Privacy Policy

The controller responsible for processing personal data is: Anna Leon Leon Consulting Gontardstraße 11 10178 Berlin Germany Email: [email protected]

When you use this website or purchase a service, I may process personal data that you provide, including your name and contact details, CV and other submitted documents, questionnaire responses, information about your education, experience, skills, professional background, target roles and applications, communications and payment information. This information is processed to respond to your request, process your order, provide the agreed service and communicate with you. The legal basis is Art. 6(1)(b) GDPR. Where processing is necessary to comply with legal obligations, including tax and accounting requirements, the legal basis is Art. 6(1)(c) GDPR.

I may derive insights from information provided through my services in order to improve my services, methodologies and develop future tools. Before these insights are retained or used for these purposes, they are anonymised so that they can no longer be linked to you. The processing necessary to derive and anonymise these insights is based on my legitimate interests in evaluating, improving and developing my services pursuant to Art. 6(1)(f) GDPR. You have the right to object to this processing under Art. 21 GDPR while the information remains personal data. Once information has been genuinely anonymised so that it can no longer be linked to you, it is no longer personal data. This legitimate-interest basis requires an actual balancing assessment, including the reasonable expectations of the individual. That follows from the GDPR's legitimate-interest framework.

I use service providers where necessary to operate the website and provide my services. These include providers for:

I currently use Gamma, Paperform, Stripe, Google Workspace for these purposes. Personal data is shared only where necessary for the respective service. Where personal data is processed outside the European Economic Area, applicable GDPR requirements for international data transfers are observed.

Personal data is retained only for as long as necessary for the relevant purpose or as required by law. When personal data is no longer required, it is deleted or anonymised.

Subject to the applicable legal requirements, you have the right to request access to, correction or deletion of your personal data, restriction of processing and data portability. You also have the right to object to processing based on legitimate interests and to withdraw consent where processing is based on consent. To exercise your rights, contact: [email protected] You also have the right to lodge a complaint with a data-protection supervisory authority. The competent supervisory authority in Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.