Key Skills

Job Description

The Company We are Zeekr, built on a decade of European experience. We are a premium electric vehicle and technology solutions brand from Geely Holding Group, one of world’s largest automotive companies. Our goal and vision is to accelerate the shift to fully electrified mobility. We are committed to driving the future of transportation with cutting-edge technology and a customer-centric approach. The role As a Data Privacy Counsel, you will support the implementation of the ZEEKR Data Privacy Strategy, acting as data privacy specialist to support internal teams and help develop a privacy by design mind-set. This Is What You Will Do Conduct data protection impact assessments (DPIAs) for new projects or initiatives involving the processing of personal data. Provide guidance to internal teams on data privacy best practices and ensure compliance with privacy requirements, measure process effectiveness, and develop action items to remediate identified risks. Manage and respond to data subject access requests (DSARs) and other privacy-related inquiries from individuals and authorities. Perform Data Protection Impact Assessments (DPIAs), records of processing activities (RoPA), and privacy-by-design reviews for new products, features, and vehicle data flows Manage Data Transfer Impact Assessments for EU cross-border personal data transfers. Draft and implement data privacy policies and procedures in accordance with applicable data protection laws and regulations. Draft, review and negotiate Data Processing Agreements. Develop and maintain internal privacy policies, notices, and training materials tailored to automotive and connected-vehicle data processing. Support data privacy audits (both internal and external audits). Partner with IT security, product, and engineering teams on privacy engineering matters and vendor due diligence. Support pan-EU Data Privacy team on data privacy matters across all EU markets. To be successful in the role you will demonstrate: 3+ years of experience in of relevant experience in data protection/privacy law, ideally combining law firm and in-house experience in a technology companies. Good understanding and knowledge of the GDPR and data privacy legislation more generally. Good understanding of technology, SaaS and Cloud operations; familiarity with automotive, connected-device, or IoT data issues is a strong advantage. Comfortable working autonomously in a lean, fast-moving Data Privacy EU team and willing to build processes and templates from scratch. Strong stakeholder management skills, able to work with international teams (including a teams based in China) and non-legal business functions. Strong analytical skills, including the ability to assess risk and impact to individuals from a privacy and data protection perspective. Ability to be a team player who enjoys working within a global team. Ability to prioritize tasks and work to tight deadlines. CIPP/E or similar EU equivalent privacy qualification is desirable. To thrive at Zeekr we believe that you have the courage to lead with trust and care and you don’t mind getting your hands dirty. You are highly innovative and have a great ability to adapt and perform in a constantly changing, fast-paced, highly demanding work environment. Like us, you believe it’s important to have a passion to work in an international and multicultural environment with the desire and ability to embrace the diversity of people, perspectives, and styles. Apply today, we will perform ongoing selection during the application period. We look forward to hearing from you. Please note that due to GDPR regulations we can only accept applications sent through the recruitment system, not via email or other channels. We do not accept applications submitted by external recruitment companies.

Core Responsibilities

Support implementation of the company’s data privacy strategy by advising internal teams and embedding privacy by design in products, projects, and vehicle data flows. Conduct privacy assessments, manage data subject requests and cross-border transfer reviews, draft and negotiate privacy documentation, support audits, and collaborate with technical teams across EU markets.

Requirements

At least three years of relevant data protection or privacy law experience is required, ideally combining law firm and in-house work in technology companies, along with strong GDPR knowledge. Candidates should understand technology, SaaS, and cloud operations; automotive or IoT privacy experience and a CIPP/E or equivalent qualification are advantageous, as are analytical, communication, and prioritization skills.