Data Privacy Support m/w/d
Data Privacy Team

Based in Dusseldorf or Berlin

Diversify our future 
We are building a brand that represents the people of the world. It’s what you do that counts, and we are always looking to expand perspectives and voices to shape our future. 

We see you, we celebrate you, we want you!

Who we are
You might know us as the inventors of the bath bomb, but there’s more to this great-smelling, privately-owned and family-run company than pioneering cosmetics. We believe our business should put more back into the world than it takes and demonstrate that capitalism can be a force for good. We fight cruel practices like animal testing, promote regeneration, and show that what’s inside counts - whether that’s an ingredient in a product, or the minerals in a smartphone. 

Responsibilities

• Implementing a governance framework to manage data in compliance with local legislation, internal Lush Data Privacy requirements and the GDPR
• Review projects to ensure compliance with data privacy laws and where necessary, carrying out or assisting in privacy impact assessments
• Serving as the primary point of contact for the local data authority, the UK Data Privacy Team and the external DPO
• Serving as the primary point of contact for data queries from Lush Germany, Lush Austria and Lush Czech Republic
• Managing and reviewing vendor contracts on a rolling yearly basis
• Participating in Data Privacy governance
• Managing ongoing audit reviews and facilitating remediation projects
• Monitoring changes to local privacy laws
• Setting standards, reviewing policies and procedures to meet relevant guidelines
• Facilitating Data Privacy training for support, manufacturing and retail staff
• Developing strategies and initiatives to ensure engagement with key internal and external stakeholders
• Coordinating, conducting and monitoring privacy audits
• Collaborating to maintain records of all data assets and exports
• Maintaining a data security incident management plan to ensure timely remediation of incidents including impact assessments and making sure to report such incidents to the UK Data Privacy Team
• Responding to SARs and other data requests
• Ensuring the company IT systems and procedures comply with relevant data privacy and protection laws, regulations and policies
• Keeping evidential logs of activities carried out, including a record of data processing activities
• Promoting effective work practices and encouraging a culture of data privacy and security within the business

Skills and experience

• A good communicator, organised and self-motivated
• Ability to work independently with minimum supervision
• Ability to process requests quickly, especially with regards to legal matters such as security incidents and customer data requests
• Willing to learn lots of new skills and ability to learn on the job
• Note that some travel will be required
• Fluent in both German and English

The role
We encourage new ways of working and take our own perspective on data privacy and security and we hope those applying will bring fresh and innovative ideas to the role.

The candidate will be based in Germany and will be responsible for implementing and progressing Data Privacy requirements covering the German business in Dusseldorf and Berlin and also the Czech Republic and Austria.

Guidance will come from the UK based Data Privacy Department with access to an external DPO based in Germany.

What’s it like working for Lush
People are at the heart of our business. We want you to enjoy and challenge yourself, build a career, and teach us what we don’t know, so we’ve created a culture where your job description is a starting point, not an end goal. Our working style is flexible, fluid, supportive, and authentic - if you’ve got the drive to push yourself and try different things you will have our support.

If all this sounds like you, please send us your CV and covering letter, detailing why you want to become a part of the cosmetic revolution.

Employee perks

• 50% discount on Lush products and spa treatments
• Discretionary and profit-based bonus
• Pension scheme

As we pride ourselves on internal development, priority will be given to candidates who have an in-depth knowledge of Lush, coupled with the relevant experience, skills and approaches.

Closing date: 12th January 2020