Full Opportunity Brief

In the rapidly evolving landscape of global data protection, few roles offer the blend of strategic influence, cross-border complexity, and high-visibility impact as the Privacy Counsel position at Glovo, now open in its Barcelona office. As a key member of the Delivery Hero Group — one of the world's pioneering local delivery platforms operating in over 70 countries — this role invites a legal professional not just to interpret privacy law, but to shape the responsible growth of a technology superpower. This in-depth guide breaks down everything you need to know about the opportunity, from the required skill set to the day-to-day responsibilities, and provides actionable strategies to help your application stand out in a highly competitive field.

Why This Privacy Counsel Role at Glovo Is a Career-Defining Move

The role is far from a routine compliance desk job. It sits at the intersection of law, technology, and business strategy, within the general Data Protection Team of the Delivery Hero Group. For privacy lawyers looking to pivot from traditional law firms or siloed corporate roles into the heart of the tech economy, this is a golden ticket. Glovo operates in numerous jurisdictions, each with its own regulatory nuances, meaning you will constantly be applying the General Data Protection Regulation (GDPR) alongside a patchwork of national laws and emerging AI governance frameworks.

Moreover, the role is set against the backdrop of the booming digital platform economy. Food delivery, quick commerce, and logistics generate massive amounts of personal data — from location data and payment information to consumer behavior insights.



Protecting that data is not merely a legal obligation; it is central to preserving customer trust and maintaining Glovo's competitive edge. As a Privacy Counsel, you become the guardian of that trust, working alongside diverse teams to embed privacy into every new product and initiative from the ground up.

Inside the Day-to-Day: What You'll Actually Do as Privacy Counsel

The job description reveals a multifaceted position that goes far beyond boilerplate policy reviews. Here are the core responsibilities that define the role:

- Privacy Advisory Under GDPR and Global Frameworks: You will provide legal advice on data protection matters under global frameworks such as the GDPR, helping internal stakeholders navigate complex regulatory requirements while still achieving business objectives.
- Contracting and Risk Management: A significant part of your work will involve drafting and negotiating Data Processing Agreements (DPAs) and intra-group data transfer agreements. You will also conduct privacy due diligence when onboarding third-party service providers, a task that has become increasingly critical in today's interconnected ecosystem.
- Data Mapping and Impact Assessments: You'll support the data mapping process and documentation of data processing activities, including conducting Data Protection Impact Assessments (DPIAs) for high-risk projects.
- Policy Development: You'll develop, implement, and maintain global privacy and data protection policies, notices, and internal procedures,



ensuring they are practical, up-to-date, and aligned with regulatory expectations.
- Regulatory Engagement and Audits: The role includes conducting privacy maturity audits, handling investigations or fine-related proceedings with data protection authorities, and crafting strategic mitigation plans. This is an opportunity to directly engage with regulators and shape remediation strategies.
- AI Governance: In a forward-looking move, Glovo explicitly requires monitoring ongoing developments around AI governance and contributing to the improvement of AI governance frameworks. This positions the role at the cutting edge of an area that is set to explode in the coming years.

This variety ensures that no two days will feel the same. One day you might be negotiating a complex data transfer agreement with a major tech vendor; the next, you could be briefing senior management on a new AI directive. The role demands a high level of adaptability and a willingness to roll up your sleeves.

The Candidate Profile: What Glovo Is Looking For

Glovo has outlined a clear set of qualifications for the ideal candidate. While it is an intermediate-level position, they are looking for someone with solid foundational experience and a proactive mindset. Key requirements include:

- Educational Background: A law degree (bachelor's or comparable degree) is required, setting a professional baseline.
- Professional Experience: Proven experience (2 to 3+ years) in data protection / privacy or related areas. This is not an entry-level role; you're expected to hit the ground running.
- Certifications: Certified expertise on EU privacy laws such as IAPP CIPP/E, CIPM, or TÜV DPO is considered

📌 Privacy Counsel at Glovo, Barcelona
🏢 Glovo (part of Delivery Hero Group)
📍 Barcelona