Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR and § 38 BDSG (German Federal Data Protection Act). If you have any questions about data protection, please contact us directly using the details above.

2. Overview

We process personal data only to the extent necessary to provide this website, its content and functions, and to respond to your inquiries. This website uses no cookies for analytics or advertising, no tracking, no social media plugins and no embedded third-party content such as videos or maps. Your data is not transferred to third countries outside the EU.

The relevant legal bases are Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) GDPR (legitimate interests), and, for access to your device, § 25 TDDDG (German Telecommunications Digital Services Data Protection Act).

3. Hosting and server log files

This website is hosted by an external service provider: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We have concluded a data processing agreement with this provider pursuant to Art. 28 GDPR. The servers are located in Germany.

Each time the website is accessed, the server automatically records information transmitted by your browser (server log files):

• IP address of the requesting device
• date and time of access
• page or file accessed and amount of data transferred
• referrer URL (the previously visited page)
• browser type, browser version and operating system
• HTTP status code

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and reliably and in defending against attacks. Log files are deleted after 7 days at the latest unless they are needed to investigate a specific security incident.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” in your browser’s address bar and by the padlock icon. This means that data you send to us, for example via the inquiry form, cannot be read by third parties.

5. Fonts

We use the Montserrat typeface. It is loaded locally from our own server. No connection is established to servers operated by Google or any other third party.

6. Storage in your browser (local storage)

Some features store information locally in your browser (local storage) so that it is retained for your next visit:

• your ratings in the Strategy Check (answers on a scale of 1 to 5) and your notes in the report
• once you unlock the detailed report, your name and email address
• the fact that you have seen the privacy notice (with date)
• your interface settings
• if you unlock a password-protected area: a key derived from the password (not the password itself), so that the area remains unlocked on this device

What of this is transmitted to our server is described in the section “Strategy Check: detailed report.” Storage in your browser is based on § 25(2) no. 2 TDDDG, as it is strictly necessary for the feature you have expressly chosen to use, and otherwise on Art. 6(1)(f) GDPR. You can delete this information at any time using “Reset” in the Strategy Check or via your browser settings. You can remove a stored unlock of password-protected areas here: Remove unlock on this device.

7. Strategy Check: detailed report

If you request the detailed report of your Strategy Check, we process:

• name and email address (required)
• your result (answers, points, level, strengths and areas of potential) and the report generated from it as a PDF
• date and time

Purpose: sending the report to you by email, a copy to us (stiftung@wegvisor.de) so that we can discuss your result with you if you wish, and storing the report so that we can help you with any questions.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR, which you give by ticking the box in the form. You can withdraw it at any time with effect for the future; an informal message to stiftung@wegvisor.de is sufficient.

Storage location and protection: the report is stored as a PDF with your name in the file name in a protected folder on our server at ALL-INKL.COM in Germany, together with an overview containing name, email address and result. The folder cannot be accessed from the internet; only we have access via a password-protected server login.

Retention: we store the report and the overview entry until you withdraw your consent or request erasure; we then delete both without delay. We also review regularly whether storage is still necessary. We delete emails according to the periods in the section “Inquiry form, email and phone.”

8. Inquiry form, email and phone

If you contact us via the inquiry form, by email or by phone, we process the information you provide. In the inquiry form, this is:

• name and email address (required)
• company, topic and message (optional)
• the page of this blog from which you opened the form, so that we can better understand your inquiry
• date and time of the inquiry

Purpose: handling your inquiry, for example about WEGVISOR’s Strategy Coaching, Strategy Training or Strategy Consulting, and getting in touch with you.

Legal basis: Art. 6(1)(b) GDPR where your inquiry is aimed at concluding a contract; otherwise your consent pursuant to Art. 6(1)(a) GDPR, which you give by ticking the box in the form, and our legitimate interest in responding to inquiries pursuant to Art. 6(1)(f) GDPR.

Recipients: your inquiry is handled internally only. Service providers used for email and customer management process the data on our behalf pursuant to Art. 28 GDPR (ALL-INKL.COM – Neue Medien Münnich for hosting and email delivery).

Retention period: we delete your information as soon as your inquiry has been fully handled and no further communication is expected, at the latest after 12 months. If a contract is concluded, the statutory retention periods of 6 years under § 257 HGB (German Commercial Code) or 10 years under § 147 AO (German Fiscal Code) apply.

Providing your data is voluntary. However, we cannot respond to your inquiry without your name and email address.

9. Links to other websites and social networks

On this website we link to other services, such as wegvisor.com, the foundation’s website and our profiles on LinkedIn, Instagram and Facebook. These are simple links, not plugins: no data is transferred to these providers when you visit our pages. Only when you click a link do you leave our website; from then on, the privacy policy of the respective provider applies.

10. Your rights

You have the following rights against us with regard to your personal data:

• Access to the stored data and its processing (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to stiftung@wegvisor.de is sufficient.

11. Complaint to the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

12. Automated decisions and changes

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

We update this privacy policy when the website or legal requirements change. The version published here applies at any given time.

Last updated: October 2026