I applied online by submitting my CV - easy and quick. A few days later I heard back and scheduled the first interview for a day later. This conversation was primarily to discuss my CV and the specifics of the role. I got a good idea of what the job would look like and had a chance to demonstrate how my experiences and skills would fit in. Additional questions that I was asked were standard interview questions, e.g. about strengths and weaknesses, and generally, about my experience within the data privacy field. The second interview took place a few days after that. It was more subject-specific and focussed on my knowledge and understanding of data privacy. For example, I was asked about section in the GDPR, how they applied in practice, etc. Some of the questions were quite tricky, but the conversation with the interviewers felt very comfortable all they way through.