How we handle your data.

Data Controller

adfinim GmbH, Charlottenstr. 21a, 70182 Stuttgart, Germany, represented by its managing directors Ralf Bechinger and Klaus Vehns. Email: info@adfinim.de, phone: +49 711 3608 4320.

Hosting and Server Log Files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the site, IONOS processes technical access data on our behalf: IP address, date and time, page requested, amount of data transferred, and browser and operating system. This is necessary to deliver the website and keep it secure (Art. 6(1)(f) GDPR). We have a data processing agreement with IONOS. Log files are deleted automatically after the retention period set by IONOS and are not combined with other data.

Visitor Statistics

To understand how our website is used and to improve it, we use WebAnalytics, the statistics function of our host IONOS. It statistically evaluates the server log files that are created anyway when the site is accessed: page requested, previously visited page (referrer), browser, operating system, device type, time of access and the IP address in anonymised form, which is used only to roughly determine the location of access. No cookies are set and no additional scripts are loaded; we cannot attribute the statistics to any individual. IONOS processes the data on our behalf. The legal basis is our legitimate interest in designing the website to meet visitors' needs (Art. 6(1)(f) GDPR). You may object to this processing (see Right to Object).

Typefaces

This website uses the standard typefaces available on your device. No typefaces are loaded from external servers, such as Google.

Cookies

This website sets no tracking or marketing cookies. Only when you open the password-protected Mandates page is a technically necessary session cookie set, so that your login persists during your visit. It contains only a random session identifier and is deleted when you close your browser. The legal basis is Section 25(2) no. 2 TDDDG and, for the related processing, Art. 6(1)(f) GDPR.

Getting in Touch

If you contact us by email or phone, we process your details to handle your enquiry (Art. 6(1)(b) GDPR for enquiries relating to a contract, otherwise Art. 6(1)(f) GDPR). We use Microsoft 365 for email and Placetel for telephony; both process data on our behalf. We delete the data once your enquiry has been dealt with, unless a business relationship results from it or statutory retention obligations apply.

Business Contacts

We process professional contact details of clients, prospective clients, business partners and contacts from our network: name, position, company, contact details, the occasion on which we met and business-related conversation content. We obtain this data from you directly, for example in conversations, from business cards, at events or by email, from professional networks such as LinkedIn, or from recommendations.

The purpose is to maintain business relationships and to approach contacts when there is a specific occasion. The legal basis is our legitimate interest in maintaining a professional network (Art. 6(1)(f) GDPR) and, for ongoing mandates, Art. 6(1)(b) GDPR. We keep the data for as long as we intend to maintain the contact and regularly review contacts with whom there has been no exchange for three years for deletion. We send marketing emails only with your consent.

Candidates and Interim Managers

This section applies to direct approaches, selection processes and our network of executives and interim managers. If you have received a confidentiality and data protection declaration from us, it contains the same information.

Data and sources. We process contact details, CV, career history, qualifications, remuneration, salary expectations or day rate, availability, interview notes and transcripts, and our assessments. We obtain this data from you. When we approach you directly, it initially comes from professional networks such as LinkedIn or Xing, interim platforms, publicly available sources or recommendations. Please do not share information about your health or other specially protected characteristics that is not required for the position.

Purposes and legal bases. We base direct approaches for a specific position on our legitimate interest (Art. 6(1)(f) GDPR) and the selection process on Art. 6(1)(b) and (f) GDPR. We present your profile to a client only with your consent (Art. 6(1)(a) GDPR) and tell you who the client is beforehand. We transcribe interviews during the selection process on the basis of our legitimate interest in complete and accurate documentation (Art. 6(1)(f) GDPR). We announce the transcription at the start of each conversation; the audio file technically required for it is deleted immediately after the transcript has been created. We approach you about future mandates only with your consent.

Recipients. Clients receive your profile only with your consent and without transcripts; we obtain references only after agreeing this with you. We use Microsoft, Notion, Anthropic, OpenAI, Plaud and Placetel as processors; for transfers to the United States see the following section.

Use of AI. AI tools summarise and structure documents and conversations. A person always decides on your candidacy; no decision based solely on automated processing within the meaning of Art. 22 GDPR takes place.

Retention. If you are not interested after a direct approach or do not respond, we delete your data on request and at the latest when the search concerned is completed. If you object to being approached, we keep only your name with a block note so that we do not contact you again. We keep data from a selection process for up to six months after its completion and, with your consent to future mandates, for up to 24 months after our last contact. If you are hired or take on an interim assignment, the statutory retention periods apply.

Your rights. The sections “Your Rights” and “Right to Object” below apply. You may object to being approached at any time without formalities, for example by replying to our message or by email to info@adfinim.de. Providing your data is voluntary; without it we cannot consider you in the selection process.

Recipients and Transfers to Third Countries

In addition to IONOS, Microsoft and Placetel, we use further service providers, in particular Notion (database), Anthropic and OpenAI (AI-assisted text processing) and Plaud (transcription), each under a data processing agreement. Some of these providers are based in the United States; transfers take place on the basis of the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. We disclose data beyond this only with your consent or where required by law.

Your Rights

You have the right to access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You may withdraw any consent at any time with effect for the future, for example by email to info@adfinim.de. You may lodge a complaint with a data protection supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

Right to Object

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). You may object to the use of your data for direct marketing at any time without giving reasons (Art. 21(2) GDPR). An informal message to info@adfinim.de is sufficient.

Other Information

No decision-making based solely on automated processing within the meaning of Art. 22 GDPR takes place. Providing your data is neither a statutory nor a contractual requirement; without it, however, we cannot handle your enquiry.

Last updated: October 2026