Dominik Ertl

Head of Product | Digital Experience & Self-Service Platforms | Regulated Markets | Enterprise Scale | AI-Ready Products

I build and scale digital experience and self-service platforms in regulated environments, making complex products easier to discover, use and service, with governance and compliance built in from the start.

Open to Head of Product or Director roles, available immediately. Currently exploring the next senior product or platform leadership opportunity.

Leadership Snapshot

With over 18 years in digital product development, I have built and scaled platforms across enterprise software, financial services (insurance), marketing technology, SaaS, marketplaces, and e-commerce. I focus on uniting product, UX, engineering, and data to simplify complex environments and enable faster, safer, and more consistent delivery. Most recently at Allianz Technology, I led a cross-functional product and UX organisation of around 30 FTE across Europe and Asia, with budget and service pricing responsibility for a group-wide digital experience and design system platform used by teams in regulated markets.

Experience at a Glance

Over 18 years in product and platform leadership across enterprise software, insurance, martech, e-commerce, and SaaS in regulated environments.
Led cross-functional teams across Europe and Asia in complex, regulated organizations.
Specialized in platform scaling, UX-led transformation, and AI enablement in regulated environments.
Delivered platform foundations that improved adoption, delivery speed, and compliance readiness.
Connects product, UX, and engineering through outcome-driven roadmaps, design systems, and agile ways of working.

Professional Achievements

Led the transformation of a group-wide digital experience and design system platform at Allianz Technology, helping drive around 10× higher adoption of shared and reusable capabilities and roughly 50% efficiency gains in UX and frontend delivery across Allianz entities worldwide.
Scaled a product-led operating model for internal platform and design services, reducing friction between teams and improving reuse.
Helped shape AI/GenAI initiatives such as RAG-based assistants and content automation as pilots and prototypes, always aligned with GDPR, DORA and EU AI Act governance.
Modernized an e-commerce platform during post-acquisition integration at posterXXL, enabling experimentation, scalability, and group-wide standards.
Drove the 7-year evolution of a single-channel email solution into a multichannel SaaS marketing automation platform at Mapp Digital.
Helped launch new marketplace and mobile experiences at AutoScout24, extending the core business model and improving usability.

Core Competencies

My work typically centers on a few core areas that create leverage in complex product organizations:

AI-ready platforms & governance enablement: Practical experience with Retrieval-Augmented Generation (RAG), relevant AI patterns and building AI literacy and governance so digital experience platforms remain usable and compliant in regulated environments.
Product & Platform Leadership: Defining vision, scaling SaaS platforms, and aligning product, UX, and technology to deliver measurable business outcomes.
Experimentation & Data-Driven Growth: Applying research, customer insights, and A/B testing to improve adoption, efficiency, and user experience at scale.
Compliance & Trust: Delivering platforms aligned with EU AI Act, GDPR, and DORA, ensuring privacy-by-design and audit readiness in regulated environments.
Global Leadership & Collaboration: Leading cross-regional teams, driving agile transformation, and building strong partnerships with vendors and stakeholders.

Professional Journey

Head of Product Design & Optimization (Enterprise Platform Leadership)

Allianz Technology SE · 2020–2025
At Allianz Technology, I led product and UX for a group-wide digital experience and design system platform, delivered in close partnership with engineering and architecture leadership. Allianz markets used it as a shared foundation for customer and distribution journeys, portals, and internal expert tools. The platform combined design system implementation, reusable UX and frontend building blocks, and standardised integration patterns to core insurance systems, enabling teams to deliver journeys faster and more consistently. I led a cross-functional organisation of around 30 FTE across Europe and Asia, with budget and service pricing responsibility in the low seven-figure range.

Vice President of Product

posterXXL · 2019–2020
At posterXXL, I led product strategy, roadmap and GTM for a high-volume B2C e-commerce platform with P&L accountability. I managed cross-functional teams spanning product, UX, research, and data, and worked to align the platform with the broader Photobox Group strategy after acquisition.
My focus included modernizing the user experience, introducing experimentation frameworks to guide growth, and co-leading a platform transition during the merger to improve scalability and vendor collaboration. These efforts delivered measurable improvements in conversion and retention in an M&A and PE-backed context.

Senior Product Manager, Team Lead

Mapp Digital (formerly Teradata) · 2012–2019
At Mapp Digital, I built and led cross-regional product and UX teams in Germany, Poland, and the U.S. I helped drive the 7-year evolution from a single-channel email solution into a unified multichannel marketing automation platform with integrated analytics.
I built the UX design function from scratch and helped embed agile and design thinking practices across distributed teams.

