(Senior) Legal Counsel, Privacy (d/f/m)

(Senior) Legal Counsel, Privacy (d/f/m)

The Role

We are looking for a passionate new team member to join us as a (Senior) Legal Counsel, Privacy (d/f/m) in Berlin, Charlottenburg. This hybrid position offers flexibility to work both in‑office and from home, and focuses on supporting the organisation with day‑to‑day privacy expertise.

Job responsibilities

1. Day‑to‑Day Legal Privacy Advice to the Business

• Provide timely, practical legal advice to internal stakeholders across Product & Technology, Marketing, Sales, and HR on all privacy‑related matters.
• Act as the first point of contact for privacy questions arising from daily business operations, reducing escalation volume to the DPO.
• Advise on data processing activities and ensure alignment with GDPR, the ePrivacy Directive, the EU AI Act, and other applicable German and EU regulations.

2. Contract Review and Data Protection Agreements

• Draft, review, and negotiate Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and privacy‑related contract clauses with vendors, partners, and third parties.
• Ensure all contracts involving personal data processing comply with applicable privacy regulations and mobile.de's internal standards.

3. Product Compliance

• Embed privacy by design and by default principles into the product development lifecycle in close collaboration with Product & Technology teams.
• Review new product features, data flows, and technical architectures for privacy compliance before launch.
• Advise on AdTech, cookie consent frameworks, and tracking technologies in compliance with the ePrivacy Directive and GDPR requirements applicable in the German market.

4. Regulatory Monitoring and Risk Flagging

• Monitor the German and EU regulatory landscape, including developments from the DSK, BfDI, state‑level DPAs, and the EDPB.
• Flag emerging regulatory risks and upscale strategic implications to the Global DPO.
• Support the DPO in preparing for and responding to regulatory inquiries or investigations.

5. Records and Documentation

• Maintain and update Records of Processing Activities (ROPA) for mobile.de's German operations.

Qualifications

• Experience: Qualified lawyer (Volljurist/in or equivalent) with at least 4 years of experience in data protection and privacy law, gained at an international law firm or in‑house in a digital/tech company.
• Legal Knowledge: In‑depth understanding of GDPR, the ePrivacy Directive, the EU AI Act, and applicable German national laws (BDSG, TTDSG).
• Contract Expertise: Proven ability to independently draft and negotiate DPAs, SCCs, and privacy‑related commercial agreements.
• Product Compliance: Practical experience advising product and engineering teams on privacy by design, cookie consent, and data minimisation.
• Languages: Full professional proficiency in both German and English (written and spoken).
• Communication: Ability to translate complex legal and regulatory requirements into clear, actionable guidance with a high level of integrity, professionalism, and discretion.
• Adaptability: Comfortable operating in a fast‑moving digital environment where regulatory requirements and business priorities evolve rapidly.
• Positive Energy: Constructive, collaborative, and proactive in fostering a culture of privacy awareness across the organisation.

Job benefits

• Competitive base salary and participation in the company’s incentive programs.
• Company pension scheme on top of statutory retirement insurance.
• Regular team and company events for networking and learning.
• Learning and development resources, including coaching and learning platforms.
• Monthly transportation allowance.
• Well‑equipped office with social zones for relaxation and collaboration.
• Hybrid work model with the option to work abroad for a set number of days per year.
• Confidential employee assistance and support services for employees and immediate families.
• Enhanced parental leave and family‑friendly policies for all parents.

mobile.de is an equal opportunity employer and we value diversity. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.