Privacy Policy
Last updated: 1 June 2026
1. General Data Protection Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can personally identify you. Detailed information on data protection can be found in this privacy policy.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Notice on the responsible party" below.
How do we collect your data?
Your data is collected firstly by you providing it to us. This could be data you enter in a contact form, a CV upload form, or an appointment booking tool. Other data is automatically collected by our IT systems when you visit the website, either with your consent or automatically. This primarily includes technical data such as internet browser, operating system, or time of page access.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to enable appointment scheduling, or to process applications and inquiries in the context of executive search services.
What rights do you have regarding your data?
You have the right to obtain information about the origin, recipient, and purpose of your stored personal data at any time, free of charge. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can withdraw this consent at any time for the future. Additionally, you have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time with any questions on the subject of data protection.
2. Notice on the Responsible Party
The responsible party for data processing on this website is:
Rados Recruiting GmbH
Prinzregentenstr. 54
80538 Munich, Germany
Phone: +49 89 1250 9538-0
Email: contact@rados-recruiting.com
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
3. General Information and Mandatory Disclosures
Storage Duration
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, provided we have no other legally permissible grounds for storing your personal data (such as tax or commercial law retention periods); in the latter case, the deletion will occur after these grounds cease to apply.
General Information on the Legal Basis for Data Processing
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed. In the event of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to the access to information on your end device, the data processing is additionally based on § 25(1) TDDDG. The consent can be revoked at any time. If your data is required to fulfill a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing can also be based on our legitimate interest according to Art. 6(1)(f) GDPR.
Recipients of Personal Data
In the course of our business activities, we work with various external parties. This may require the transfer of personal data to these external parties. We only share personal data with external parties if it is necessary for the fulfillment of a contract, if we are legally obliged to do so, if we have a legitimate interest in the transfer according to Art. 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using processors, we only transfer personal data based on a valid data processing agreement.
Revocation of Your Consent
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Object (Art. 21 GDPR)
If the data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing.
Right to Lodge a Complaint
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged infringement.
Right to Data Portability, Access, Rectification, Deletion, Restriction
You have the right to have data that we process based on your consent or in performance of a contract automatically transferred to yourself or a third party in a commonly used, machine-readable format. Within the scope of the applicable legal provisions, you have the right to free information at any time about your stored personal data, its origin and recipient, and the purpose of data processing, and, if applicable, a right to rectification, deletion or restriction of processing of this data. For these purposes, you can contact us at any time.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" in the address bar and the lock symbol in your browser.
4. Hosting and Infrastructure
Web Hosting: Webflow
We host our website with Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.
When you visit our website, your browser connects to Webflow's servers. Webflow processes the following data on our behalf to deliver the website: IP address, browser type and version, operating system, date and time of access, referrer URL, and pages visited. Webflow stores this data in server log files for the technical operation of the website.
Legal basis: Art. 6(1)(f) GDPR. We have a legitimate interest in providing a stable, secure, and performant website.
Data transfer to the USA: Webflow processes data on servers in the United States. Webflow is certified under the EU-U.S. Data Privacy Framework (DPF) and is therefore recognized by the European Commission as providing an adequate level of data protection under Art. 45(1) GDPR. The current certification status can be verified at https://www.dataprivacyframework.gov/participant/5666.
Data Processing Agreement: We have concluded a data processing agreement with Webflow. Further information: https://webflow.com/legal/eu-privacy-policy
Mail Hosting: IONOS
Our business email (contact@rados-recruiting.com) is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
When you contact us by email, IONOS processes the email content, sender address, and associated metadata on our behalf for the transmission, storage and management of the email.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable email communication) and Art. 6(1)(b) GDPR where the email serves contractual or pre-contractual purposes.
Data Processing Agreement: We have concluded a data processing agreement with IONOS. Further information: https://www.ionos.de/terms-gtc/datenschutzerklaerung
5. Cookies and Consent Management
Our website uses cookies. Cookies are small data packages and do not cause any harm to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your device.
Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free and optimized provision of our website.
All other cookies (marketing, third-party integrations) are only set after you have given your explicit consent through our cookie consent banner, on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can revoke your consent at any time with effect for the future by adjusting your cookie settings via the link in the website footer.
6. Plugins, Tools and Third-Party Services
Web Fonts
This website does not use Google Fonts or any other externally hosted web fonts. Any web font references injected by the website builder are removed by a script in the page head before they load. Fonts are served from our own hosting or rendered using fonts already installed on your device. No connection to Google or other third-party font providers is established when you visit this website.
