier GmbH, operating commercially as KT-Datenschutz, is a German limited liability company founded in 2017 and headquartered in Ulm. The firm provides external data protection officer (Datenschutzbeauftragter) services, GDPR and BDSG compliance consulting, data protection impact assessments (DSFA), records of processing activities (Verarbeitungsverzeichnis), data processing agreements (AVV), information security consulting, and employee training. Its core technical asset is KTDS-Manager, a proprietary data protection management system (DSMS) accessible at dsms.kt-datenschutz.de that lets clients document processing activities, manage AVVs, run risk assessments, and operate a PDCA improvement cycle. The team combines certified DPOs, qualified lawyers (Rechtsanwälte), and IT security experts, and holds memberships in the BvD and GDD professional associations.

The company serves a diversified base of German SMEs (Mittelstand) in manufacturing, retail, and professional services, plus larger Konzerne, e-commerce platforms, staffing firms, and IT startups. Services are delivered both digitally and on-site from four German offices (Ulm, Munich, Berlin, Düsseldorf), with international data transfer work extending the effective reach to clients with cross-border operations. The business model is built primarily on monthly flat-rate retainer agreements (monatliche Pauschalen) for outsourced DPO engagements, supplemented by project-based consulting, tailored training programs (including AI-competency training co-developed with Digi Professionals GmbH under EU AI Act Article 4), and ombudsperson services for HinSchG whistleblower compliance. Demand generation relies on content marketing (regulatory blog, LinkedIn, XING), a free initial consultation (kostenlose Erstberatung), and cross-referrals from the related IT-Kanzlei Twelmeier law firm and BvD/GDD networks. No outside funding, M&A activity, or disclosed financials are present in the source material.

Name

Kulitz & Twelmeier

Legal name

Kulitz & Twelmeier GmbH

Website

https://kt-datenschutz.de

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

Kulitz & Twelmeier is a German legal and consulting firm providing external data protection officer services, GDPR compliance, and information security advisory to SMEs, enterprises, and e-commerce clients across Germany via its proprietary KTDS-Manager platform and offices in Ulm, Munich, Berlin, and Düsseldorf.

Ownership category

akta.pro rank

Product category

Data Protection & Compliance Services

SIC

Services-Legal Services (8111)

akta.pro industry

PRIMARYHDADAFAH

Privacy Management (Consent, DSAR, RoPA)

Hardware, Technology & Telecom/Cybersecurity/Data Security & Privacy (DLP, Encryption, Key Mgmt)

SECONDARYHDAEADAG

Data Privacy, Consent & Compliance Management

Hardware, Technology & Telecom/Enterprise Platforms & Databases/Master Data Management (MDM) & Data Governance Platforms

Keywords

• Data protection services
• GDPR compliance consulting
• External data protection officer
• Information security consulting
• Data protection management

Headquarters

HQ city

Berlin

HQ country

Germany

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure, Others

Revenue model

1. External Data Protection Officer Services: Provision of certified external data protection officers to companies, billed via monthly retainer agreements (monatliche Pauschalen). Services include compliance advisory, GDPR implementation, and ongoing monitoring of data processing activities.
2. Data Protection Consulting: Advisory services for data protection management, GDPR compliance, data protection impact assessments (DSFA), and information security. Provided as part of retainer agreements or standalone consulting engagements.
3. Data Protection Training / Schulungen: Employee workshops and training sessions on data protection topics, including specialized training for HR, marketing, IT, and controlling departments, as well as AI-competency training (EU AI Act compliance). Delivered in partnership with Digi Professionals GmbH.
4. Ombudsperson Services (HinSchG): Provision of qualified ombudsperson services for internal reporting channels as required by the German Whistleblower Protection Act (Hinweisgeberschutzgesetz / HinSchG). Part of broader compliance service offerings.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels4 records

Core offering

Kulitz & Twelmeier GmbH, operating as KT-Datenschutz, provides external data protection officer (Datenschutzbeauftragter) services, GDPR/BDSG compliance consulting, and data protection management to German companies ranging from start-ups to publicly listed corporations. The firm deploys certified lawyers and IT security experts on monthly flat-rate retainer agreements and uses its proprietary KTDS Manager platform to document and manage clients' data protection processes in a PDCA cycle.

Product overview

Kulitz & Twelmeier GmbH operates under the brand KT-Datenschutz and offers a comprehensive portfolio of data protection and information security services centered around its proprietary KTDS Manager platform. The core offering consists of external data protection officers (Externe Datenschutzbeauftragte) combined with consulting, management, and training services. The KTDS Manager serves as the central data protection management system (DSMS) for clients, enabling sustainable documentation of data protection processes. Supplementary services include data protection impact assessments (DSFA), processing activity records (VVZ), data processing agreements (AVV), information security consulting, and AI policy training. The company also provides ombudsperson services for whistleblower protection under HinSchG. Services are delivered both digitally and on-site at four German locations (Ulm, Munich, Berlin, Düsseldorf), with international data transfers also managed.

Differentiator

Problem solved

Functional benefit

Brands

• KTDS Manager: Proprietary data protection management system (DSMS) platform used to manage and document data protection processes for clients in a PDCA cycle.

