Salonkee In-house Legal Counsel at Salonkee responsible for legal and compliance work across six markets. Manages contracts, privacy, employment, security, and advises leadership on regulatory and strategic matters.
Responsibilities
As our first in-house lawyer, you'll own Salonkee's legal and compliance work across six markets and build the function as we grow. It's a hybrid, hands-on role: contracts, privacy, employment and security topics, often in the same week. You'll work with every team, alongside our outside law firms and our external data protection officer (DPO).
What you will be doing
Data protection: lead our privacy programme under the GDPR and Swiss data protection law with our external DPO, including our sub-processor list and contact with data protection authorities.
Security and privacy: partner with head of departments on privacy reviews of new tools and internally built apps, and lead the legal side of incident response.
Policies and training: write and maintain our internal rules on customer data and AI use, and train our teams from Sales to Customer Support.
Digital regulation: advise on EU rules for platforms, consumers and AI, including the Digital Services Act, the AI Act, the Data Act and NIS2.
Contracts: own our standard terms and negotiate partner, supplier, payment and enterprise agreements.
Employment: advise HR and managers on labour law across our markets.
Disputes: handle claims and disputes, working with outside counsel when needed.
Strategy: advise leadership on new products, new markets and fundraising, and track new law.
Salonkee is an equal-opportunity employer. We are committed to building a diverse and inclusive team, and we encourage applications from individuals of all backgrounds, perspectives, and abilities. Together, let's create an environment where everyone feels valued, respected, and empowered to bring their authentic selves to work.
Qualification
Hands-on GDPR experienceKnowledge of EU digital rules (DSAFluent EnglishA pragmatic generalist
Required
A qualified lawyer with 5+ years' experience in a tech-focused law firm or in-house legal team.
Hands-on GDPR experience, including regulator contact, and strong commercial contract skills, ideally in SaaS.
Knowledge of EU digital rules (DSA, AI Act, NIS2) or security frameworks such as ISO 27001 is a plus.
Experience across several European countries.
Fluent English, plus fluent French or German.
A pragmatic generalist: you switch easily between topics, talk data flows with engineers and give clear, risk-based answers in plain words.
Preferred
Knowledge of EU digital rules (DSA, AI Act, NIS2)
Knowledge of security frameworks such as ISO 27001
