Data Protection Group Coordinator Miejsce pracy: Gdańsk Technologies we use Operating system Windows Your responsibilities Ensuring Compliance: • Monitor compliance with GDPR, national laws, and internal policies across all subsidiaries • Provide expert guidance to leaders and teams on data protection obligations • Review and approve key documentation such as privacy notices, DPAs, consent forms, and internal policies Training and Awareness: • Develop and deliver training programmes tailored to various audiences • Increase awareness through targeted internal communication campaigns • Embed a privacy-first mindset at every level of the organisation Data Protection Impact Assessments (DPIA): • Advise and oversee DPIAs for new initiatives and systems • Ensure privacy-by-design and privacy-by-default principles are consistently applied • Recommend mitigation strategies to reduce privacy risks Cooperation with Supervisory Authorities: • Serve as the primary point of contact for Data Protection Authorities • Manage regulatory inquiries, audits, and related documentation • Ensure transparent and timely reporting obligations are fulfilled Incident and Breach Management: • Lead the assessment and investigation of data incidents and breaches • Determine notification requirements under GDPR Articles 33 and 34 • Follow up on corrective and preventive measures to strengthen resilience Recordkeeping and Auditing: • Maintain and update the Record of Processing Activities (RoPA) for Group entities • Conduct regular compliance assessments and internal audits • Prepare dashboards, reports, and recommendations for senior leadership Advisory Role in Projects: • Support business and IT teams to integrate privacy requirements in all projects • Review third-party agreements and ensure adequate contractual safeguards • Harmonize privacy practices across countries in alignment with Group standards Reporting and Governance: • Provide periodic reporting to senior management and governance bodies • Support strategic privacy initiatives and compliance maturity efforts • Contribute to risk management and corporate governance frameworks Our requirements Qualifications and Experience: • University degree in Law, Information Security, Compliance, or a related field • Postgraduate studies in Data Protection or IT Law are an asset • 3–5 years of experience in data protection, compliance, legal, or information security roles • Experience in multinational or group-level environments is preferred • Professional privacy certifications (e.g., CIPP/E, CIPM, CIPT) are a strong advantage • Solid understanding of GDPR, national privacy laws, and core information security principles Languages: • Excellent command of English • Additional European languages are a plus Key Competencies: • Strong analytical capabilities and structured problem-solving skills • Clear and confident communication with diverse stakeholders • High ethical standards, integrity, and discretion • Ability to work independently and navigate multi-country environments • Strategic thinking combined with operational attention to detail • Confidence in advising senior management and engaging with regulators Reporting Line and Independence: • Reports to the Head of IT Risk Governance and Compliance • Operates independently with no conflict of interest in fulfilling DPO-related responsibilities • Provided with the necessary authority, access, and resources to perform effectively Development opportunities we offer development budget external training intracompany training mentoring soft skills training substantive support from technological leaders technical knowledge exchange within the company What we offer An office in a great location, close to the SKM station and a tram stop A modern office offering great features, including access to a rooftop terrace with a view Opportunity to work in an international company Open-access soft skills workshops Language classes during working hours Internal and external training sessions An environment that encourages the development of your ideas Team-building events (Summer Party, Christmas Party) Holiday gifts (prepaid cards and payroll bonuses) Benefits sharing the costs of sports activities private medical care sharing the costs of foreign language classes sharing the costs of professional training & courses life insurance flexible working time integration events holiday funds christmas gifts Lyreco Advantage We are a part of Lyreco – a leading distributor of workplace products and solutions in Europe and around the world. We operate as Lyreco Group with Central Competence Services (IT, eCommerce, Customer Experience, Merchandising, Supply Chain Planning and Finance) in France, Poland and The Netherlands. Altogether, driven by our common strive for passion, excellence, respect and agility, we are constantly looking to innovate and evolve so that our employees, customers and business continue to grow and develop. We believe in a culture that inspires our employees to be the best they can be. Through a perfect blend of people, technology and our corporate social responsibility strategy, we commit to deliver a Great Working Day for all. By clicking "Submit" you consent to the processing by Lyreco Advantage Polska Sp. z o.o. (ul. Aleja Grunwaldzka 472D, 80-309, Gdańsk, Poland) and its European partners (hereinafter referred to as Lyreco) of your data contained in the recruitment application to recruit for the position indicated in the advertisement.We process your data indicated in the Labor Code or other specific acts (according to the requirements of the advertisement) based on legal provisions and their submission is necessary to participate in recruitment. We process other personal data (e.g. an image) based on your voluntary consent, which you expressed by sending us your recruitment application and their submission does not affect the possibility of participating in recruitment.Your application and information, including “Personal Data”, provided while using this website will be kept confidential and will only be used by Lyreco to conduct the applicants application/recruitment process, human resources analysis and employment purposes. Unless otherwise required by law, Lyreco will disclose your data only to those entities commissioned by the employment verification service or entities that provide Lyreco with human resources services, advertisements, IT service providers such as hosting and IT system suppliers, however, always under the conditions of confidentiality. Lyreco will not sell your personal information for use by any other company without your prior consent.Only Lyreco employees involved in the application and recruitment processes will have access to the information provided. BY PROVIDING YOUR INFORMATION TO LYRECO THROUGH THIS WEB SITE, YOU EXPRESSLY AGREE, UNDERSTAND AND AGREE THAT STAPLES MAY USE THIS INFORMATION TO CONDUCT FOR APPLICATION / REQUEST FOR APPLICATION. THIS INCLUDES:Sharing this information with various managers and supervisors at Lyreco;Use of this information to evaluate your candidacy for a position at Lyreco;Disclose this information to managers or supervisors at Lyreco who may hold a position for which you appear to be qualified. This includes the possible disclosure of this information to managers or supervisors at Lyreco;If you receive a job offer, your data may also be shared with Lyrecos hiring agent;Use of this information to comply with reporting requirements on job applicants and employees, as required by law.If at any time you would like Lyreco to stop contacting you about possible vacancies, please send an email to LM.TA&D@lyreco.com.If at any time you want to access, modify or delete your data, you can do so by contacting the Recruitment Department by sending an e-mail to LM.TA&D@lyreco.com.If any personal information you have provided to us needs to be changed, please inform Lyreco accordingly.We process your data to recruit for the position indicated in the advertisement for 12 months, and when you have consented to participate in future recruitment for 24 months.Consents are voluntary and do not affect the possibility of participating in recruitment. You can withdraw your consent at any time by sending an e-mail to LM.TA&D@lyreco.com, which does not affect the lawfulness of the processing carried out before the withdrawal of consent.