IDR - Weller

What IDR - Weller does

IDR - Weller (legal entity: Institut für Datenschutzrecht) is a German sole proprietorship founded in 2010 by Rechtsanwalt Sascha Weller and headquartered at Ziegelbräustraße 7, Ingolstadt, Germany. The firm provides external data protection officer (DPO) services and specialized data-protection-law consulting to companies operating in the European Union. Its core service places a certified attorney as the externally appointed DPO for clients, covering the implementation of BDSG and DSGVO compliance measures, drafting of privacy policies and processing-activity records, employee training, data-protection status analyses, communication with supervisory authorities, and data-breach notification handling. Adjacent offerings include a Whistleblower System for compliance with the Hinweisgeberschutzgesetz and mobile/home-office data protection guidance.

The business runs on a flat-rate monthly subscription model priced at approximately EUR 100 per month for small trades firms (~10 employees) and EUR 230 per month for medium-sized enterprises with complex service structures, marketed as a lower-cost alternative to hiring an internal DPO (cited internal-DPO cost benchmark of ~EUR 43,550/year full-time). Go-to-market is sales-led: the firm acquires clients via its content-marketing website (idr-datenschutz.de), an online data-protection-check questionnaire, a free initial consultation, a newsletter, and Google Ads with lead form extensions, supported by direct phone/email engagement. The customer base is horizontal and SMB-oriented, targeting any EU company with 20+ staff engaged in automated processing of personal data, with no named enterprise logos disclosed.

The firm is privately held, founder-owned, with no external funding, no subsidiaries, and no M&A activity. Headcount is in the 11-50 band. The practice carries no proprietary technology platform, no AI/ML capabilities, and no disclosed revenue; competitive positioning rests on the founder's 15+ years of specialized DPO experience and his certified attorney credential.

Name

IDR - Weller

Legal name

IDR-Weller, Institut für Datenschutzrecht

Website

https://www.idr-datenschutz.de

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

11–50 employees

Short description

IDR - Weller is a German sole proprietorship founded in 2010 by Rechtsanwalt Sascha Weller, providing external data protection officer services and BDSG/DSGVO compliance consulting to small and medium-sized businesses across the European Union from its Ingolstadt headquarters on a flat-rate monthly subscription model.

Ownership category

akta.pro rank

Product category

Data Protection Compliance Services

NAICS

Business Support Services (5614)

SIC

Services-Help Supply Services (7363)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• External data protection officer
• GDPR compliance consulting
• Data protection law services
• BDSG compliance advisory
• Data breach management

Headquarters

HQ city

Ingolstadt

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Others

Revenue model

1. External Data Protection Officer Services: Monthly subscription-based fees for providing external data protection officer services. The company charges fixed flat-rate prices that cover all data protection work that may arise, giving clients cost predictability and control. Services include implementing necessary measures, supporting process adjustments for DSGVO compliance, staff training, data protection status analysis, EU-DSGVO implementation support, communication with authorities, and handling of data breach notifications.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

IDR - Weller provides external Data Protection Officer (DPO) services and data protection law consulting for companies across the European Union. The firm acts as an outsourced DPO on a monthly subscription basis, implementing GDPR/BDSG compliance measures, drafting privacy policies and processing records, conducting employee training, handling data breach notifications, communicating with supervisory authorities, and supporting whistleblower system implementation.

Product overview

IDR - Weller is a consulting firm offering comprehensive data protection services centered around the role of external data protection officer (Externer Datenschutzbeauftragter). The core service provides companies with a certified external DPO who ensures GDPR and BDSG compliance. Supporting this core offering are multiple specialized modules including employee training and presentations, data protection status analysis, EU-GDPR consulting, communication with authorities and data subjects, data breach management, mobile/home office data protection guidance, privacy policy creation, and a whistleblower system for Hinweisgeberschutzgesetz compliance. The company serves clients throughout the EU from their office in Ingolstadt, Germany.

Differentiator

Problem solved

Functional benefit

Products and services

• External Data Protection Officer Service (Externer Datenschutzbeauftragter)

Quantifiable outcome

• Annual cost of internal DPO (full-time): approximately 43,550 EUR including salary, training, travel, and personnel support
• +2 more outcomes

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators3 records

Recent moves5 records

Expansion highlights4 records

Broad incumbents

• TrustArc: TrustArc provides enterprise-grade privacy compliance software and professional services, including DPO support. As a broad incumbent in the privacy management space, it competes with IDR-Weller for higher-end mandates.
• Bird & Bird LLP: Bird & Bird is an international law firm with a leading European data protection practice, providing GDPR advisory and external DPO services. It represents the larger-firm alternative to boutique players like IDR-Weller.
• OneTrust DataGuidance: OneTrust is a global privacy management software platform that increasingly offers external DPO services and GDPR consulting; competes with IDR-Weller especially for larger enterprise clients seeking technology-enabled compliance.
• Haufe-Lexware (Haufe Datenschutz): Haufe is a large German provider of legal, tax, and compliance information services including DSGVO/BDSG content and DPO advisory. It competes with IDR-Weller particularly among SMBs seeking bundled compliance resources.

Direct peers

• dataprotection.com (DP-Dock GmbH): dataprotection.com offers external DPO and GDPR representative services across Europe, targeting SMBs and multinational firms. It directly competes with IDR-Weller in cross-border mandates served from a single location.
• activeMind AG: activeMind AG is one of the largest dedicated external DPO service providers in Germany, offering flat-rate external data protection officer services to SMBs and mid-market companies under the German BDSG and EU GDPR — directly comparable to IDR-Weller's core offering.
• HeyData GmbH: HeyData is a German DPO-as-a-service platform combining external data protection officer services with software-enabled compliance tooling, serving SMBs with a subscription model that overlaps with IDR-Weller's positioning.
• Datenschutz Beratung GmbH: Datenschutz Beratung provides external data protection officer and GDPR consulting services to German SMBs and mid-market firms, with comparable pricing structures and service scope to IDR-Weller.
• Pradtke GmbH: Specialized German external DPO service provider offering flat-rate BDSG/GDPR compliance services and employee training to SMBs, directly comparable to IDR-Weller in service model and customer segment.

Emerging players

• Schürmann Rosenthal Denger Rechtsanwälte: A German boutique law firm focused on data protection law and IT law, providing external DPO services. Comparable to IDR-Weller as a specialist attorney-led practice but with broader legal advisory scope.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IDR - Weller