Executive Search and Management Consulting

Effective Date: 2025.06.01

Last Updated: 2025.06.01

At Weidl & Company, we are committed to protecting the privacy and personal data of our clients and candidates in accordance with the EU General Data Protection Regulation (GDPR) and all applicable data protection laws. This privacy notice explains how we collect, use, store, and protect personal data in the context of our executive search and management consulting services.

1. Who We Are

Weidl & Company is an executive search and management consulting firm operating in the European Union and internationally. We provide leadership advisory services to organisations and support executives throughout their career journey. For data protection purposes, Weidl & Company acts as a data controller when processing personal data of clients and candidates.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

For Candidates:

• Name, contact details (e.g., email, phone, address)

• Professional background (CVs, employment history, education)

• Interview notes and assessment results

• References and background checks (with consent)

• Compensation and benefits data (if relevant)

• Preferences, career aspirations, and availability

For Clients:

• Company name and contact information

• Role specifications and organizational needs

• Internal assessments or feedback (if shared)

• Communication history and contractual documentation

We may also collect publicly available data (e.g., from LinkedIn or company websites) or receive data from third-party sources (e.g., referrals, background check providers).

3. How We Use Personal Data

We use personal data to:

• Identify, evaluate, and present candidates for executive positions

• Communicate with clients and candidates

• Conduct leadership assessments and due diligence

• Fulfill contractual obligations and provide consulting services

• Maintain and improve our services, databases, and client relationships

• Comply with legal and regulatory obligations

4. Legal Basis for Processing

We process personal data based on one or more of the following lawful bases:

• Consent: Where appropriate, we will ask for your explicit consent (e.g., to share your profile with a client).

• Contract: To perform or prepare to enter into a contract.

• Legitimate Interests: To operate and grow our business in a way that is expected and necessary for our services, provided such interests are not overridden by your rights.

• Legal Obligation: To comply with applicable laws or regulations.

5. Data Sharing and Transfers

We may share personal data with:

• Clients: Only with your prior consent, we may share your personal data with clients for the purpose of evaluating your suitability for specific roles.

• Third-party service providers: Such as assessment tools and IT systems, under strict confidentiality agreements.

• Legal or regulatory authorities: When required by applicable laws or regulations.

Some recipients may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined above or to comply with legal requirements. Typically, candidate data is stored for no longer than 5 years from the last meaningful contact, unless otherwise required or agreed.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Erase your data ("right to be forgotten")

• Restrict or object to processing

• Data portability (where applicable)

• Withdraw consent at any time (where processing is based on consent)

• Lodge a complaint with a supervisory authority

To exercise your rights, please contact us at:

Email: bjw@weidl-company.com

Address: WEIDL & COMPANY GMBH, LEOPOLDSTRASSE 18, D-80802 MÜNCHEN, GERMANY

8. Data Security

Weidl & Company implements appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

9. Updates to This Privacy Notice

We may update this notice from time to time. Changes will be posted on our website with an updated effective date.

For questions or concerns regarding this notice or our data practices, please contact:

Email: bjw@weidl-company.com

Address: WEIDL & COMPANY GMBH, LEOPOLDSTRASSE 18, D-80802 MÜNCHEN, GERMANY