Data Protection Assignee with German Ref. No: 8245

Lufthansa Group Business Services is a 100 per cent Lufthansa subsidiary. We offer shared services worldwide for the entire Lufthansa Group in the areas of Finance, Business Intelligence & Transformation, Human Resources, Procurement and IT, which we provide or manage ourselves.

It’s our goal to harmonize and standardize processes and to continuously make them more efficient and effective. We see ourselves as pioneers in digitization, as well as in the use and distribution of the latest technologies, for example in business process automation.

As an internationally operating company, LGBS is represented at locations in Frankfurt, Hamburg, Krakow, Manila and Mexico City and manages BPO providers in Germany and abroad. With the global network of foreign representatives of the Lufthansa Group's field organization, we are also locally anchored and active worldwide.

Region: Kraków, małopolskie

---

Requirements:

• Strong knowledge of the process domain
• Knowledge of the legal framework applicable on data protection in the PD (EU General Data Protection Regulation)
• Basic knowledge of Information security and risk management
• Experience in constructions of process descriptions and creation of knowledge data bases
• Completed, subject-related master’s degree or equivalent knowledge and skills acquired through many years of relevant professional experience and advanced training measures
• Ideally good understanding of HR processes as well as IT-based HR solutions
• Fluent German and English
• Excellent communication skills
• Assertiveness, implementation competence und pragmatic skills
• Strong coordination and co-operation skills
• Confident appearance and highly independent and systematic approach to work
• Analytical and conceptual mindset
• Availability for business travel up to 20% working time

---

Responsibilities:

 The Data Protection Assignee is the extension of the controller (PDO or PO) and represents the data protection within the entire process domain: 

• Acts as a “Single Point of Contact” per process domain and all related data protection issues
• Implements and manages all data protection processes within the process domain HR Services as described in the data protection management system
• Supports the LHG DPM with implementing the governance and data protection strategy and objectives
• Implements interfaces to overarching processes to detect, handle and report relevant data breaches
• Implements adequate processes for compliant data processing and data transfers (with special focus on personal data)
• Consults Controller regarding data protection requirements
• Specifies, implements, and executes functional directives relevant for data protection
• Continuously collects relevant data protection issues, activities and incidents (highlights) and provide regular and ad-hoc reporting following the defined reporting scheme and defined KPIs
• Together with Data Protection Officer, cooperates with national data protection authorities (e.g. answer requests and handle complaints)
• In case of data breaches coordinates the information flow (and activities) within the process domain
• Ensures adequate training to Process Domain staff and create Data Protection know-how and awareness (e.g. by reusing/ adapting and amending centrally provided material)
• Consults in regards to the data protection topics in HR Services
• Assures trainings in regards to data protection topics in HR Services

---

We offer:

• Hybrid working model
• Opportunity to work from each part of Poland during remote work
• Flexible working time
• New branded and modern office: 200 adjustable desks, several types of meeting rooms, bike amenities, lounge rooms and chill out spaces, cozy kitchens and excellent public transport in a walking distance
• Continuous improvement environment
• Supportive & friendly working atmosphere - we work towards a joint success

---