Product Manager

AutoScout24 · 2008–2012
At AutoScout24, I helped establish the company’s first UX team, embedding user-centered design practices during its agile transformation. I led UX for the launch of a new after-sales marketplace, extending the core business model and integrating it into the automotive platform.
I also co-developed early mobile design standards for Scout24 Group, creating intuitive, touch-optimized interfaces that shaped its first smartphone experiences and informed later design system work.

Co-Founder

SEGIN (Startup) · 2007–2008
I co-founded a location-based B2B2C mobile services startup, taking responsibility for early product strategy, user experience design, and MVP development. The venture was supported by the Strascheg Center of Entrepreneurship and funded through the competitive EXIST grant from the German Federal Ministry of Economic Affairs and Energy.
We developed proximity-based mobile content services that combined early mobile UX with location technology, enabling targeted engagement and initial partner integrations.

Education & Certifications

Dipl.-Ing. (FH), Cartography & Geo-Media Technology – Munich University of Applied Sciences
Focus: Information Management, UX Design, Data Engineering, Computer Science
Exchange Program – RMIT University, Melbourne
Studies in Geospatial and Mathematical Sciences
Certified Scrum Product Owner (CSPO) – Scrum Alliance
Executive Product Management – Silicon Valley Product Group (Marty Cagan)
EU AI Act & High-Risk AI Systems – Fraunhofer IKS
AI Ethics & Compliance – Oxford Saïd Business School
AI Product Management – Miqdad Jaffer / OpenAI
EXIST Founder Scholarship – Federal Ministry of Economic Affairs and Energy (BMWi) & Forschungszentrum Jülich
Competitive year-long entrepreneurship grant providing structured training in scalable product innovation and startup operations
Lecturer (Part-Time) – Munich University of Applied Sciences
Lectured a credited course in application development, where students built and released software used in a live event setting

Worked with:

Partnered with global enterprises and SaaS scale-ups to deliver platform growth, advance UX, and explore AI adoption and transformation.

Developed and Shaped Skills:

Built expertise through international programs in Generative AI, UX, agile product leadership, and strategic innovation, among others.

Datenschutzerklärung - Privacy Policy

Diese Datenschutzerklärung informiert über Art, Umfang und Zweck der Verarbeitung personenbezogener Daten auf dieser Website gemäß Art. 13, 14 DSGVO. Hinweise zu Cookies und ähnlichen Technologien richten sich nach § 25 TDDDG.
This privacy policy provides information about the type, scope and purpose of the processing of personal data on this website in accordance with Art. 13, 14 GDPR. Information on cookies and similar technologies follows Section 25 TDDDG.

Verantwortlicher für die Datenverarbeitung - Data Controller

Dominik Ertl
Staltacher Str. 30A
82393 Iffeldorf
Deutschland / Germany

Kontakt / Contact: [email protected]

Arten der verarbeiteten Daten - Types of data collected

Diese Website verarbeitet ausschließlich für Betrieb und Sicherheit erforderliche Daten: IP-Adressen, Verbindungs- und Nutzungsdaten (z. B. HTTP-Header, User-Agent, Zeitstempel), technisch notwendige Cookies/Sicherheitskennwerte sowie Browser-Informationen.
This website processes only data necessary for operation and security: IP addresses, connection and usage data (e.g., HTTP headers, user agent, timestamps), strictly necessary cookies/security signals, and browser information.

Die vollständigen Details zu den hier stattfindenden Verarbeitungen finden sich in den nachstehenden Abschnitten. Personenbezogene Daten können vom Nutzer freiwillig bereitgestellt oder bei Nutzung dieser Website automatisch erfasst werden. Es werden keine Analyse- oder Marketing-Tools eingesetzt.
Further details on the processing carried out on this site are provided below. Personal data may be provided voluntarily by the user or collected automatically when using this website. No analytics or marketing tools are used.

Art und Ort der Datenverarbeitung - Mode and place of processing

Verarbeitungsmethoden - Methods of processing

Der Verantwortliche ergreift angemessene technische und organisatorische Maßnahmen, um unbefugten Zugriff, Offenlegung, Änderung oder Zerstörung von Daten zu verhindern. Die Verarbeitung erfolgt mittels IT-Systemen nach zweckgebundenen Verfahren.
The controller implements appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration or destruction of data. Processing is performed by IT systems following purpose-bound procedures.

Ort der Verarbeitung - Place of processing

Die Daten werden in den Betriebsstätten des Verantwortlichen und an Orten verarbeitet, an denen sich an der Verarbeitung beteiligte Dienstleister befinden.
Data is processed at the controller’s operating facilities and in locations where the service providers involved in processing are located.

Je nach Standort des Nutzers können Datenübermittlungen die Übertragung in ein anderes Land als das eigene beinhalten.
Depending on the user’s location, data transfers may involve transferring data to a country other than their own.

