Legal Counsel (Data Privacy & Compliance) (m/f/d)

Legal Counsel (Data Privacy & Compliance) (m/f/d) Allow us to introduce ourselves Hello there! We’re Appinio, a global market research company that combines an AI-powered insights platform with expert consultancy. On a mission to make the world a little more fact-based, we help companies understand how consumers think and make smarter decisions. We started out in Hamburg back in 2014, but we’re now humbled to call the world our playground, with over 260 employees spread across 13 countries (we’re remote‑first), 2600+ international clients, delivering research from +190 markets, globally. Want to be a part of the Appinio movement? Here at Appinio, we value transparency in our recruitment process, and we've created a blog to share what to expect during each step of our journey together: here Your mission as a Legal Counsel (Data Protection & Compliance) We are looking for a Legal Counsel (m/f/d) to help Appinio sustain its rapid growth internationally while staying compliant and managing legal risks while cultivating business growth. This role requires someone with excellent data privacy and compliance experience in the EU and on an international scale. You will play a key role in ensuring GDPR and global data protection compliance, managing data subject rights requests, overseeing transfer mechanisms, and advising on privacy-related risks across our international operations. From negotiating Data Processing Agreements to embedding privacy‑by‑design principles in our products, you’ll be a trusted partner across teams and markets. This role safeguards both our legal integrity and our commercial credibility, ensuring Appinio continues to grow ethically, responsibly and sustainably. What you’ll do Data Protection Compliance • Advise on EU GDPR, and other privacy laws across the UK, US, and LATAM • Draft, review, and negotiate Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) • Manage Data Subject Rights Requests (access, deletion, portability, etc.) within statutory deadlines • Oversee Data Protection Impact Assessments (DPIAs) and ensure privacy‑by‑design in product and research processes • Monitor cross-border data transfers and manage Transfer Impact Assessments (TIAs) Internal Governance & Compliance Frameworks • Maintain and enhance Appinio’s internal privacy policies and compliance frameworks • Conduct internal audits and risk reviews, driving continuous improvement • Track new regulatory developments and translate them into actionable business guidance Contracting & Commercial Support • Partner with commercial legal to ensure contracts align with privacy obligations • Support due diligence processes and respond to client security and privacy questionnaires • Advise on lawful use of personal data in marketing, research, and product innovation • Act as the contact point for data breach response and regulator communications • Identify and mitigate privacy and compliance risks across departments • Coordinate with external advisors and DPOs on high‑risk or complex matters Product & AI Enablement • Collaborate with Product and Data teams to ensure responsible data and AI use • Review new tools, APIs, and technologies for compliance implications You will thrive in this role if • You are a fully qualified German lawyer (Volljurist) who has completed both state examinations (Zweites Staatsexamen) • You bring 3+ years of experience in privacy and data protection, ideally gained in‑house • You have strong knowledge of EU and German data protection law (GDPR, BDSG, TTDSG) • You’re experienced in commercial contracting and general corporate compliance. • You're confident in advising on both EU and international level • You’re confident advising internal stakeholders across Product, Research, Tech, and Commercial • You have excellent legal drafting skills in German and English • You’re proactive, analytical, and comfortable working independently • You’re curious about the intersection of privacy, technology, and AI • You are based in Europe (ideally in Germany, Spain, or the UK) What’s in it for you? • Flexibility Policy – Our flexibility policy means there is no hard cap on the number of vacation days you can take • Temporary work from abroad – If you're based in the EU, you can work outside your country of residence for up to 180 days per year • All the hardware you need and your own MacBook • If you are located in Hamburg or Berlin, you'll get a Deutschland ticket or access to a mobility budget with the NAVIT app to get you to and from the office space • If you are located in Germany or Spain, you will have access to a Subsidised Urban Sports Club membership • In case you’re located in one of the cities where most of our fellow Appinioneers are (Hamburg, Berlin, Munich, London, Madrid, Barcelona, or New York), you can get access to our Co‑working spaces Kind reminder: Please ensure that your application is submitted in English. Appinio is an equal‑opportunity employer. All applicants will be considered for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. Please read our privacy policy here. Apply tot his job