Use when running a GDPR or German DSGVO/BDSG privacy assessment — scanning code for privacy risks, deciding/generating a DPIA, tracking data-subject-rights (DSAR) deadlines, picking lawful bases, and German-specific rules. Final calls route to the DPO/counsel. Geographic scope: Germany.