What HEC Harald Eul Consulting GmbH does

HEC Harald Eul Consulting GmbH is a German professional services firm specializing in data protection and data security consulting, founded in 2003 and headquartered in Brühl, Germany. The company operates as an outsourced external data protection officer (externer Datenschutzbeauftragter) for German companies that meet the BDSG threshold of more than 19 employees using PCs or laptops, providing ongoing monthly compliance support under a retainer model. Service offerings span data protection consulting, audits, vulnerability analysis, employee training, organization development, expert opinions, and international data transfer advice, with a stated focus on practical, business-enabling compliance ("praktikabler Datenschutz mit Augenmaß"). The team of seven certified data protection officers combines legal, business-economics, and IT expertise, and the firm self-positions as one of the largest in its industry, serving clients of up to 3,500 employees across Germany.

The company is privately held by managing shareholders Harald Eul and Petra Eul-Löh, both of whom hold board seats in the leading national industry bodies — GDD (Gesellschaft für Datenschutz und Datensicherheit) and Fachverband Externe Datenschutzbeauftragte e.V. — establishing the firm as a credentialed practitioner rather than a software vendor. Revenue is generated through two streams: subscription-style monthly retainers for the outsourced DPO function and per-inquiry consulting fees (€50–€250 plus VAT) for ad-hoc advice, with both services sold via direct field sales rather than a productized platform. The go-to-market is sales-led and relationship-driven, leveraging association leadership, the ERFA-Kreis Köln practitioner circle, and a content-based website (datenschutz-help.de) for top-of-funnel lead generation. There is no proprietary technology product, no external funding, no disclosed revenue, and no international footprint beyond Germany.

Name

HEC Harald Eul Consulting GmbH

Legal name

HEC Harald Eul Consulting GmbH

Website

https://datenschutz-help.de

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

1–10 employees

Short description

HEC Harald Eul Consulting GmbH is a Brühl-based German professional services firm providing outsourced external data protection officer services, GDPR/BDSG compliance consulting, audits, and training to enterprises up to 3,500 employees across Germany, operated by a team of seven certified DPOs.

Ownership category

akta.pro rank

Headquarters

HQ city

Brühl

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Others

Revenue model

1. Consulting Fees: Per-consultation pricing for data protection advice and inquiries. Fee range based on research and processing effort required.
2. Monthly Retainer - External DPO Service: Monthly flat fee for outsourced data protection officer function, providing ongoing compliance support and monitoring for client companies.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

HEC Harald Eul Consulting GmbH delivers outsourced external data protection officer services on a monthly retainer basis for German companies, alongside advisory, audit, training, vulnerability analysis, and expert opinion services covering GDPR, BDSG, and international data transfer compliance. The firm is staffed by seven certified DPOs combining legal, business, and IT expertise, and serves clients of up to 3,500 employees across Germany.

Product overview

HEC Harald Eul Consulting GmbH is a data protection and data security consulting firm providing a comprehensive portfolio of services centered around the external data protection officer function. The core offering is the outsourcing of the data protection officer role, supplemented by consulting, audits, organization development, training, vulnerability analysis, and expert opinions. The company serves companies across Germany and operates primarily as a professional services consultancy rather than a software product company.

Differentiator

Problem solved

Functional benefit

Products and services

• External Data Protection Officer Service (Externer Datenschutzbeauftragter)

Quantifiable outcome

• Cost-effective alternative to internal DPO for part-time requirements
• +1 more outcomes

Named customers1 record

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Five partnerships are on record, tiered core and minor.

• Gesellschaft für Datenschutz und Datensicherheit e.V. (GDD)coreStrategic or Co-development PartnerManaging director Harald Eul served as Vorstandsmitglied (board member) of GDD until November 2021. GDD is the leading professional society for data protection and data security in Germany, providing practitioner resources, training, and regulatory guidance.
• Fachverband Externe Datenschutzbeauftragte e.V.coreStrategic or Co-development PartnerManaging director Petra Eul-Löh serves as Vorstandsmitglied (board member) of this professional association for external data protection officers. The association provides professional standards, networking, and representation for external DPOs.
• Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)coreTechnology or IntegrationHarald Eul is registered as anacherkannter Sachverständiger (recognized expert) for IT products (legal aspects) at ULD. This government authority for data protection provides official expert registries.
• ERFA-Kreis Köln Datenschutz (IHK/GDD)minorStrategic or Co-development PartnerPetra Eul-Löh serves as Leiterin (leader) of the Erfa-Kreis (experience exchange circle) for data protection in Cologne, organized jointly by IHK Köln and GDD. Professional community for practitioners.
• Industrie- und Handelskammer Köln (IHK Köln)minorStrategic or Co-development PartnerCo-organizer of ERFA-Kreis Köln Datenschutz together with GDD, providing regional professional development and networking for data protection practitioners.

Scale indicators3 records

Recent moves5 records

Expansion highlights3 records

Emerging players

• Securiti Inc. AI- and data-governance platform for privacy, consent, and DSR automation, increasingly used by enterprises to operationalise GDPR programs. Comparable through serving the same enterprise buyers and DPO workflows that HEC supports.
• TrustArc Inc. Privacy compliance platform offering consent management, assessments, and certification tooling. Adjacent to HEC's DPO/audit work; pressures pure-consulting DPO pricing as buyers adopt automation.
• OneTrust LLC: Privacy, security, and data governance software platform automating tasks that DPO consultancies traditionally perform manually (DSARs, consent, ROPA). An indirect competitor and potential tooling partner for HEC's enterprise clients.

Broad incumbents

• Deloitte GmbH Wirtschaftsprüfungsgesellschaft: Big-4 consultancy with a German cyber & privacy risk offering that includes DPO outsourcing and GDPR programs for large enterprises. Overlaps with HEC on enterprise retainer DPO mandates but at much larger scale and brand recognition.
• KPMG AG Wirtschaftsprüfungsgesellschaft: Big-4 advisory firm with a substantial German data protection / cyber risk practice serving enterprises. Overlaps with HEC on enterprise DPO mandates and GDPR advisory, but competes from a much broader portfolio and larger bench.
• PwC GmbH Wirtschaftsprüfungsgesellschaft: Big-4 advisory with a dedicated German privacy and data protection practice and extensive enterprise client base. Competes with HEC for large external DPO engagements while offering full-stack risk, legal, and tech services.

Direct peers

• activeMind AG: German data protection and IT compliance consultancy providing DPO outsourcing, training, and legal-tech tooling. Comparable niche, customer base, and recurring-revenue model to HEC, with a slightly stronger tech tooling angle.
• intersoft consulting services AG: German IT and data protection consultancy delivering DPO-as-a-service, GDPR audits, and ISMS consulting. Closely matches HEC in cross-functional IT/legal positioning and enterprise mid-market customer segment.
• 2B Advice GmbH: German boutique consultancy offering external data protection officer services, GDPR audits, and privacy advisory. Directly comparable to HEC in scope (DPO outsourcing, audit, advisory), customer profile (German SMEs to mid-market), and consulting-led GTM.
• ePrivacy GmbH: Munich-based data protection and ePrivacy law consultancy offering external DPO services, GDPR advisory, and legal opinions. Direct peer in regulatory niche, with a stronger legal-publication and academic footprint than HEC.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/hec-harald-eul-consulting-gmbh

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about HEC Harald Eul Consulting GmbH