Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR and § 38 BDSG (German Federal Data Protection Act). If you have any questions about data protection, please contact us directly using the details above.

2. Overview

We process personal data only to the extent necessary to provide this website, its content and functions, and to respond to your inquiries. This website uses no cookies for analytics or advertising, no tracking, no social media plugins and no embedded third-party content such as videos or maps. Your data is not transferred to third countries outside the EU.

The relevant legal bases are Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) GDPR (legitimate interests), and, for access to your device, § 25 TDDDG (German Telecommunications Digital Services Data Protection Act).

3. Hosting and server log files

This website is hosted by an external service provider: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We have concluded a data processing agreement with this provider pursuant to Art. 28 GDPR. The servers are located in Germany.

Each time the website is accessed, the server automatically records information transmitted by your browser (server log files):

• IP address of the requesting device
• date and time of access
• page or file accessed and amount of data transferred
• referrer URL (the previously visited page)
• browser type, browser version and operating system
• HTTP status code

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and reliably and in defending against attacks. Log files are deleted after 7 days at the latest unless they are needed to investigate a specific security incident.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” in your browser’s address bar and by the padlock icon. This means that data you send to us, for example via the inquiry form, cannot be read by third parties.

5. Fonts

We use the Montserrat typeface. It is loaded locally from our own server. No connection is established to servers operated by Google or any other third party.

6. Storage in your browser (local storage)

Some features store information exclusively locally in your browser (local storage) so that it is retained for your next visit:

• your ratings in the self-check and on the pages for the laws and qualities (answers on a scale of 1 to 5) and – once you unlock the detailed report – your name and email address

This data does not leave your device, is not transmitted to us and is not analyzed by us. Exception: if you request the detailed report, we send it to you by email. For this purpose we transmit your name, email address and result to our server (see “Inquiry form, email and phone”). Storage is based on § 25(2) no. 2 TDDDG, as it is strictly necessary for the feature you have expressly chosen to use, and otherwise on Art. 6(1)(f) GDPR. You can delete this information at any time using “Reset” in the self-check or via your browser settings.

7. Inquiry form, email and phone

If you contact us via the inquiry form, by email or by phone, we process the information you provide. In the inquiry form, this is:

• name and email address (required)
• company, topic and message (optional)
• the page of this blog from which you opened the form, so that we can better understand your inquiry
• date and time of the inquiry

Purpose: handling your inquiry, for example about the WEGVISOR Leadership Group, coaching, team workshops or a Growth CheckUp, and getting in touch with you.

Legal basis: Art. 6(1)(b) GDPR where your inquiry is aimed at concluding a contract; otherwise your consent pursuant to Art. 6(1)(a) GDPR, which you give by ticking the checkbox in the form, and our legitimate interest in responding to inquiries pursuant to Art. 6(1)(f) GDPR.

Recipients: your inquiry is handled internally only. If it concerns a service provided by WEGVISOR Unternehmensberatung, we forward it there check recipient and legal relationship. Service providers used for email and customer management process the data on our behalf pursuant to Art. 28 GDPR (ALL-INKL.COM – Neue Medien Münnich for hosting and email delivery).

Retention period: we delete your information as soon as your inquiry has been fully handled and no further communication is expected, at the latest after 12 months. If a contract is concluded, the statutory retention periods of 6 years under § 257 HGB (German Commercial Code) or 10 years under § 147 AO (German Fiscal Code) apply.

Providing your data is voluntary. However, we cannot respond to your inquiry without your name and email address.

8. Links to other websites and social networks

On this website we link to other services, such as wegvisor.com, the foundation’s website and our profiles on LinkedIn, Instagram and Facebook. These are simple links, not plugins: no data is transferred to these providers when you visit our pages. Only when you click a link do you leave our website; from then on, the privacy policy of the respective provider applies.

9. Your rights

You have the following rights against us with regard to your personal data:

• Access to the stored data and its processing (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to stiftung@wegvisor.de is sufficient.

10. Complaint to the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

11. Automated decisions and changes

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

We update this privacy policy when the website or legal requirements change. The version published here applies at any given time.

Last updated: September 2026