Last updated: January 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Mark Mayer Personalberatung
Hegaustraße 18
78224 Singen (Hohentwiel)
Germany
Phone: +49 7731 231 4950
Email: info@markmayer-personalberatung.com
Website: markmayer-personalberatung.com
If the legal company name or the name of the business owner differs from “Mark Mayer Personalberatung”, the legally registered name should be added here.
2. General Information on Data Processing
We take the protection of your personal data seriously. Personal data is any information relating to an identified or identifiable natural person.
We process personal data only where this is necessary to provide our website and services, respond to enquiries, fulfil contractual or pre-contractual obligations, comply with legal obligations, or where you have given your consent.
The principal legal bases for processing are Article 6(1)(a), (b), (c) and (f) of the General Data Protection Regulation (GDPR).
3. Website Hosting and Server Log Files
When you visit this website, technical information may automatically be transmitted by your browser to the server hosting our website.
This information may include:
- IP address
- Date and time of access
- Requested page or file
- Browser type and version
- Operating system
- Referrer URL
- Host name of the accessing device
This information is processed to ensure the secure, stable and technically reliable operation of the website and to detect or prevent misuse and technical attacks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
Server log data is deleted when it is no longer required for these purposes, unless longer retention is necessary for security reasons or due to legal obligations.
Our hosting provider may process this information on our behalf as a data processor.
4. Contact Form
Our website provides a contact form that allows you to contact us directly.
When you use the contact form, we process the information you provide, in particular:
- Name
- Email address
- Subject
- Message content
- Any other information you voluntarily include in your message
We use this information exclusively to process and respond to your enquiry.
Where your enquiry relates to the initiation or performance of a contractual relationship, the legal basis is Article 6(1)(b) GDPR.
For other enquiries, processing is based on our legitimate interest in responding to communications and enquiries in accordance with Article 6(1)(f) GDPR.
Contact form submissions are processed through Contact Form 7 on our WordPress website.
We retain correspondence only for as long as necessary to process the enquiry and to comply with applicable statutory retention requirements.
Please note that normal email communication may not be fully encrypted. We therefore recommend that you do not send highly confidential or sensitive information by unencrypted email.
5. Contact by Email or Telephone
If you contact us by email or telephone, we process the personal data you provide in order to respond to your request.
Depending on the nature of the enquiry, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.
The information will be deleted once it is no longer required for the purpose for which it was collected, unless statutory retention obligations require longer storage.
6. Google Maps
This website may use Google Maps to display our location.
Google Maps is a service provided within the European Economic Area by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When Google Maps is activated, information may be transmitted to Google. This may include, among other information:
- IP address
- Browser and device information
- Website usage information
- Location-related information, depending on your device and settings
Google explains that location information and other data may be processed when its services, including Google Maps, are used.
Google may also process information in countries outside the European Union or European Economic Area, including the United States.
Where consent is required, Google Maps is loaded only after you have given your consent. The legal basis for the processing of personal data is Article 6(1)(a) GDPR.
Where information is stored on or accessed from your device, consent is also requested in accordance with § 25(1) TDDDG unless an applicable statutory exception applies.
You may withdraw your consent at any time with effect for the future through the cookie or privacy settings of this website.
Further information on Google’s processing of personal data can be found in Google’s Privacy Policy.
7. Cookies and Similar Technologies
Our website may use cookies or similar technologies.
Cookies are small data files that can be stored on your device when you visit a website.
Technically necessary cookies may be used to provide essential website functions, security features or to store privacy and consent preferences.
The use of technologies that are strictly necessary to provide a service expressly requested by the user may be permitted without consent under § 25(2) TDDDG.
Any cookies or similar technologies that are not technically necessary are used only after the required consent has been obtained.
Where personal data is processed on the basis of consent, the legal basis is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
8. WordPress
This website is based on the WordPress content management system.
WordPress may use technically necessary cookies for administrative, security and login functions. These cookies primarily concern website administrators and are required for the technical operation and management of the website.
Visitors to the public website are not required to create a WordPress user account.
9. No Public User Accounts or Comments
This website does not currently provide public user registration or user accounts.
Visitors are also not intended to publish public comments on the website.
Therefore, we do not intentionally collect personal data for public user profiles or public comment functions.
If such features are introduced in the future, this Privacy Policy will be updated accordingly.
10. No Newsletter
We do not currently operate an email newsletter subscription service through this website.
We therefore do not collect email addresses for newsletter or direct marketing purposes through a newsletter registration form.
11. Recipients of Personal Data
Personal data may be disclosed to third parties only where this is necessary, legally permitted or required by law.
Possible recipients or categories of recipients include:
- Website and hosting service providers
- IT and technical service providers
- Email service providers
- Google, where Google Maps is activated
- Public authorities where disclosure is required by law
- Professional advisers where necessary for legal or business purposes
Where service providers process personal data on our behalf, they are used in accordance with applicable data protection requirements.
12. Transfers to Countries Outside the EU/EEA
Certain external service providers, particularly Google, may process personal data outside the European Union or European Economic Area.
Where such transfers take place, they are carried out only where the legal requirements of Chapter V GDPR are satisfied, for example on the basis of an adequacy decision or appropriate safeguards.
Where applicable, additional safeguards may include standard contractual clauses approved by the European Commission.
13. Storage Period
We retain personal data only for as long as necessary for the purposes for which it was collected.
The exact retention period depends on the type of information and the purpose of processing.
In particular:
- Contact enquiries are stored for as long as necessary to process the enquiry.
- Contract-related correspondence may be retained for applicable statutory retention periods.
- Technical server logs are retained only for the period required for security and technical purposes.
- Data processed on the basis of consent is processed until consent is withdrawn, unless another legal basis permits further retention.
After the relevant retention period expires, personal data is deleted or anonymised unless further retention is legally required.
14. Your Data Protection Rights
Under the GDPR, you may have the following rights regarding your personal data:
- Right of access – Article 15 GDPR
- Right to rectification – Article 16 GDPR
- Right to erasure – Article 17 GDPR
- Right to restriction of processing – Article 18 GDPR
- Right to data portability – Article 20 GDPR
- Right to object to processing – Article 21 GDPR
- Right to withdraw consent – Article 7(3) GDPR
- Right to lodge a complaint with a supervisory authority – Article 77 GDPR
The GDPR requires privacy information to explain, among other things, the controller, purposes and legal bases, recipients, retention periods and the rights available to the data subject.
To exercise your rights, please contact:
info@markmayer-personalberatung.com
15. Right to Object
Where we process your personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
If your personal data were ever processed for direct marketing purposes, you would have the right to object to such processing at any time.
16. Withdrawal of Consent
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
17. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
For businesses located in Baden-Württemberg, the competent supervisory authority is generally:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Germany
Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
The Baden-Württemberg authority confirms this as its current address from 22 December 2025.
18. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
Where the website is made publicly available, it should be transmitted using SSL/TLS encryption. You can normally recognise an encrypted connection by the “https://” prefix in your browser’s address bar.
19. Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR through this website.
20. Changes to this Privacy Policy
We may update this Privacy Policy where necessary, for example when website functionality, legal requirements or the services used on the website change.
The version currently published on this website applies.
Last updated: January 2026