Data Protection
Substantive Legal Experience
Legal Staffing
Mar 25, 2026


Information about the business and team
Our client is a global travel technology company listed on the Spanish Stock Exchange and headquartered in Madrid. The business supports airlines, airports, travel agencies and hospitality providers with market leading reservation, distribution, and IT solutions. Its legal function is extensive, with around 150 lawyers and compliance professionals across multiple jurisdictions, including Spain, France, Germany, Portugal, Argentina and Canada.

What does the client need help with?
A lawyer in the commercial/privacy team is moving internally into the privacy policy team, creating an immediate need for experienced privacy and commercial legal support while they reshape capacity.

What will the role involve?
You will support the commercial/privacy function with a broad mix of transactional, advisory and privacy-related work. The role reports into a Madrid based lawyer with strong privacy and Deloitte experience and interacts with teams spanning Spain, France, Germany and North America.

Responsibilities include:
  • Handling commercial contracts linked to core airline reservation systems
  • Taking the lead on negotiating and reviewing DPAs
  • Applying first line of defence principles across matters
  • Supporting transactional work and liaising with external counsel where local law input is required
  • Advising on privacy-by-design initiatives and ePrivacy matters
  • Getting involved in ad-tech issues where relevant
  • Reviewing AI products and helping put transparency frameworks in place
  • Partnering with teams such as Airport IT, Distribution and the incubator unit
  • Managing GDPR related queries and cross border negotiations, including with US providers
What skills do they need?
They are looking for a privacy-focused commercial lawyer with approximately 5+ PQE, ideally English qualified, with strong experience negotiating DPAs, understanding complex tech environments, and navigating GDPR, ePrivacy, AI governance and cross jurisdictional work. A background working closely with privacy and commercial teams in large tech-driven businesses would be valuable.

Working Pattern: Full time
Start Date: ASAP
Duration: 6 months
IR35 status: All models available