Hosting

Wir hosten die Inhalte unserer Website bei folgendem Anbieter:
We host the contents of our website with the following provider:

Externes Hosting - External Hosting

Diese Website wird extern gehostet. Die auf dieser Website erhobenen personenbezogenen Daten (insb. IP-Adressen, Verbindungs- und Metadaten, Nutzungsdaten) werden auf den Servern des Hosters gespeichert.
This website is externally hosted. Personal data collected on this website (in particular IP addresses, connection/metadata, usage data) is stored on the host’s servers.

Rechtsgrundlage: Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse an einem sicheren und zuverlässigen Betrieb).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

Datenübermittlungen in die USA an den Hoster erfolgen auf Grundlage der EU-Standardvertragsklauseln (SCC).
Transfers to the USA to the host are based on the EU Standard Contractual Clauses (SCC).

Den vollständigen Wortlaut der SCC können Sie hier einsehen:
Entscheidung (EU) 2021/914 – Standardvertragsklauseln You can view the full text of the SCC here:
Decision (EU) 2021/914 – Standard Contractual Clauses

Wir verwenden folgenden Hoster:
GitLab Inc.
268 Bush Street, Suite 350
San Francisco, CA 94104

Speicherdauer - Retention time

Sofern in diesem Dokument nicht anders angegeben, werden personenbezogene Daten nur so lange verarbeitet und gespeichert, wie es für die jeweiligen Zwecke erforderlich ist. Server-Logs werden in der Regel 30 Tage aufbewahrt.
Unless specified otherwise in this document, personal data is processed and stored only as long as required for the respective purposes. Server logs are generally retained for 30 days.

Zwecke der Verarbeitung - Purposes of processing

Die Daten des Nutzers werden verarbeitet, um die Website bereitzustellen, ihre Sicherheit zu gewährleisten, rechtlichen Verpflichtungen nachzukommen und Rechte des Verantwortlichen zu schützen.
User data is processed to provide the website, ensure its security, comply with legal obligations and protect the controller’s rights.

Detaillierte Informationen zur Verarbeitung - Detailed information on processing

Personenbezogene Daten werden für folgende Zwecke und unter Verwendung folgender Services verarbeitet:
Personal data is processed for the following purposes and using the following services:

Schriftarten (Web Fonts) - Fonts

Lokale Einbindung: Wir verwenden lokal gespeicherte Web Fonts. Eine Datenübertragung an externe Anbieter findet nicht statt.
Local integration: We use locally stored web fonts. No data is transmitted to external font providers.

Traffic-Optimierung und -Verteilung - Traffic optimization and distribution

Diese Art von Service ermöglicht es dieser Website, Inhalte performant auszuliefern und die Sicherheit zu erhöhen.
This type of service allows this website to deliver content efficiently and enhance security.

Cloudflare (Cloudflare Inc.)

Cloudflare ist ein CDN/Sicherheitsdienst (u.a. WAF/Bot-Management). Der gesamte Traffic kann über Cloudflare geleitet werden, wobei technisch notwendige Daten verarbeitet werden.
Cloudflare is a CDN/security service (including WAF/bot management). Traffic may be routed via Cloudflare, where strictly necessary data is processed.

Verarbeitete Daten: IP-Adresse, HTTP-Header, Request-Metadaten, Sicherheits-/Threat-Signale (z. B. für Bot-Erkennung).
Processed data: IP address, HTTP headers, request metadata, security/threat signals (e.g., for bot detection).

Verarbeitungsort: u.a. USA – Cloudflare ist nach dem EU-US Data Privacy Framework (DPF) zertifiziert.
Datenschutzerklärung Place of processing: including the USA – Cloudflare is certified under the EU-US Data Privacy Framework Participant.
Privacy Policy

Cookies und Tracking-Technologien - Cookies and Tracking

Es werden ausschließlich technisch notwendige Cookies/Mechanismen eingesetzt (z. B. durch Cloudflare für Sicherheit/Lastverteilung). Eine Einwilligung ist hierfür nicht erforderlich (§ 25 Abs. 2 Nr. 2 TDDDG). Es kommen keine Analyse- oder Marketing-Cookies zum Einsatz.
Only strictly necessary cookies/mechanisms are used (e.g., Cloudflare for security/load balancing). No consent is required for these (Section 25(2) No. 2 TDDDG). No analytics or marketing cookies are used.

Sie können Browser-Cookies jederzeit über Ihre Browsereinstellungen löschen/blockieren. Dies kann die Funktionsfähigkeit der Website beeinträchtigen.
You can delete/block cookies in your browser settings at any time. This may affect the functionality of the site.

