Privacy Counsel

Provide legal advice on data protection matters under global frameworks such as the GDPR, offering expert, risk-based privacy guidance to the business on new products, initiatives, and operational changes. Draft and negotiate Data Processing Agreements and intra-group transfer agreements, conduct privacy due diligence for third-party onboarding and M&A contexts, and support data mapping activities including Data Protection Impact Assessments. Develop and maintain global privacy policies, notices, and internal procedures while conducting maturity audits to ensure consistent reporting and remediation. Manage investigations or proceedings with data protection authorities and support communications with the Group management board and supervisory committees. Monitor ongoing developments around AI governance to improve compliance frameworks and ensure responsible use of AI systems.