Délégué à la protection des données (DPO)

Responsibilities

• Define, pilot, and maintain GDPR governance for the Altarea Group
• Update the processing register and map data treatments across all entities
• Identify and prioritize non-compliance risks and implement a compliance roadmap
• Manage personal data breaches and coordinate notifications to the CNIL
• Support business units (Real Estate, Marketing, Digital, HR, IT) in designing privacy-compliant projects
• Conduct Data Protection Impact Assessments (DPIA/AIPD) for high-risk processing
• Manage data subject rights requests (access, rectification, erasure, etc.)
• Validate GDPR clauses in contracts with partners, service providers, and IT vendors
• Act as an AI Referent, providing legal and ethical expertise for AI-integrated projects
• Deploy GDPR awareness and training plans for all employees

Requirements

• Master's degree (Bac +5) in Law, ideally specialized in Digital Law
• 5 to 10 years of experience in data protection
• Advanced knowledge of GDPR, ePrivacy, AI Act, DORA, and NIS2 regulations
• Familiarity with CNIL recommendations
• Ability to work in technical environments (CRM, IT systems, digital marketing)
• Understanding of cybersecurity issues and risk management
• DPO certification is a plus

About the Company

Altarea Group is both a developer and a property owner, present across the entire real estate value chain. With 2,000 employees, the Group innovates daily to develop urban neighborhoods that align with societal, ecological, and technological transitions.