1. Preamble

Discretion and confidentiality form the basis of our consulting activities. As an Executive Search and Board Advisory company, we handle highly sensitive information and personal data from candidates and clients on a daily basis. BOARD CONNECT takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and this privacy policy.

2. Responsible

BOARD CONNECT GmbH
Große Theaterstraße 35
20354 Hamburg
Phone: +49 40 228 57 97-0
Email: info@boardconnect.gmbh

Authorized representatives: Dr. Tiemo Kracht, Regina Kracht

3. Data protection officer

You can contact our data protection officer at:
Bettina Gregor, Head of Office Management, Große Theaterstraße 35, 20354 Hamburg, +49 40 228 57 97-20

4. Categories of personal data

In particular, we process:

  • Application and profile data (resume, professional history, education, qualifications, references, salary details, preferences)

  • Contact details (name, address, telephone number, email address)

  • Client data (positions, requirements, company information, contact persons)

  • Usage data (log files, IP addresses, browser information, cookies, comparable technical data)

5. Purposes of processing

We use personal data exclusively for the following purposes:

  • Carrying out executive search and board advisory mandates

  • Advising and placing candidates

  • Communicating with clients, partners, and applicants

  • Fulfilling legal obligations

  • Optimizing our website and services (statistical evaluation, security)

6. Legal basis

Processing is carried out in accordance with Art. 6 GDPR:

  • Art. 6 (1) (b) GDPR: to implement pre-contractual measures or contractual relationships

  • Art. 6 (1) (a) GDPR: on the basis of your consent (e.g., disclosure of data to clients)

  • Art. 6 (1) (f) GDPR: to safeguard legitimate interests (e.g., IT security, internal administration)

  • Art. 6 (1) (c) GDPR: to fulfill legal obligations

7. Data transfer to third parties

  • Your data will only be transferred with your prior consent, in particular in the context of search mandates to clients and to international partners within the BOARD CONNECT Global Network.

  • All partners are contractually obliged to comply with the applicable data protection laws.

  • Data will only be transferred to third countries on the basis of appropriate safeguards (e.g., EU standard contractual clauses).

8. Storage period

We only store personal data for as long as you explicitly allow via an opt-in, as long as it is necessary for the fulfillment of the aforementioned purposes, or as long as required by statutory retention periods. After that, the data will be deleted or anonymized.

9. Data security

We use technical and organizational measures to protect your data against loss, misuse, unauthorized access, or disclosure, including:

  • SSL/TLS encryption

  • Access restrictions and authentication procedures

  • Physical security measures

  • Regular IT security audits

10. Rights of data subjects

Under the GDPR, you have the following rights in particular:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact: info@boardconnect.gmbh

11. Anonymous data collection & log files

When you visit our website without registering or logging in, we automatically collect the following data:

  • IP address (stored in truncated or anonymized form)

  • Date and time of access

  • Pages visited, referrer URL

  • Browser type and version, operating system

  • Device information

Processing is carried out exclusively to ensure system security and for statistical evaluation.

12. Cookies & tracking

Our website uses cookies and similar technologies.

  • Session cookies: these are automatically deleted when you close your browser.

  • Persistent cookies: these remain stored on your device in order to recognize your preferences.

You can deactivate the storage of cookies in your browser settings at any time.

13. Data transfer within the scope of mandates

In order to be able to recommend you to clients within the scope of search mandates, your personal data may be shared with clients or transferred to the BOARD CONNECT Global Network. Any transfer will only take place with your consent and in compliance with high security standards.

14. Links to third-party sites

Our website contains links to external websites. We accept no responsibility for their content or data protection practices. Please refer to the respective data protection declarations of the third-party providers.

15. Changes to this data protection declaration

We reserve the right to amend this data protection declaration as necessary in order to always comply with current legal requirements. The current version can be found on our website at any time.

16. Supervisory authority

You have the right to complain to a data protection supervisory authority about our processing of your data.

Competent supervisory authority:
The Hamburg Commissioner for Data Protection and Freedom of Information
www.datenschutz-hamburg.de