Products and services

• KTDS Manager Proprietary data protection management system (DSMS) used by clients to document their data protection processes, maintain records of processing activities (Verarbeitungsverzeichnis), manage data processing agreements (AVV), conduct risk assessments, and implement continuous improvement cycles. Accessible via login at dsms.kt-datenschutz.de. Delivered as part of the company's service retainer to business clients.
• Externe Datenschutzbeauftragte (External Data Protection Officer) Provision of certified external data protection officers (Datenschutzbeauftragte/r) to companies that are legally required to appoint a DPO under Art. 37 ff. DSGVO (typically companies with 20+ employees engaged in automated data processing). Billed via monthly flat-rate retainer packages (monatliche Pauschalen) tailored to client requirements. Team consists of qualified lawyers and IT security experts.
• Datenschutzberatung (Data Protection Consulting) Advisory services covering all data protection topics including creation of data protection declarations, data processing agreements, data protection impact assessments (DSFA), and records of processing activities (Verarbeitungsverzeichnis). Provided by qualified legal and technical experts as part of retainer agreements or standalone consulting engagements.
• Datenschutzmanagement (Data Protection Management) Management and construction of data protection management systems (DSMS), including initial audit, risk analysis, detailed planning of remedial measures, optimization of processes, and ongoing documentation. Implemented on the proprietary KTDS Manager platform.
• Datenschutzschulungen (Data Protection Training)
• Informationssicherheit (Information Security)
• Ombudsperson (Hinweisgeberschutzgesetz)

Named customers6 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

Feature1 record

Partnerships

Five partnerships are on record, tiered core and minor.

• Digi Professionals GmbHcoreStrategic or Co-development PartnerDeveloped in collaboration with Digi Professionals GmbH (operated via e-learning-plus.de), the company offers AI-competency training for employees in compliance with Article 4 of the EU AI Act. The training includes a learning objective check and certificate upon completion. The partnership enables KT-Datenschutz to deliver a structured, legally compliant AI training product to its client base.
• Full On GmbH & Co. KGminorOthersFull On GmbH & Co. KG (Jasperallee 35, 38102 Braunschweig, EU) provides web hosting services for kt-datenschutz.de. The company has a data processing agreement (AVV) with Full On per Art. 28 DSGVO. The website is hosted on Full On's servers within the EU.
• Exali GmbHminorOthersThe company maintains a professional liability insurance policy (Vermögensschadenshaftpflichtversicherung) with Exali GmbH (Franz-Kobinger-Str. 9, 86157 Augsburg). This insurance covers professional errors and omissions in their data protection consulting services.
• BvD (Berufsverband der Datenschutzbeauftragten Deutschlands)coreOthersThe company is a member of the Berufsverband der Datenschutzbeauftragten Deutschlands (BvD), a professional association for data protection officers in Germany. Membership provides professional credentials, network access, and industry representation.
• GDD (Gesellschaft für Datenschutz und Datensicherheit)coreOthersThe company is a member of the Gesellschaft für Datenschutz und Datensicherheit (GDD), a professional association focused on data protection and data security. Membership supports professional development, regulatory updates, and industry advocacy.

Scale indicators2 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• TrustArc: US-based privacy compliance SaaS providing consent management, DSR automation, and certification programs. Comparable to KTDS-Manager in functionality but at global enterprise scale.
• Bird & Bird LLP: International law firm with one of Europe's leading data protection practices, advising on GDPR, AI Act, and cross-border data flows. Competes for enterprise DSB mandates and complex DSFA work that KT-Datenschutz handles for Konzern clients.
• OneTrust: Global privacy management SaaS platform offering consent, DSAR, and DSB workflow tooling. Indirect competitor to KTDS-Manager; threat to KT-Datenschutz if the platform expands local-language, certified DSB service delivery in Germany.
• KPMG AG Wirtschaftsprüfungsgesellschaft: Big Four firm with a dedicated German data protection / cyber practice serving Konzern mandates. Competes for large-enterprise DSFA, GDPR program, and AI Act advisory work that overlaps KT-Datenschutz's Konzern segment.

Direct peers

• Priverion GmbH: Austrian/German SaaS-enabled external DSB provider with a proprietary platform for documentation and compliance workflows. Direct peer combining subscription retainers with a software product similar to KTDS-Manager.
• EQS Group AG: Listed German compliance SaaS company providing integrity line (whistleblower), DSB tooling, and policy management. Competes with KT-Datenschutz on both the ombudsperson/HinSchG and DSMS software fronts but at greater scale.
• DataGuard GmbH: Munich-based data protection and information security consultancy offering outsourced DSB services, compliance tooling, and ISO 27001 support. Closest direct competitor in the German external-DSB market with overlapping Mittelstand and enterprise client base.
• Datenschutz Experte (Plattform): German platform marketplace and content site that connects SMEs with external data protection officers and consulting services. Comparable GTM motion in the SME external-DSB segment where KT-Datenschutz's primary customer base resides.

Regional players

• IT-Recht Kanzlei: German law firm specializing in IT, e-commerce, and data protection law, with retainer-based DSB offerings for online retailers and platforms. Comparable in target segment to KT-Datenschutz's e-commerce / online shop customer base.

Emerging players

• Securys Ltd: UK-based data privacy and cyber-resilience consultancy offering DPO-as-a-service and GDPR advisory. Comparable services to KT-Datenschutz's external DSB and consulting retainer model, but operating in the UK regulatory market.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/DatenschutzKt

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kulitz & Twelmeier