Privacy Counsel at Glovo, Barcelona

Glovo (part of Delivery Hero Group); Barcelona; Sur place; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Equity plan

Private health insurance

Parental leave

Glovo credit

Transit discounts

Kindergarten support

Gym membership

Work from home 2 days a week

Office nursery

Résumé du poste

Glovo is hiring a Privacy Counsel in Barcelona to help shape privacy strategy across the Delivery Hero Group. You will advise on GDPR and global frameworks, manage DPAs and data transfers, and collaborate with cross‑functional teams to embed privacy across products.

This role sits in a fast‑moving tech platform environment with ambitious AI governance initiatives. Based in Barcelona, you will partner with the global Data Protection Team to balance risk with innovation and ensure scalable privacy

Qualifications

• Law degree or equivalent professional qualification.
• 2–3+ years in data protection/privacy.
• CIPP/E, CIPM or TÜV DPO are pluses.

Responsabilités

• Provide GDPR and global privacy guidance to stakeholders.
• Draft and negotiate DPAs and intra‑group data transfer agreements.
• Support data mapping and DPIAs for high‑risk projects.
• Develop and maintain global privacy policies and notices.
• Lead privacy audits and regulatory engagements.
• Contribute to AI governance efforts across the business.

Connaissances

Privacy advisory

Contracting & risk mgmt

Data mapping & DPIAs

Policy development

Regulatory engagement

AI governance

Formation

Law degree

2–3+ years data protection experience

CIPP/E CIPM TÜV DPO (certs)

Description du poste

Full Opportunity Brief

In the rapidly evolving landscape of global data protection, few roles offer the blend of strategic influence, cross-border complexity, and high-visibility impact as the Privacy Counsel position at Glovo, now open in its Barcelona office. As a key member of the Delivery Hero Group — one of the world's pioneering local delivery platforms operating in over 70 countries — this role invites a legal professional not just to interpret privacy law, but to shape the responsible growth of a technology superpower. This in-depth guide breaks down everything you need to know about the opportunity, from the required skill set to the day-to-day responsibilities, and provides actionable strategies to help your application stand out in a highly competitive field.

Why This Privacy Counsel Role at Glovo Is a Career-Defining Move

The role is far from a routine compliance desk job. It sits at the intersection of law, technology, and business strategy, within the global Data Protection Team of the Delivery Hero Group. For privacy lawyers looking to pivot from traditional law firms or siloed corporate roles into the heart of the tech economy, this is a golden ticket. Glovo operates in numerous jurisdictions, each with its own regulatory nuances, meaning you will constantly be applying the General Data Protection Regulation (GDPR) alongside a patchwork of national laws and emerging AI governance frameworks.

Moreover, the role is set against the backdrop of the booming digital platform economy. Food delivery, quick commerce, and logistics generate massive amounts of personal data — from location data and payment information to consumer behavior insights. Protecting that data is not merely a legal obligation; it is central to preserving customer trust and maintaining Glovo's competitive edge. As a Privacy Counsel, you become the guardian of that trust, working alongside diverse teams to embed privacy into every new product and initiative from the ground up.

Inside the Day-to-Day: What You'll Actually Do as Privacy Counsel

The job description reveals a multifaceted position that goes far beyond boilerplate policy reviews. Here are the core responsibilities that define the role:

• Privacy Advisory Under GDPR and Global Frameworks: You will provide legal advice on data protection matters under global frameworks such as the GDPR, helping internal stakeholders navigate complex regulatory requirements while still achieving business objectives.
• Contracting and Risk Management: A significant part of your work will involve drafting and negotiating Data Processing Agreements (DPAs) and intra-group data transfer agreements. You will also conduct privacy due diligence when onboarding third-party service providers, a task that has become increasingly critical in today's interconnected ecosystem.
• Data Mapping and Impact Assessments: You'll support the data mapping process and documentation of data processing activities, including conducting Data Protection Impact Assessments (DPIAs) for high-risk projects.
• Policy Development: You'll develop, implement, and maintain global privacy and data protection policies, notices, and internal procedures, ensuring they are practical, up-to-date, and aligned with regulatory expectations.
• Regulatory Engagement and Audits: The role includes conducting privacy maturity audits, handling investigations or fine-related proceedings with data protection authorities, and crafting strategic mitigation plans. This is an opportunity to directly engage with regulators and shape remediation strategies.
• AI Governance: In a forward-looking move, Glovo explicitly requires monitoring ongoing developments around AI governance and contributing to the improvement of AI governance frameworks. This positions the role at the cutting edge of an area that is set to explode in the coming years.

