(Senior) Legal Counsel, Privacy (d/f/m) at mobile.de

Why Privacy Counsel Is the Hottest Legal Role in Germany’s Digital Economy

Germany’s digital economy is evolving at breakneck speed, and at the heart of this transformation sits an uncomfortable truth: privacy compliance has become a boardroom issue, not just a legal checkbox. With the General Data Protection Regulation (GDPR) setting the global gold standard and the EU AI Act now demanding algorithmic accountability, companies like mobile.de — Germany’s largest online vehicle marketplace — are scrambling to embed privacy expertise directly into their business operations. That’s why the announcement of a (Senior) Legal Counsel, Privacy (d/f/m) role at mobile.de in Berlin isn’t just another job listing; it’s a signal of how deeply data protection has penetrated corporate strategy.

mobile.de isn’t a small startup. It’s a platform with over 1.6 million vehicles listed, 140 million visits per month, and a founding date stretching back to 1996. A subsidiary of Adevinda, the global classifieds giant, mobile.de operates at the intersection of e-commerce, mobility, and technology. When such a major player seeks a dedicated privacy counsel to take operational workload off their Data Protection Officer (DPO), it tells you that privacy is no longer a peripheral function — it’s a competitive advantage.

“We are looking for a passionate new team member to join us as a (Senior) Legal Counsel, Privacy (d/f/m). In this role you will serve as the primary day-to-day legal privacy expert at mobile.de, taking operational workload off the DPO and enabling the organisation to move quickly on privacy matters without sacrificing legal rigour.”

Inside the Role: What a Day-in-the-Life Actually Looks Like

Unlike traditional legal roles that focus on litigation or contract drafting, this position sits squarely inside the product and engineering ecosystem. You’re not just reviewing agreements; you’re advising on data flows, cookie consent frameworks, and even the architecture of AI systems. Let’s break down the core responsibilities that mobile.de expects you to own.

• Day-to-Day Privacy Advice: Act as the first port of call for Product & Technology, Marketing, Sales, and HR teams on all privacy questions. This reduces escalation volume to the DPO and lets the business move faster.
• Contract Negotiation: Draft and negotiate Data Processing Agreements (DPAs), Standard Contractual Clauses (SCCs), and privacy-related commercial clauses with vendors and partners.
• Product Compliance: Embed ‘privacy by design’ into the product development lifecycle. You’ll review new features, data flows, and technical architectures before they launch.
• Regulatory Monitoring: Keep a finger on the pulse of Germany’s DSK, BfDI, state-level DPAs, and the EDPB. Flag emerging risks and support the DPO during regulatory inquiries.
• Documentation: Maintain up-to-date Records of Processing Activities (ROPA) for German operations.

This is a role for someone who enjoys solving puzzles. You’re constantly balancing legal risk with commercial reality. For example, when the marketing team wants to deploy a new tracking pixel, you’re the one saying “yes, but here’s how we do it without violating the ePrivacy Directive.” It’s exhilarating for tech-savvy lawyers who love being part of the build, not just the cleanup.

The Legal Arsenal You Need: GDPR, ePrivacy, AI Act, and Beyond

Let’s talk qualifications because mobile.de isn’t asking for just any lawyer. They want a Volljurist/in (fully qualified German lawyer) or equivalent with at least four years of specialised experience in data protection. But the real differentiator? You need to understand the EU AI Act — a relatively new and complex regulation that governs artificial intelligence. This signals that mobile.de is already preparing for the next wave of compliance, making this role future-proof.

Here’s a checklist of what you must be comfortable with:

• GDPR and the German Bundesdatenschutzgesetz (BDSG)
• ePrivacy Directive and the German Telekommunikation-Telemedien-Datenschutz-Gesetz (TTDSG)
• EU AI Act and its risk-based framework
• Contract law, particularly DPAs and SCCs
• AdTech and cookie consent frameworks

If you’ve spent years in a traditional law firm drafting employment contracts, this is a different beast. You need to speak the language of engineers and product managers. “Privacy by design” isn’t a buzzword here; it’s a daily principle. That’s why mobile.de explicitly asks for practical experience advising product teams — not just theoretical GDPR knowledge.

Why This Job Is a Career Accelerator for In-House Counsel

Let’s be honest: not all legal roles are created equal. Many in-house positions are transactional and downstream. This one is transformative. You’re joining a company at the apex of the digital marketplace, where every day involves new technologies and evolving regulations. Here’s why this role could be the catapult your career needs.

First, you get to work directly with the DPO but also independently. You’ll have the autonomy to make decisions and give advice that shapes product launches. Second, mobile.de is owned by Adevinda, a global leader. That means exposure to international frameworks and the potential to move up within a multinational ecosystem. Third, the company is openly embracing AI — they mention an “AI-first mindset.” That’s a buzzword, but for a privacy lawyer, it means you’ll be at the leading edge of AI governance, one of the most sought-after skills in the legal job market globally.

“We're at the forefront of integrating cutting-edge AI technologies into our operations. Being part of mobile.de you will work with and learn about AI tools, contributing to projects that leverage AI to enhance efficiency, improve customer experiences, and drive our mission forward.”

