Privacy Counsel

Job description

We are on the lookout for a (Associate) Privacy Counsel to join the Global Delivery Hero Data Protection Team on our journey to always deliver amazing experiences. This opportunity will see you join the team that protects and enables Delivery Hero’s growth. In the global Legal, Governance and Assurance (One LGA) team, you’ll support key initiatives by providing proactive legal guidance that aligns business goals with regulatory standards.

Your work will help mitigate risks and ensure we’re positioned for sustainable, long-term success—making you a key contributor to our mission of delivering amazing experiences worldwide. This role is part of the global data protection office of Delivery Hero Group, based at our Glovo office in Barcelona.The role involves counselling internal stakeholders on privacy compliance, supporting the implementation of privacy programs and ensuring adherence to applicable laws, regulations and industry best practices.

We are looking for a true collaborator with a hands-on, proactive approach who can work effectively across teams to drive privacy initiatives forward. Provide legal advice on data protection matters under global frameworks such as the GDPR. Provide expert, risk-based privacy advice to the business on new products, initiatives, and operational changes. Strong background in privacy contracting and risk management, with specific experience in drafting and negotiating DPAs and intra-group data transfer agreements, conducting privacy due diligence for onboarding third-party service providers and navigating privacy compliance and due diligence within an M&A context.

Support the data mapping process and documentation of data processing activities conducted by the business and staff functions, including the performance of data protection impact assessments. Develop, implement, and maintain global privacy and data protection policies, notices, and internal procedures. Support the team’s communications to the DH Group management board, supervisory board (including audit and risk committees), and business leadership teams.

Conduct privacy maturity audits, ensuring consistency in reporting and remediation efforts. Manage and support investigations or fine-related proceedings with data protection authorities, including the development of strategic mitigation plans. Monitor ongoing developments around AI governance and contribute to the improvement of AI governance frameworks, ensuring responsible use of AI systems and compliance with emerging AI regulations globally.

Qualifications

Min. 2 - 3 years of proven experience in data protection/privacy or related areas An educational background in law, at least a bachelor's or comparable degree Certified expertise in EU privacy laws (IAPP CIPP/E, CIPM, TÜV DPO, etc.) is a plus Excellent English language skills. Polish, Spanish or German is a plus. Demonstrated experience in advising online technology companies and data-driven businesses across multiple jurisdictions is a plus Strong communication and stakeholder management skills, with experience influencing across different cultures and functions Proactive, taking ownership, anticipating challenges, and actively supporting initiatives forward