Weitere Informationen für Nutzer - Further information for users

Rechtsgrundlage der Verarbeitung - Legal basis of processing

Der Verantwortliche kann personenbezogene Daten verarbeiten, wenn einer der folgenden Punkte zutrifft:
The controller may process personal data if one of the following applies:

• Berechtigtes Interesse an sicherem und funktionsfähigem Betrieb (Art. 6 Abs. 1 lit. f DSGVO)
• Vertragliche/kommunikative Erfordernisse, wenn Sie uns kontaktieren (Art. 6 Abs. 1 lit. b/f DSGVO)
• Unbedingt erforderliche Endgerätezugriffe (§ 25 Abs. 2 Nr. 2 TDDDG)
• Legitimate interests in secure and functional operation (Art. 6(1)(f) GDPR)
• Contract/communication needs when you contact us (Art. 6(1)(b)/(f) GDPR)
• Strictly necessary access to terminal equipment (Section 25(2) No. 2 TDDDG)

Rechte der Nutzer nach der DSGVO - User rights under GDPR

Nutzer können bestimmte Rechte bezüglich ihrer Daten ausüben:
Users may exercise certain rights regarding their data:

• Auskunft (Art. 15) – Access (Art. 15)
• Berichtigung (Art. 16) – Rectification (Art. 16)
• Löschung (Art. 17) – Erasure (Art. 17)
• Einschränkung (Art. 18) – Restriction (Art. 18)
• Datenübertragbarkeit (Art. 20) – Portability (Art. 20)
• Widerspruch (Art. 21) – Objection (Art. 21)
• Beschwerde bei einer Aufsichtsbehörde (Art. 77) – Complaint to a supervisory authority (Art. 77)

Widerruf von Einwilligungen - Withdrawal of consent

Soweit Verarbeitungen auf Einwilligung beruhen (z. B. bei freiwilliger Kontaktaufnahme), kann diese jederzeit mit Wirkung für die Zukunft widerrufen werden.
Where processing is based on consent (e.g., voluntary contact), you may withdraw it at any time with future effect.

Ausübung der Rechte - How to exercise these rights

Anfragen zu Ihren Rechten können Sie über die oben genannten Kontaktdaten an uns richten. Solche Anfragen sind kostenfrei und werden unverzüglich, spätestens innerhalb eines Monats beantwortet.
Requests regarding your rights can be sent using the contact details above. Such requests are free of charge and will be answered without undue delay and within one month.

Weitere Informationen - Additional information

Keine automatisierte Entscheidungsfindung - No automated decision-making

Es findet keine automatisierte Entscheidungsfindung einschließlich Profiling im Sinne des Art. 22 DSGVO statt.
No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

Systemprotokolle und Wartung - System logs and maintenance

Zu Betriebs- und Wartungszwecken können diese Website und eingesetzte Dienste Protokolldateien führen, die Interaktionen mit der Website erfassen (z. B. IP-Adresse, Zeitstempel).
For operational and maintenance purposes, this website and used services may maintain logs recording interactions with the website (e.g., IP address, timestamps).

Kontakt für Datenschutzfragen - Contact for data protection questions

Bei Fragen zum Datenschutz wenden Sie sich an: [email protected]
For data protection questions, please contact: [email protected]

Aufsichtsbehörde - Supervisory Authority

Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Deutschland / Germany

Änderungen dieser Datenschutzerklärung - Changes to this privacy policy

Wir behalten uns vor, diese Datenschutzerklärung anzupassen, wenn sich Rechtslage, Dienste oder Verarbeitungen ändern. Bei wesentlichen Änderungen informieren wir auf dieser Seite.
We may update this policy if laws, services or processing activities change. Material changes will be announced on this page.

Definitionen - Definitions

Personenbezogene Daten - Personal Data

Alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person beziehen.
Any information relating to an identified or identifiable natural person.

Nutzungsdaten - Usage Data

Informationen, die automatisch durch diese Website gesammelt werden, einschließlich IP-Adressen, Browser-Informationen, Zugriffszeiten und technische Parameter.
Information collected automatically through this website, including IP addresses, browser information, access times and technical parameters.

Nutzer - User

Die Person, die diese Website nutzt und, sofern nicht anders angegeben, mit der betroffenen Person übereinstimmt.
The individual using this website who, unless otherwise specified, coincides with the data subject.

Verantwortlicher - Data Controller

Die natürliche oder juristische Person, die allein oder gemeinsam mit anderen die Zwecke und Mittel der Verarbeitung personenbezogener Daten bestimmt.
The natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Cookie

Cookies sind kleine Datensätze, die im Browser des Nutzers gespeichert werden; hier ausschließlich für unbedingt erforderliche Sicherheits-/Funktionszwecke.
Cookies are small data files stored in the user’s browser; here used solely for strictly necessary security/functional purposes.

Rechtliche Informationen - Legal information

Diese Datenschutzerklärung bezieht sich ausschließlich auf diese Website, sofern nicht anders angegeben.
This privacy policy relates solely to this website, unless otherwise stated.

Stand / Last updated: December 12, 2025