Let’s not ignore the work-life balance perks either. The role is hybrid in Berlin-Charlottenburg, a trendy neighbourhood with excellent transport links. You’ll get a monthly transportation allowance, access to coaching and learning platforms, and even enhanced parental leave. For international lawyers, there’s the option to work abroad for a set number of days per year. And the competitive base salary plus incentive programs means you won’t be sacrificing earning potential for career growth.

How to Position Yourself as the Winning Candidate

You’ve seen the job description, and your palms are sweating. Good. But instead of panicking, let’s turn that anxiety into a strategic application plan. Based on the role’s requirements, here’s how you can stand out in a competitive pool of German privacy lawyers.

Polish Your “Privacy by Design” Evidence

You need to show specific examples where you embedded privacy into product development. Did you advise on a new app feature? Did you redesign a cookie banner? Did you conduct a Data Protection Impact Assessment (DPIA) for an AI system? Write these in your CV using the STAR method (Situation, Task, Action, Result). Numbers matter — if your work reduced legal escalation by 30%, say so.

Demonstrate German Regulatory Fluency

Simply mentioning GDPR isn’t enough. Reference decisions by the Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin’s DPA) or the latest EDPB guidelines. Show that you monitor the DSK resolutions. This proves you’re not just a reader of regulations but an active participant in the privacy community.

Brush Up on the EU AI Act

This is your differentiator. The AI Act imposes obligations on high-risk AI systems. mobile.de, with its AI-first mindset, will need to ensure its algorithms are compliant. If you can discuss the Act’s risk tiers, the concept of “General-Purpose AI,” and how it intertwines with GDPR’s right to explanation, you’ll instantly impress the interviewers.

Show Language and Communication Superpowers

The job requires full professional proficiency in German and English. Don’t just write “German: Native” — demonstrate you can negotiate a DPA in English and then explain the same clause to a German engineering team in simple words. Mention any cross-border experience you have.

Prepare for the “Cookie Wall” Interview

Expect practical questions about AdTech. For example: “We want to implement a new consent management platform. How would you approach it?” Be ready to discuss TCF (Transparency & Consent Framework) and the ePrivacy Directive’s consent requirement. Bring examples of how you balanced user experience with consent fatigue.

The Bigger Picture: Why This Role Matters Beyond mobile.de

Taking this job isn’t just about signing a contract with a familiar company. It’s about joining the vanguard of legal professionals who are redefining how law interacts with technology. In Germany, there’s a massive shortage of privacy lawyers who truly understand both the legal and technical realms. By stepping into this role, you’re positioning yourself as one of the rare few who can walk into any boardroom and speak about data flows, liability, and AI ethics with confidence.

Moreover, mobile.de is a company on the rise. With the shift toward online car sales and mobility services, privacy is central to customer trust. If you help build a robust privacy framework here, you can write your own ticket in the European tech legal market. Whether you stay for five years and rise to become Global DPO, or you move to a US tech giant, this experience will be a golden key.

Frequently Asked Questions

1. I’m a lawyer with a common law background (e.g., UK or US). Can I still apply?

Mobile.de explicitly asks for a “Volljurist/in or equivalent.” If you have a recognised legal qualification and deep GDPR experience, it’s worth applying. However, German national laws (BDSG and TTDSG) are heavily referenced, so you’ll need to demonstrate a willingness to upskill quickly. Fluency in German is non-negotiable — even if the team works in English, you’ll be dealing with German regulators and contracts.

2. What is the expected salary range for this position?

The job listing does not disclose a specific salary, which is common for senior in-house roles in Germany. However, based on market data for comparable legal counsel positions at tech companies in Berlin, you could expect a base salary between €90,000 and €130,000, plus bonuses, stock options, and benefits. The incentive programs at mobile.de likely add significant upside, but you’ll need to discuss this directly with the hiring team.

3. How can I get an interview if I don’t have direct product law experience?

Focus on transferable skills. If you’ve worked in data protection at a law firm with tech clients, highlight that. Create a “digital portfolio” — write a sample privacy review of a hypothetical app or a short memo on the EU AI Act’s impact on online marketplaces. This initiative shows exactly what the role demands. Networking on LinkedIn with current or former mobile.de lawyers can also give you a referral boost.

4. Is this role really only about privacy, or will I also handle commercial contracts?

The job description is clear: privacy is your primary domain, but contract work is a significant chunk. You’ll draft and negotiate DPAs and SCCs, which are commercial contracts with privacy implications. Over time, you may get involved in broader technology contracts. The role is designed to be the privacy expert, so expect to be pulled into any deal that touches personal data — which, in a digital marketplace, is virtually every deal.

In conclusion, the (Senior) Legal Counsel, Privacy role at mobile.de is not just a job opening; it’s an invitation to shape the future of privacy in Germany’s most visited vehicle marketplace. If you have the legal acumen, the technical curiosity, and the language skills, this could be the career-defining move you’ve been waiting for. Prepare your application with the strategies above, and remember: the deadline is not specified, so apply today before the 46 current applicants grow into hundreds.