This variety ensures that no two days will feel the same. One day you might be negotiating a complex data transfer agreement with a major tech vendor; the next, you could be briefing senior management on a new AI directive. The role demands a high level of adaptability and a willingness to roll up your sleeves.

The Candidate Profile: What Glovo Is Looking For

Glovo has outlined a clear set of qualifications for the ideal candidate. While it is an intermediate-level position, they are looking for someone with solid foundational experience and a proactive mindset. Key requirements include:

• Educational Background: A law degree (bachelor's or comparable degree) is required, setting a professional baseline.
• Professional Experience: Proven experience (2 to 3+ years) in data protection / privacy or related areas. This is not an entry-level role; you're expected to hit the ground running.
• Certifications: Certified expertise on EU privacy laws such as IAPP CIPP/E, CIPM, or TÜV DPO is considered a significant plus, though not strictly mandatory.
• Language Skills: Excellent English is non-negotiable. Proficiency in Polish, Spanish, or German is also a plus, reflecting the international nature of the role and the group's operations.
• Industry Experience: Demonstrated experience advising online technology companies and data-driven businesses across multiple jurisdictions is preferred, highlighting the importance of sector-specific knowledge.
• Soft Skills: Strong communication and stakeholder management skills, with the ability to influence across culturally diverse teams, are essential. The ability to proactively take ownership and anticipate challenges is also a recurring theme in the job posting.

We are looking for a true collaborator with a hands-on, proactive approach who can work effectively across teams to drive privacy initiatives forward. — The role description, emphasizing the cultural and interpersonal fit expected.

This blend of legal expertise and business pragmatism is what sets top-tier privacy counsel apart from mere compliance managers. You must be able to say 'no' in a way that also offers a viable path forward, balancing risk with innovation.

Barcelona, Spain

Beyond the Salary: Perks and Culture at Glovo

Glovo's offering is as attractive as the role itself. The company prides itself on creating a vibrant, inclusive work environment, reinforced by a suite of benefits designed to support both personal and professional growth:

• Financial & Health: An enticing equity plan, top-notch private health insurance, and enhanced parental leave.
• Perks & Lifestyle: Monthly Glovo credit for your food cravings, discounts on transportation and food, kindergarten expenses, and discounted gym memberships.
• Work-Life Balance: The freedom to work from home two days a week, extra time off, and the opportunity to work from anywhere for up to three weeks per year.
• Mental Wellbeing: Online therapy and wellbeing benefits, plus an office-based nursery for those with young children.

The company culture is anchored on Leadership Principles that value both results and behaviors. Diversity is not just a buzzword; the posting explicitly encourages applicants to bring their authentic selves to work and even note their pronouns. For legal professionals who thrive in dynamic settings, this is a refreshing contrast to more staid corporate legal departments.

Conclusion: A Strategic Career Nexus

In a world where data privacy is increasingly at the center of public discourse and regulatory enforcement, the Privacy Counsel role at Glovo offers a prestigious platform to work on some of the most challenging and consequential legal issues of our time. It is not merely a job posting; it is an invitation to become part of a global movement that is defining how companies handle data responsibly in the digital age. For the right candidate, the potential for personal, intellectual, and professional growth is immense.

Frequently Asked Questions

1. What are the minimum qualifications required for the Privacy Counsel role at Glovo?

The minimum qualifications include a law degree (bachelor's or comparable), 2 to 3+ years of proven experience in data protection or privacy, and excellent English proficiency. Certifications like CIPP/E or CIPM are a plus, as is experience with online technology companies.

2. Is it necessary to speak Spanish to work at Glovo's Barcelona office?

Excellent English is required. Spanish, Polish, or German are listed as a plus, but not mandatory. This reflects the international nature of the team and the company's global operations. However, being able to speak the local language could be an advantage when dealing with local stakeholders or Spanish data protection authorities.

3. What is the career progression after this role?

Working as a Privacy Counsel in a global tech platform like Glovo opens doors to senior privacy roles, such as Senior Privacy Counsel, Data Protection Officer, Head of Privacy, or a move into broader legal leadership. The experience gained in AI governance and global regulatory exposure is highly sought after in the market.