GDPR & Compliance
1 day ago
Madrid
About the Company ¿Interesado en saber más sobre este trabajo? Desplácese hacia abajo y descubra qué habilidades, experiencia y cualificaciones académicas se necesitan. OMODA Motors is a new brand built by Chery Group, which is a leading Chinese automobile company. OMODA operates individually from other brands of Chery Group. Its business scope covers the R&D, production and sales of passenger cars. Mission The position will be a GDPR & Compliance role and will form part of the Legal Department of Omoda Motors Spain, S.L.U., reporting directly to the Head of Legal. The role will also maintain a reporting line to the European Headquarters and an additional functional reporting line to the China Headquarters. Key Responsibilities • Monitor and ensure compliance with GDPR, local data protection regulations, and internal company policies., • Support the implementation, maintenance, and continuous improvement of the Company's Compliance Program., • Provide ongoing guidance to business units in the development of their initiatives and day-to-day activities involving the processing of personal data and new technologies., • Draft, manage and update data protection documentation, including Records of Processing Activities (RoPA), Data Processing Agreements (DPAs), agreements with third parties, legal reports, policies, guidelines, privacy notices, disclaimers and procedures., • Conduct compliance risk assessments, data protection risk assessments and Data Protection Impact Assessments (DPIAs), proposing appropriate mitigation measures where necessary., • Review data protection and compliance aspects of new suppliers, including the assessment of technical and organisational security measures., • Management of security breaches and risks, and implementation of controls., • Coordinate responses to data subject requests and support investigations related to privacy matters., • Deliver GDPR and Compliance training sessions to employees and promote awareness across the organization., • Collaboration with the global legal/compliance team in China and Europe on the implementation of GDPR and Compliance standards., • Manage and support internal and external audits, ensuring GDPR and Compliance requirements are properly documented and maintained. Requirements • Bachelor's Degree in Law and Master's Degree in Legal Practice., • Between 3-5 years of experience in Data Protection and Compliance., • Strong knowledge of GDPR and Spanish/EU data protection regulations., • Experience developing, implementing, or monitoring data protection and compliance programs., • Familiarity with compliance risk assessments, audits, and internal control frameworks., • Experience technical and organisational security measures under the GDPR, IT systems or digital projects will be highly valued., • Ability to interpret regulations and translate them into practical business processes., • Strong analytical, organizational, and problem-solving skills., • Excellent communication and stakeholder management abilities., • Fluent in Spanish and English. Equal Opportunity Statement We are committed to fostering a diverse and inclusive workplace where everyone feels valued, respected, and empowered to contribute to their fullest potential. We inform you that OMODA MOTORS SPAIN S.L.U, a company with its registered office in Modulo 1 de la planta baja, Avda. Brusuelas 36, 28108, Alcobendas, Madrid, with CIF B56485493 (hereinafter referred to as the "Company"), will process your personal data on the basis of your express consent for the purposes of managing your job application. Your personal data will be transferred to Chery Automobile Co. Ltd (parent company of the Group), a company based in China, in order to carry out the process you have voluntarily requested. As stated in the European Data Protection Regulation (GDPR), we inform you that the Personal Information Protection Law of the People's Republic of China (PIPL) may conflict with the GDPR and in some scenarios. Your personal data will be kept for 2 years and then delete. Additionally, you may exercise your data protection rights (access, rectification, opposition, cancellation, etc.) by sending an e-mail to indicating the right you wish to exercise and your identification details. xcskxlj If you consider that we have not handled your personal data appropriately, you may contact the Data Protection Officer at However, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that there has been a breach of data protection legislation with regard to the processing of your personal data.