Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR and § 38 BDSG (German Federal Data Protection Act). If you have any questions about data protection, please contact us directly using the details above.

2. Overview

We process personal data only to the extent necessary to provide this website, its content and functions, and to respond to your inquiries. This website uses no cookies for analytics or advertising, no tracking, no social media plugins and no embedded third-party content such as videos or maps. Your data is not transferred to third countries outside the EU.

The relevant legal bases are Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) GDPR (legitimate interests), and, for access to your device, § 25 TDDDG (German Telecommunications Digital Services Data Protection Act).

3. Hosting and server log files

This website is hosted by an external service provider: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We have concluded a data processing agreement with this provider pursuant to Art. 28 GDPR. The servers are located in Germany.

Each time the website is accessed, the server automatically records information transmitted by your browser (server log files):

• IP address of the requesting device
• date and time of access
• page or file accessed and amount of data transferred
• referrer URL (the previously visited page)
• browser type, browser version and operating system
• HTTP status code

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and reliably and in defending against attacks. Log files are deleted after 7 days at the latest unless they are needed to investigate a specific security incident.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” in your browser’s address bar and by the padlock icon. This means that data you send to us, for example via the inquiry form, cannot be read by third parties.

5. Fonts

We use the Montserrat typeface. It is loaded locally from our own server. No connection is established to servers operated by Google or any other third party.

6. Storage in your browser (local storage)

Some features store information locally in your browser (local storage) so that it is retained for your next visit:

• your ratings in the self-check and on the pages for the laws and qualities (answers on a scale of 1 to 5)
• once you unlock the detailed report, your name, your email address and your optional details on age, gender and number of team members
• your choice in the privacy notice (consent yes or no, with date)
• your chosen language and display (light or dark), if you use the switches in the page header
• only with your consent: a random identifier of this browser for the anonymous study analysis (see “Leadership study”)

What of this is transmitted to our server is described in the sections “Self-check: detailed report” and “Leadership study”. Apart from the identifier for the study, storage in your browser is based on § 25(2) no. 2 TDDDG, as it is strictly necessary for the feature you have expressly chosen to use, and otherwise on Art. 6(1)(f) GDPR. You can delete this information at any time using “Reset” in the self-check or via your browser settings.

7. Self-check: detailed report

If you request the detailed report of your self-check, we process:

• name and email address (required)
• your result (answers, points, level, strengths and areas of potential) and the report generated from it as a PDF
• optional: age group, gender and the number of team members you lead – these details also appear in your report
• the leadership level you chose before the self-check and – if stated – the size of your organization; both also appear in your report
• language, date and time

Purpose: sending the report to you by email, a copy to us (blog@wegvisor.com) so that we can discuss your result with you if you wish, and storing the report so that we can help you with any questions.

Legal basis: your consent pursuant to Art. 6(1)(a) GDPR, which you give by ticking the box in the form. You can withdraw it at any time with effect for the future; an informal message to stiftung@wegvisor.de is sufficient.

Storage location and protection: the report is stored as a PDF with your name in the file name in a protected folder on our server at ALL-INKL.COM in Germany, together with an overview containing name, email address, result and your optional details. The folder cannot be accessed from the internet; only we have access via a password-protected server login.

Retention: we store the report and overview entry until you withdraw your consent or request erasure; we then delete both without delay. We also review regularly whether storage is still necessary. We delete emails according to the periods in the section “Inquiry form, email and phone”.

Providing your age, gender and number of team members is optional. You will receive the report without them, too.

Reminder after 90 days (optional): if you separately tick the box asking us to remind you, we store your name, email address, language, the date and the 21 area scores of your result in order to send you a single email after 90 days with a link to repeat the self-check. The link shows your earlier result for comparison. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. We delete the entry after sending; before that, an informal message to stiftung@wegvisor.de is enough to cancel the reminder.

8. Leadership study (anonymous analysis)

We analyze the results of the self-checks for the WEGVISOR leadership study. If you have consented and completed a self-check, your browser transmits your answers to our server for this purpose – without your name, without your email address and without storing your IP address. A random identifier that is kept only in your browser, and is additionally hashed on the server, is used to tell records apart. If you voluntarily stated your age group, gender or number of team members in the report form, we assign these details to your anonymous record, without your name or email address.

Together with your answers, your browser also transmits the leadership level and – if stated – the size of your organization that you chose before the self-check. From this we calculate comparison values per leadership level that are shown in the self-check – only once there are 30 records per level and only as averages per law or quality.

Purpose: scientific analysis of leadership laws and qualities, for example by age group, gender and span of control. The data is used for future editions of the study. Only aggregated values such as averages and shares are published; individual results are never published.

Legal basis: your consent, which you give in the privacy notice on your first visit, in the “Privacy settings” or below your result in the self-check: for storing the random identifier in your browser pursuant to § 25(1) TDDDG and for the analysis pursuant to Art. 6(1)(a) GDPR in conjunction with Art. 89 GDPR. Without consent, nothing is transmitted.

Storage: in a protected folder on our server in Germany that cannot be accessed from the internet, without a time limit for as long as the study continues. To prevent misuse, your IP address is kept only briefly in hashed form for 10 minutes.

Withdrawal: you can withdraw your consent at any time with effect for the future – via “Privacy settings” in the footer or with “Do not use” below your result in the self-check. Answers already transmitted are then deleted and the identifier is removed from your browser. Alternatively, a message to stiftung@wegvisor.de is sufficient.

9. Inquiry form, email and phone

If you contact us via the inquiry form, by email or by phone, we process the information you provide. In the inquiry form, this is:

• name and email address (required)
• company, topic and message (optional)
• the page of this blog from which you opened the form, so that we can better understand your inquiry
• date and time of the inquiry

Purpose: handling your inquiry, for example about the WEGVISOR Leadership Group, coaching, team workshops or a Growth CheckUp, and getting in touch with you.

Legal basis: Art. 6(1)(b) GDPR where your inquiry is aimed at concluding a contract; otherwise your consent pursuant to Art. 6(1)(a) GDPR, which you give by ticking the checkbox in the form, and our legitimate interest in responding to inquiries pursuant to Art. 6(1)(f) GDPR.

Recipients: your inquiry is handled internally only. Service providers used for email and customer management process the data on our behalf pursuant to Art. 28 GDPR (ALL-INKL.COM – Neue Medien Münnich for hosting and email delivery).

Retention period: we delete your information as soon as your inquiry has been fully handled and no further communication is expected, at the latest after 12 months. If a contract is concluded, the statutory retention periods of 6 years under § 257 HGB (German Commercial Code) or 10 years under § 147 AO (German Fiscal Code) apply.

Providing your data is voluntary. However, we cannot respond to your inquiry without your name and email address.

10. Links to other websites and social networks

On this website we link to other services, such as wegvisor.com, the foundation’s website and our profiles on LinkedIn, Instagram and Facebook. These are simple links, not plugins: no data is transferred to these providers when you visit our pages. Only when you click a link do you leave our website; from then on, the privacy policy of the respective provider applies.

11. Your rights

You have the following rights against us with regard to your personal data:

• Access to the stored data and its processing (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to stiftung@wegvisor.de is sufficient.

12. Complaint to the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

13. Automated decisions and changes

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

We update this privacy policy when the website or legal requirements change. The version published here applies at any given time.

Last updated: October 2026