4 days ago Be among the first 25 applicants
Get AI-powered advice on this job and more exclusive features.
Allow us to introduce ourselves
We’re Appinio, a global market research company that combines an AI-powered insights platform with expert consultancy. On a mission to make the world a little more fact-based, we help companies understand how consumers think and make smarter decisions. We started out in Hamburg in 2014, and now we’re remote‑first with over 260 employees spread across 13 countries and serving 2600+ international clients through 190 markets worldwide.
Your mission as a Legal Counsel (Data Protection & Compliance)
We are looking for a mid-level Legal Counsel (m/f/d) to help Appinio sustain its rapid growth internationally while staying compliant and managing legal risks while cultivating business growth. This role requires someone with excellent data privacy and compliance experience in the EU and on an international scale.
What you’ll do
- Data Protection Compliance
- Advise on EU GDPR and other privacy laws across the UK, US, and LATAM
- Draft, review, and negotiate Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs)
- Manage Data Subject Rights Requests within statutory deadlines
- Oversee Data Protection Impact Assessments (DPIAs) and ensure privacy‑by‑design in product and research processes
- Monitor cross‑border data transfers and manage Transfer Impact Assessments (TIAs)
- Internal Governance & Compliance Frameworks
- Maintain and enhance Appinio’s internal privacy policies and compliance frameworks
- Conduct internal audits and risk reviews, driving continuous improvement
- Track new regulatory developments and translate them into actionable business guidance
- Contracting & Commercial Support
- Partner with commercial legal to ensure contracts align with privacy obligations
- Support due diligence processes and respond to client security and privacy questionnaires
- Advise on lawful use of personal data in marketing, research, and product innovation
- Incident & Risk Management
- Act as the contact point for data breach response and regulator communications
- Identify and mitigate privacy and compliance risks across departments
- Coordinate with external advisors and DPOs on high‑risk or complex matters
- Product & AI Enablement
- Collaborate with Product and Data teams to ensure responsible data and AI use
- Review new tools, APIs, and technologies for compliance implications
You will thrive in this role if
- 3+ years of experience in privacy and data protection, ideally in‑house
- Strong knowledge of EU and German data protection law (GDPR, BDSG, TTDSG)
- Experience in commercial contracting and general corporate compliance
- Ideally, fully qualified German lawyer (Volljurist) who has completed both state examinations (Zweites Staatsexamen)
- Confident advising on both EU and international level
- Proactive, analytical, comfortable working independently
- Curious about the intersection of privacy, technology, and AI
- Based in Europe (ideally Germany, Spain, or the UK)
What’s in it for you?
- Flexibility Policy – No hard cap on vacation days
- Temporary work from abroad – Up to 180 days per year outside residence within the EU
- All necessary hardware and your own MacBook
- Hamburg or Berlin: Deutschland ticket or mobility budget via NAVIT app to office space
- Germany or Spain: subsidised Urban Sports Club membership
- Co‑working spaces in Hamburg, Berlin, Munich, London, Madrid, Barcelona, or New York
Kind reminder: Please ensure that your application is submitted in English.
Appinio is an equal‑opportunity employer. All applicants will be considered for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.
Please read our privacy policy here.
Learn more about us: appinio.com LinkedIn Xing Kununu Instagram
Referrals increase your chances of interviewing at Appinio by 2x.
#J-18808-Ljbffr