Created in 2003, Smartbox is the French and European number 1 in experience gifts, with 6.5 million boxes sold each year and around €350 million annual turnover. For more than 20 years, we have been developing thousands of experiences and an equal number of unforgettable moments to live — from the most iconic to the most unique, covering stays, adventures, well-being and gastronomy.

Smartbox’s mission has always been to enable everyone to gift their loved ones the opportunity to live unique experiences. In the short future, we want to be the point of reference when it comes to inspiring people to live experiences. We are at a tipping point in terms of innovation on our market.

The group employs 800 people across Europe. Smartbox gift boxes are sold in 10 European countries: France, Italy, Spain, Belgium, Switzerland, the Netherlands, Denmark, Sweden, Portugal and Germany. Pioneer in the sector and number 1 in most of these countries, we rely on a network of approximately 150 partner retailers throughout Europe — 18,000 major points of sale — and distribute through the websites of our various brands and online distributors such as Amazon. One of the keys to our success has been building a network of 30,000 partners in Europe.

The Group has been owned since 2013 by Otium Capital, which has supported more than 50 start-ups and innovative companies. More than just a box, Smartbox has been one of the biggest success stories in the industry over the last 20 years.

The Team:

The Smartbox Group Legal and Data Protection teams are small but high-performing groups based in Dublin and Paris. The Data Protection team manages privacy and data protection matters for all countries across Europe, providing trusted advice to keep Smartbox’s partners’, customers’ and employees’ data safe. We are dedicated to building diverse and open teams where employees are valued for their contributions, perspectives and opinions.

The Role:

This Privacy Specialist role will report to Smartbox’s Senior Legal Counsel and Data Protection Department Manager based in Dublin. The successful candidate will:

Collaborate with our Legal and Data Protection teams in identifying and driving the appropriate strategies and procedures to ensure Smartbox’s regulatory obligations across Europe are met
Translate complex privacy and AI laws into practical advice for Smartbox’s Acquisition, Contracting, Marketing, CRM, Content and Employment teams as they shape the growth of our online platforms and employee experience
Drive initiatives across the organisation as we develop a world-class privacy programme

The position is based in Dublin, Ireland. The company operates a hybrid model with a mix of home and office working.

Key Responsibilities:

Provide frontline privacy and data protection support to business stakeholders throughout Smartbox
Partner with business stakeholders, understand business needs, analyse privacy and data protection regulations, determine requirements, identify risks and implement business-minded solutions
Ensure data privacy risks are considered at the outset of new projects; lead privacy impact assessments, evaluate risks and propose mitigating controls
Update records of processing, maintain data mapping and data inventory
Be responsible for the fulfilment of data subject rights requests
Support the investigation, resolution and reporting of data privacy complaints and incidents
Support periodic audits of the effectiveness of controls and risk capture mechanisms
Support the development of privacy-related policies, notices and guidance
Support the development and implementation of scalable privacy and data protection processes and initiatives, including data retention policies, privacy impact assessments, data inventories, vendor controls and data subject requests
Develop and deliver privacy and data protection training and education initiatives
Identify opportunities to automate compliance activities and develop AI-assisted workflows to improve efficiency
Keep informed on global privacy and data protection trends, legislation, and Data Protection Supervisory Authority decisions and guidance

Requirements & Experience

Qualifications & Knowledge:

Post-secondary education with a focus on legal, risk, compliance or public policy matters
Knowledge of privacy laws and principles including the GDPR and e-Privacy; IAPP or other privacy certifications an advantage

Experience:

1–3 years’ experience in a privacy, legal or compliance role (all levels of experience will be considered), such as privacy operations, online operations, vendor risk management or legal support
Familiarity and comfort with Data Subject Rights
Experience working with vendors and conducting privacy impact assessments
Familiarity with data transfer protocols and knowledge of the ways apps interact with and store data
Experience working with teams across multiple jurisdictions and cultures
Fluent spoken and written English; additional European languages an advantage

Skills & Attributes

Skills:

Strong communication skills with the ability to influence effectively across a diverse range of stakeholders, negotiate, collaborate and effect change at all levels
Ability to understand a technology-driven business
Ability to work independently and at pace, willing to share perspectives and support colleagues
Outstanding organisational and time management skills; ability to manage competing priorities in a fast-paced environment
Flexible, open-minded, adaptable, creative and solution-driven

What We Look For:

We value ‘solution-seekers’ rather than ‘problem spotters’ — people with an enthusiastic, positive and proactive attitude who believe we can always find ways to do things better. We love a good sense of humour and vibrant energy. You will also:

Have exceptional communication and organisational skills with the ability to multitask and deliver to deadlines
Be creative and innovative — able to spot new trends and develop an action plan
Balance attention to detail with swift execution
Be inquisitive and always learning
Demonstrate a high level of integrity and professionalism
Be a genuine team player, committed to supporting the team in achieving its goals

Data Privacy Specialist (6 Month Fixed-Term Contract)

Job Description