(Senior) Privacy Manager - Governance & Legal (all genders)

Support us in designing the insurance experience of the future. As our (Senior) Privacy Manager (all genders), you will further shape and build getolo's privacy organisation enabling us to further scale and expand our European business. You will take ownership of developing our privacy framework, from governance structure, processes and controls to tools and documentation, and bring it to life across the company. You will report to our Head of Governance & Legal, who will be your sparring partner and support you in implementing the relevant structures.

This is a full-time hybrid role, with 1–2 days per week in our Berlin office.

Requirements

Your Mission

----------------

Strengthening our privacy organisation

• Taking getolo's privacy organization to the next level: furthering governance model, roles and responsibilities, policies, processes and controls
• Define clear accountabilities between business teams, privacy and control functions (3 lines of defense), and establish the corresponding reporting and escalation lines
• Reinforce a sustainable records of processing and data inventory that will keep pace with our products and data landscape going forward
• Furthering privacy monitoring and controls, including KPIs and regular management reporting
• Strengthening privacy awareness across the company through training and practical guidance

Privacy by design & technology

• Embed privacy by design and by default into our product and software development lifecycle
• Work with data and engineering teams on data architecture, retention and deletion concepts
• Drive the implementation and automation of processes and privacy tools, e.g. DSR workflows and data mapping solutions

Day-to-day privacy advisory

• Act as the first point of contact for data protection issues across business projects, ensuring compliance with the GDPR, BDSG, TDDDG and related regulations
• Conduct and guide data protection impact assessments and risk assessments with our DPO at Zurich, and drive the mitigation of identified risks
• Prepare, review and negotiate data processing agreements, international transfer mechanisms and privacy clauses
• Oversee the handling of data subject requests and personal data breaches, including notification processes
• Ensure the compliant processing of special categories of personal data, in particular health data
• Assess AI use cases from a privacy perspective and support our AI in...

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.