Maria Lefe

Ensure compliance of Renault's business activities with personal data protection regulations, including Privacy Impact Assessments, Transfer Impact Assessments, guidance and support to business teams, drafting and negotiating of Data Processing Agreements (DPAs), management of data breaches, development of data privacy guidelines for the entire Group

Support and awareness-raising for business and operational teams; GDPR review and analysis of all IT projects; analysis of data sovereignty challenges in the cloud; implementation of a company-wide data retention policy.

Support companies in defining and implementing GDPR compliance strategies; draft Privacy Policies, Cookie Policies, and Privacy Notices; govern personal data transfers outside the EU (drafting Binding Corporate Rules and implementing Standard Contractual Clauses); develop methodologies for handling data subject rights requests; Drafting and negotiating IT contracts (outsourcing, maintenance, hosting, licensing, SaaS, IaaS, PaaS).

Drafting and negotiating IT contracts (outsourcing, maintenance, hosting, licensing, SaaS, IaaS, PaaS); support companies in achieving GDPR compliance; provide legal advice on the processing of sensitive data; map processing activities through on-site interviews with business teams.

Business law and personal data protection law: drafting legal documents (procedural documents and pleadings); review contractual clauses; conduct research in the field of data protection; and handle filings and notifications with the Greek Data Protection Authority.