GDPR Legal Counsel

Atolls is the world's largest community-driven shopping platform, active in 20+ markets.
We help millions make smarter spending decisions across discovery, evaluation, and (re-)purchase by connecting people with the right brands and retailers.

Our 1,000+ team across 10 countries builds products used every day at global scale, where you'll have real ownership and see your impact. Want to shape the destinations people rely on to shop with confidence? Keep reading.

About This Role:
We are looking for a skilled and proactive
GDPR Legal Counsel
to join our international legal team, with a focus on data protection, privacy compliance, and broader legal advisory responsibilities.

You will play a central role not only in shaping and maintaining our data protection framework but also in supporting the legal team with further commercial and IP/IT legal activities. You will collaborate closely with internal teams and external counsel, manage internal legal queries and correspondence, and provide practical support through effective use and management of digital legal tools and systems. This is a fantastic opportunity for someone with a GDPR qualification and relevant experience to develop a broad legal skill set in a dynamic, cross-functional department within a growing international environment. You will report to the Group Legal Counsel whilst benefiting from the support of other legal specialists in the team.

Our Benefits:
At Atolls, we believe in nurturing both your professional and personal growth. Here's what you can expect:

• A culture that values personal and professional development, with internal mobility opportunities.
• A supportive and open-minded team that embraces diverse perspectives and innovative ideas.
• 32 days of paid vacation plus your birthday off, giving you the time you need to recharge.
• A flexible hybrid working scheme to balance work and life.
• Access to a learning budget and internal training to help you grow in your role.
• Mental health coaching to support your well-being.
• Regular global and local get-togethers to celebrate successes and build connections.
• The possibility of taking a sabbatical after two years with the company.
• A cloud-based company setup, providing flexibility and collaboration opportunities no matter where you are.
• These are global benefits that apply to all employees, with additional local perks based on your location.

Responsibilities:
Data Protection & GDPR Compliance

• Enhance, optimize and maintain the company-wide data protection program in line with, inter alia, GDPR, TTDSG, and ePrivacy standards.
• Serve as the central point of contact for all data protection matters across group entities, including employees, management, customers, and data protection authorities.
• Serve as CNIL point of contact for our French entities.
• Update and maintain internal policies, procedures, and documentation related to data processing , breach response, and compliance monitoring.
• Collaborate with product and tech teams to ensure privacy by design and by default in new and existing products and services.
• Oversee the breach notification process and coordinate responses in cooperation with external advisors and DPOs.
• Monitor data protection and privacy regulatory developments across Germany, France, UK, US, Spain and other side core markets.

General Legal Advisory

• Support day-to-day administrative tasks within the legal department, including document management, template creation, and maintenance of internal legal filing systems
• Review commercial contracts and internal legal documentation.
• Drafting, reviewing and filing usual corporate minute (filing of accounts, appointment of directors, change of address etc.)
• Legal Tech and Digital Tools Management: Provide support with legal tech tools, including administration of electronic signature platforms, template management, user support, and workflow coordination.
• Management of Correspondence and Internal Queries: Coordinate and communicate effectively with internal teams and external counsel.
• Contribute to cross-functional legal and compliance projects, including IT security certifications and business model assessments.

Your Profile:

• Experience:
  years of relevant experience in a legal department (ideally strong GDPR focus) preferably in the digital, e-commerce, or SaaS sectors.
• Expertise:
  Strong understanding of GDPR and other relevant data protection laws (TTDSG, ePrivacy, UK GDPR, CCPA). Familiarity with IT/IP, commercial contracts, and corporate law is a plus.
• Languages:
  Fluent in English and French; German is a strong advantage.
• Excellent communication skills and the ability to translate complex legal concepts into practical guidance.
• Entrepreneurial mindset with a proactive and collaborative working style.
• Strong organizational skills and comfort working in fast-paced, cross-functional teams.
• Proficient with MS Office or Google Workspace; tech-savvy and comfortable with digital tools.

Our hiring process
:

• TA Call
  : Meet one of our Talent Experts and get to know Atolls better.
• Technical Round
  : Focus on the technical aspects of the role, and meet your potential manager.
• Final Round
  : Meet other Atollians It varies from 1 to 3 interviews
• Some processes might slightly change according to needs

Ready to apply?
Be part of a destination where your work helps millions of people make better decisions every day. One focused application is all we need. If you truly fit more than one role, you're welcome to apply to
up to three.
This helps us match you with the right opportunity faster.

We review every application with equal care and will reach out if your profile aligns. Apply now with your CV in English.

• Portfolios, writing samples, or certifications may be requested based on the role.

At Atolls, we want to ensure that all employees can thrive in an inclusive environment. Our employment opportunities are open to every gender, race, religion, age, sexual orientation, ability, place of origin, or socioeconomic status. We remain committed to a culture of diversity, equity and belonging, where all employees are welcomed, respected, connected, and engaged.