Data Privacy Counsel

ZEEKR Europe; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

Zeekr Europe is seeking a Data Privacy Counsel to support the execution of our Data Privacy Strategy. You will advise internal teams on privacy by design, conduct DPIAs, RoPA reviews and data transfer assessments across EU markets, and help shape privacy policies for automotive data processing.

You will collaborate with IT security, product, and engineering teams to ensure rigorous privacy standards while supporting pan‑EU data privacy initiatives in a fast‑paced environment.

Qualifications

• 3+ years of data protection/privacy law experience, ideally combining law firm and in-house roles.
• Strong understanding of GDPR and EU privacy regulations.
• Experience with DPIAs, RoPA, and privacy-by-design reviews.
• Ability to collaborate with IT security, product and engineering teams.
• CIPP/E or similar EU privacy qualification desirable.

Responsibilities

• Conduct DPIAs for new projects or initiatives involving personal data.
• Provide guidance on privacy best practices and ensure regulatory compliance.
• Manage DSARs and other privacy inquiries from individuals/authorities.
• Perform DPIAs, RoPA, and privacy-by-design reviews for products and data flows.
• Draft and implement data privacy policies and vendor agreements.

Skills

Data privacy law

GDPR knowledge

DPIA experience

RSO/RoPA familiarity

Stakeholder management

Job description

The Company

We are Zeekr, built on a decade of European experience. We are a premium electric vehicle and technology solutions brand from Geely Holding Group, one of world’s largest automotive companies. Our goal and vision is to accelerate the shift to fully electrified mobility. We are committed to driving the future of transportation with cutting-edge technology and a customer-centric approach.

The role
As a Data Privacy Counsel, you will support the implementation of the ZEEKR Data Privacy Strategy, acting as data privacy specialist to support internal teams and help develop a privacy by design mind-set.
This is what you will do:

• Conduct data protection impact assessments (DPIAs) for new projects or initiatives involving the processing of personal data.

• Provide guidance to internal teams on data privacy best practices and ensure compliance with privacy requirements, measure process effectiveness, and develop action items to remediate identified risks.

• Manage and respond to data subject access requests (DSARs) and other privacy-related inquiries from individuals and authorities.

• Perform Data Protection Impact Assessments (DPIAs), records of processing activities (RoPA), and privacy-by-design reviews for new products, features, and vehicle data flows

• Manage Data Transfer Impact Assessments for EU cross-border personal data transfers.

• Draft and implement data privacy policies and procedures in accordance with applicable data protection laws and regulations.

• Draft, review and negotiate Data Processing Agreements.

• Develop and maintain internal privacy policies, notices, and training materials tailored to automotive and connected-vehicle data processing.

• Support data privacy audits (both internal and external audits).

• Partner with IT security, product, and engineering teams on privacy engineering matters and vendor due diligence.

• Support pan-EU Data Privacy team on data privacy matters across all EU markets.

To be successful in the role you will demonstrate:

• 3+ years of experience in of relevant experience in data protection/privacy law, ideally combining law firm and in-house experience in a technology companies.

• Good understanding and knowledge of the GDPR and data privacy legislation more generally.

• Good understanding of technology, SaaS and Cloud operations; familiarity with automotive, connected-device, or IoT data issues is a strong advantage.

• Comfortable working autonomously in a lean, fast-moving Data Privacy EU team and willing to build processes and templates from scratch.

• Strong stakeholder management skills, able to work with international teams (including a teams based in China) and non-legal business functions.

• Strong analytical skills, including the ability to assess risk and impact to individuals from a privacy and data protection perspective.

• Ability to be a team player who enjoys working within a global team.

• Ability to prioritize tasks and work to tight deadlines.

• CIPP/E or similar EU equivalent privacy qualification is desirable.

To thrive at Zeekr we believe that you have the courage to lead with trust and care and you don’t mind getting your hands dirty. You are highly innovative and have a great ability to adapt and perform in a constantly changing, fast-paced, highly demanding work environment. Like us, you believe it’s important to have a passion to work in an international and multicultural environment with the desire and ability to embrace the diversity of people, perspectives, and styles.