Legal Counsel (Data Privacy & Compliance) (m/f/d)

Allow us to introduce ourselvesHello there! We're Appinio, a global market research company that combines an AI-powered insights platform with expert consultancy. On a mission to make the world a little more fact-based, we help companies understand how consumers think and make smarter decisions.We started out in Hamburg back in 2014, but we're now humbled to call the world our playground, with over 260 employees spread across 13 countries (we're remote-first), 2600+ international clients, delivering research from +190 markets, globally.Want to be a part of the Appinio movement?Here at Appinio, we value transparencyin our recruitment process, and we've created a blog to share what to expect during each step of our journey together: hereYour mission as a Legal Counsel (Data Protection & Compliance)AufgabenWe are looking for a Legal Counsel (m/f/d) to help Appinio sustain its rapid growth internationally while staying compliant and managing legal risks while cultivating business growth. This role requires someone with excellent data privacy and compliance experience in the EU and on an international scale. You will play a key role in ensuring GDPR and global data protection compliance, managing data subject rights requests, overseeing transfer mechanisms, and advising on privacy-related risks across our international operations. From negotiating Data Processing Agreements to embedding privacy-by-design principles in our products, you'll be a trusted partner across teams and markets. This role safeguards both our legal integrity and our commercial credibility, ensuring Appinio continues to grow ethically, responsibly you'll doData Protection ComplianceAdvise on EU GDPR, and other privacy laws across the UK, US, and LATAMDraft, review, and negotiate Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs)Manage Data Subject Rights Requests (access, deletion, portability, etc.) within statutory deadlinesOversee Data Protection Impact Assessments (DPIAs) and ensure privacy-by-design in product and research processesMonitor cross-border data transfers and manage Transfer Impact Assessments (TIAs)Internal Governance & Compliance FrameworksMaintain and enhance Appinio's internal privacy policies and compliance frameworksConduct internal audits and risk reviews, driving continuous improvementTrack new regulatory developments and translate them into actionable business guidanceContracting & Commercial SupportPartner with commercial legal to ensure contracts align with privacy obligationsSupport due diligence processes and respond to client security and privacy questionnairesAdvise on lawful use of personal data in marketing, research, and product innovationIncident & Risk ManagementAct as the contact point for data breach response and regulator communicationsIdentify and mitigate privacy and compliance risks across departmentsCoordinate with external advisors and DPOs on high-risk or complex mattersProduct & AI EnablementCollaborate with Product and Data teams to ensure responsible data and AI useReview new tools, APIs, andProfilthis role ifYou are a fully qualified German lawyer (Volljurist) who has completed both state examinations (Zweites Staatsexamen)You bring 3+ years of experience in privacy and data protection, ideally gained in-houseYou have strong knowledge of EU and German data protection law (GDPR, BDSG, TTDSG)You're experienced in commercial contracting and general corporate compliance.You're confident in advising on both EU and international levelYou're confident advising internal stakeholders across Product, Research, Tech, and CommercialYou have excellent legal drafting skills in German and EnglishYou're proactive, analytical, and comfortable working independentlyYou're curious about the intersection of privacy, technology, and AIYou are based in Europe (ideally in Germany, Spain,Wir bietenfor you?Flexibility Policy - Our flexibility policy means there is no hard cap on the number of vacation days you can takeTemporary work from abroad - If you're based in the EU, you can work outside your country of residence for up to 180 days per yearAll the hardware you need and your own MacBookIf you are located in Hamburg or Berlin, you'll get a Deutschland ticket or access to a mobility budget with the NAVIT app to get you to and from the office spaceIf you are located in Germany or Spain, you will have access to a Subsidised Urban SportsClub membershipIn case you're located in one of the cities where most of our fellow Appinioneers are (Hamburg, Berlin, Munich, London, Madrid, Barcelona, or New York), you can get access to our Co-working spacesKind reminder: Please ensure that your application is submitted in English.This post not only outlines our ideal candidate but also serves as an inspiration for what this role can evolve into. Even if you consider yourself an 80% fit but have a genuine passion for this position, we encourage you to apply. We're eager to hear from individuals who share our enthusiasm.Appinio is an equal-opportunity employer. All applicants will be considered for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.Please read our privacy policy Important notePlease be advised that a valid work permit for Germany is required for non-EU citizens. Unfortunately, applications without a valid work permit and sufficient German language skills may not be considered.LNKD1_DE