A freelance senior software engineer for Munich product and industrial teams
Legacy modernisation, Laravel platforms, security audits and AI features for Munich product teams and the software groups inside industrial companies, with most of the day shared.
01
Why Munich teams bring me this work
This page is for Munich product teams and the software groups inside industrial companies, where the questions come in a particular order: security, compliance and where the data lives first, features second. That's how I like to start too: an architecture review or a security audit as a fixed-price first step, then a modernisation plan in phases that keeps the existing system running until the new one has earned its place.
What teams across the European Union bring me
- Your stack has to pass a GDPR review: data maps, processor terms, transfers and retention.
- You need senior capacity for a few months without adding headcount.
02
The hours we share with Munich
Munich keeps Central European Time, like Berlin: your 09:00 is 13:30 in Mumbai in winter and 12:30 in summer. Most of your working day overlaps with mine, so reviews happen live and the written report follows the same day.
Each city's 09:00–18:00 working day on the clock in Mumbai (UTC+5:30), in January and in July, so daylight saving is accounted for.
| City | In January | In July |
|---|---|---|
| MunichUTC+1 / UTC+2 | 13:30–22:30 | 12:30–21:30 |
Clocks Central European Time (UTC+1) in winter, Central European Summer Time (UTC+2) from the last Sunday of March to the last Sunday of October, under Directive 2000/84/EC; clocks change at 01:00 UTC.
03
Rules a Munich team's software meets
The supervisory authority, in Ansbach
The Bavarian State Office for Data Protection Supervision (BayLDA) supervises data protection in Bavaria's private sector, covering companies, freelancers, associations and the internet. It is based in Ansbach, not Munich.
Source: BayLDA: Aufgaben
The Federal Data Protection Act
Germany's Federal Data Protection Act (BDSG) supplements the GDPR. Under § 40 the authorities designated by Land law, BayLDA in Bavaria, supervise private-sector bodies.
Source: Gesetze im Internet: § 40 BDSG
The imprint duty
Under § 5 of the Digital Services Act (Digitale-Dienste-Gesetz, DDG), in force since 14 May 2024, providers of commercial digital services must keep certain provider information (the Impressum) easily recognisable, directly accessible and permanently available.
Source: Gesetze im Internet: § 5 DDG
Accessibility law
Germany's Barrierefreiheitsstärkungsgesetz (BFSG), which transposes the European Accessibility Act, has been in force since 28 June 2025. Service contracts concluded before that date may continue unchanged until 27 June 2030 at the latest.
Source: Gesetze im Internet: Barrierefreiheitsstärkungsgesetz (BFSG)
Across the European Union: GDPR · European Accessibility Act · AI Act, Article 50
This is engineering guidance, not legal advice: confirm what applies to your business with your counsel.
Further reading
- Article: What a penetration test report contains · 10 October 2026
The sections of a web application pentest report, what each one is for, and a fictional sample finding written the way I write real ones.
- Article: CodeIgniter to Laravel: a staged migration playbook · 10 October 2026
How to move a live CodeIgniter or plain-PHP application to Laravel in reversible stages, keeping every URL and the business running.
04
Contracts and invoicing
Invoices in euros, per milestone, paid through Wise or Payoneer. I can work under your contract, with a GDPR Article 28 data processing agreement and Standard Contractual Clauses for any transfer of personal data to India.
More on working with teams in the European Union is on the European Union page.
Tax and legal treatment depends on your company and country: confirm it with your accountant or counsel.
05
Where Munich teams usually start
Legacy modernization
Move an aging system to a modern stack without stopping the business.
- Price
- Fixed-price assessment, then a fixed quote per stage
- Timeline
- An assessment first, then migration in stages on a schedule agreed with you
Security audit and penetration test
An attacker's view of your application and infrastructure, and a fix list you can act on.
- Price
- Fixed price per scope
- Timeline
- Agreed per project after scoping
Architecture review and due diligence
An independent, written view of a system: what's solid, what's risky, and what it will cost to fix.
- Price
- Fixed price per scope
- Timeline
- Agreed per project after scoping
Laravel development and upgrades
Laravel applications and APIs built, upgraded and kept current by an engineer whose main stack is Laravel.
- Price
- Fixed quote per stage after reading the code
- Timeline
- Scoped on a first call; upgrades are planned one major version at a time
06
Case studies
- Case study: TopGear India CMS · CMS migration and modernization
- page load time, before → after
- 1–3 min → 3 s
- Case study: Vayudoot Aviations · Education platform
- Case study: Immunomate · Telemedicine platform
- registered users
- 500+
07
Questions from Munich teams
What hours do we share with Munich?
The same as Berlin: your 09:00 is 13:30 in Mumbai in winter and 12:30 in summer. That leaves your whole morning and the start of your afternoon for live reviews, and the written findings follow the same day.
Who supervises data protection for a Munich company?
The Bavarian State Office for Data Protection Supervision (BayLDA), which supervises Bavaria's private sector from Ansbach, not Munich. Your site also needs an Impressum under § 5 DDG, and the accessibility law (BFSG) has been in force since 28 June 2025. Confirm what applies with your counsel.
Do you have an office in Munich?
No. I work remotely from Mumbai, with no office or staff in Germany, and I don't offer in-person meetings in Munich. Reviews run on video in your morning, against systems you give me scoped access to.
08