As a highly accountable and autonomous legal expert, you will be the architect of the HomeToGo Group’s privacy strategy, overseeing its end-to-end implementation and monitoring. In the fast-evolving landscape of the online travel industry, you will serve as the ultimate group-wide authority on data protection, acting as a critical bridge between complex compliance and ambitious business growth.

The Group is looking for a collaborative strategist who thrives in a candid, open-minded atmosphere and possesses the resilience to navigate intricate regulatory environments with innovative legal solutions. This is a role for a driven leader ready to own the privacy roadmap and deliver pragmatic results in a high-growth, tech-driven ecosystem. As a vital member of a motivated legal team, the successful candidate will not only lead on privacy but also possess the agility and curiosity to step into other legal fields, specifically facilitating the negotiation of complex commercial contracts and providing strategic counsel on product changes to support broader strategic objectives.

• Driving and overseeing the consistent implementation of GDPR standards across all HomeToGo Group entities and subsidiaries.
• Assessing legal requests with a unique ability to think creatively, balancing rigorous risk mitigation with business impact.
• Guiding product launches and app changes (including AI and AdTech features) to ensure privacy is integrated by design.
• Serving as the primary internal contact and lead collaborator for the external Data Protection Officer (DPO) to ensure seamless compliance oversight.
• Maintaining and improving global data protection flows, privacy policies, Records of Processing Activities (ROPAs), and other required GDPR documentation.
• Monitoring and implementing the latest EU and international regulatory and statutory privacy requirements.
• Reviewing and negotiating Data Processing Agreements (DPAs) and privacy-related clauses in commercial contracts.
• Independently negotiating and drafting a wide range of commercial contracts, ensuring they align with both business goals and regulatory frameworks.
• Stepping in as a legal generalist when necessary, providing pragmatic advice on various legal matters beyond the scope of privacy.

• Legal Qualification: One or two German State Exams passed above average, or a comparable European law degree (alternatively, a business degree with extensive practical experience in GDPR).
• Certified Expertise: Mandatory certification in GDPR (e.g., IAPP CIPP/E, CIPM, or an equivalent recognized professional certification).
• Language Proficiency: Excellent command of German (C2 level) is a must, along with fluent professional English.
• Professional Experience: 7+ years of experience in an in-house legal department or law firm (or a mix of both), with a proven track record in data protection law.
• Ownership Mindset: A highly autonomous working style with a deep sense of accountability for work products and deadlines.
• Team Player Mentality: A dedicated collaborator who thrives in intercultural environments and values collective success and shared goals.
• Solution Orientation: The ability to communicate complex legal risks in a simple, practicable manner that supports business momentum, combined with the ability to pivot between deep-dive privacy assessments and high-level commercial negotiations.