Controller
Codepathgrid, Level 10, 46 Neue Mainzer Straße, Frankfurt am Main 60311, is the controller for personal data described here. Privacy questions and rights requests may be sent to info@codepathgrid.digital or made by phone at +49 69 5550 5410.
Data we receive and why
When you make an enquiry, we receive your name, email address, optional preferred date, selected consultation, and message. We use it to answer your request and take steps toward a contract under Article 6(1)(b) GDPR. Booking and invoice records are used to deliver the service and meet tax and accounting obligations under Articles 6(1)(b) and 6(1)(c).
Consultation notes may include role, salary range, benefits, employment context, and priorities you choose to share. Do not send identity numbers, bank details, health data, unredacted contracts, or information about colleagues. Where limited notes are necessary to deliver the agreed advice, processing is based on the contract.
Essential browser storage records your cookie choice. Optional analytics, if introduced and accepted, would rely on consent. See the cookie notice.
Recipients and international transfers
Authorised personnel and contracted hosting, email, video-conferencing, and accounting providers receive only what is needed for their function and are bound by data-protection duties. We prefer processing in the European Economic Area. If a provider transfers data outside the EEA, we use an adequacy decision or appropriate safeguards such as European Commission standard contractual clauses and assess supplementary measures where required.
We do not sell personal data or provide consultation details to your employer.
Retention
Unconverted enquiries are deleted within six months. Working notes and ordinary correspondence are normally deleted 12 months after the final session. Invoices and records subject to German tax or commercial retention duties are retained for the legally required period, commonly up to ten years. We may retain a minimal record longer where needed to establish or defend legal claims.
Your rights
Subject to legal conditions, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent prospectively; and complain to a competent data protection authority. The authority responsible for our location is the Hessian Commissioner for Data Protection and Freedom of Information. We verify requests to protect your information and normally respond within one month.
Security and updates
We use access controls, limited collection, encrypted transport where supported, and retention rules proportionate to a small consultation practice. No internet transmission is risk-free. Material changes to this notice will be dated on this page.