Technical consultant for data protection officers and law firms
Data protection officers and law firms are asked to assess tracking, cookies and third-party services, but what a website actually loads and stores is rarely in the documentation. I work as a technical consultant for data protection law firms and data protection officers. I review websites, Matomo instances and tag managers, explain the findings clearly and then implement your requirements technically. The legal assessment stays with you.
Sound familiar?
- 01What does the website really load?Banners, tag managers and third-party services. What happens before consent cannot be seen in the source code alone.
- 02Promises instead of evidenceAgencies and vendors call their setup privacy-friendly, but rarely back it up in a way you can follow.
- 03Not all Matomo setups are equalCookies, IP shortening, feature detection, retention. The settings decide, not the product name.
- 04The tag manager as a blind spotTags are added through containers without data protection or IT being told.
- 05IT and legal talk past each otherDevelopment and legal need someone who understands both sides.
- 06After the assessment comes implementationThe client needs someone who implements your requirements cleanly.
Technical facts for your assessment
I review websites the way a browser sees them: which services are loaded, which cookies and storage entries are created, before and after consent, and which data goes to whom. The result is a finding with evidence instead of assumptions that non-technical readers can follow too.
Matomo in detail
I have been part of the Matomo team since 2009 and know the settings that matter for privacy: tracking without cookies, feature detection, IP shortening, retention and deletion of raw data, opt-out as well as access and deletion for individual visitors. I check whether an instance is configured the way it is described and explain what each setting does.
Tag managers and third-party services
Many data flows are not created in the source code but in the tag manager. I look at containers, triggers and publishing in Matomo Tag Manager and Google Tag Manager and show which tags fire when and whether they wait for consent.
Clear between IT and legal
I translate between development, agency and legal department: in meetings, in written explanations and in training for data protection teams. That way you can ask targeted questions and put the answers in context.
From assessment to implementation
Once your assessment is settled, I implement it technically: Matomo without cookies or with consent, shortened IP addresses, retention periods and a clean integration with the consent tool. You receive the documentation of the settings for your records.
FAQ
Frequently asked questions
Do you write legal opinions?
No. I provide technical findings and explanations, the legal assessment stays with you or your law firm.
What does a technical finding contain?
Which services and cookies a website loads, before and after consent, how Matomo is configured and which data flows where. I back this up with what the browser actually sends and describe it so that non-technical readers can follow it.
Do you also review Google Analytics and other services?
Yes. My focus is Matomo, but I also review Google Analytics 4, Google Tag Manager and embedded third-party services such as fonts, videos or maps.
Do you take on the implementation at the client?
Yes. Once your assessment is settled, I configure Matomo and the tag manager as you specify and document the settings. If you like, I work directly with the client or their agency.
How do we get a first impression?
The free quick check shows in about 20 seconds which services and cookies a website loads before consent. For a reliable statement, a manual review follows.
Sounds like your project?
In an intro call we'll clarify where you stand and what comes first.
Your contactPeter Boehlke, Matomo consultant from Munich, 17 years in the Matomo team