Calendly
We use Calendly to enable easy appointment booking. Calendly is provided by Calendly, LLC, 1315 Peachtree St NE, Atlanta, GA 30309, USA. When you click on a Calendly link from our website, you are redirected to Calendly's platform, where any data you enter (name, email, appointment details) is processed by Calendly on our behalf.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and, where consent is required for cookies, Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Data transfer to the USA: Calendly is certified under the EU-U.S. Data Privacy Framework. Data transfer is based on the adequacy decision under Art. 45(1) GDPR and additionally on EU Standard Contractual Clauses.
Data Processing Agreement: We have concluded a data processing agreement with Calendly. Further information: https://calendly.com/pages/privacy
Jotform (CV Upload Form)
We use Jotform for CV uploads and structured application intake. Jotform is provided by Jotform Inc., 4 Embarcadero Center, San Francisco, CA 94111, USA.
When you submit a CV or application via our Jotform form, the following data is processed: personal details you enter (name, email, phone, location, professional information), uploaded files (CV, certificates, references), and technical metadata (IP address, browser, timestamp).
Data flow for uploaded files: Uploaded files are stored temporarily on Jotform servers for a maximum of one hour. Within this period, files are transferred to our Microsoft SharePoint (Microsoft 365) environment located in the European Union and deleted from Jotform thereafter. The file itself does not remain with Jotform.
Form data (your contact details and application information) is stored by Jotform until you or we request deletion.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures, processing of application).
Data transfer to the USA: Jotform is certified under the EU-U.S. Data Privacy Framework. Data transfer is based on the adequacy decision under Art. 45(1) GDPR and additionally on EU Standard Contractual Clauses.
Data Processing Agreement: We have concluded a data processing agreement with Jotform. Further information: https://www.jotform.com/privacy/
Make (Workflow Automation)
We use Make (formerly Integromat) to automate the transfer of form submissions between Jotform, Microsoft SharePoint and Airtable. Make is provided by Make.com s.r.o., Křižíkova 148/34, 186 00 Prague, Czech Republic.
Make acts as a pass-through processor: data is processed transiently during transfer between services and is not persistently stored within Make.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient workflow management).
Data Processing Agreement: We have concluded a data processing agreement with Make. Further information: https://www.make.com/en/privacy-notice
Airtable (Application Database)
We use Airtable to maintain references and structured metadata of applications. Airtable is provided by Formagrid, Inc., 155 5th Street, San Francisco, CA 94103, USA.
In Airtable, we store only metadata and links to your application. The actual CV file remains in our Microsoft SharePoint environment in the European Union. Metadata includes name, contact details, professional background, status of process, and links to the corresponding SharePoint file.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures and contract performance).
Data transfer to the USA: Airtable is certified under the EU-U.S. Data Privacy Framework. Data transfer is based on the adequacy decision under Art. 45(1) GDPR and additionally on EU Standard Contractual Clauses.
Data Processing Agreement: We have concluded a data processing agreement with Airtable. Further information: https://www.airtable.com/company/privacy
Microsoft 365 (SharePoint, Outlook, Teams)
We use Microsoft 365 (SharePoint, Outlook, Teams) for internal collaboration, document management and communication. Microsoft 365 is provided to us by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
CV files transferred via Jotform are stored in our SharePoint environment, which is hosted in the European Union.
For online meetings via Microsoft Teams, the following data may be processed: user information (display name, email address, profile picture if provided), meeting metadata (date, time, meeting ID, participants), and text, audio and video data during the meeting. You can disable your camera and mute your microphone at any time.
Legal basis: Art. 6(1)(b) GDPR (contract performance and pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient internal operations).
Data transfer: Primary processing takes place in the European Union. Where Microsoft transfers data to the USA for support or sub-processing purposes, Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework.
Data Processing Agreement: We have concluded the Microsoft Products and Services Data Protection Addendum. Further information: https://www.microsoft.com/en-us/trust-center/privacy
7. Social Media Presences
We operate accounts on social media networks to provide information and offer additional ways to contact us. When you visit our profiles, the respective social network collects and processes your data according to its own data protection rules, which we have no influence over.
LinkedIn
LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (for European users) and LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA (parent company).
When you visit our LinkedIn company page or interact with our content, LinkedIn collects data including IP address, device information, and behavioral data, regardless of whether you have a LinkedIn account. We are jointly responsible with LinkedIn for the personal content of our company profile.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in professional networking and communication).
Data transfer to the USA: Based on the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses. Further information: https://www.linkedin.com/legal/privacy-policy
Instagram
Instagram is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (for European users).
We operate the Instagram accounts @radosrecruiting and @willingtowinpodcast. When you visit our Instagram profiles or interact with our content, Meta collects data including IP address, device information, and behavioral data.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in audience engagement and communication).
Data transfer to the USA: Based on the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses. Further information: https://privacycenter.instagram.com/policy/
YouTube
We operate a YouTube channel for our podcast "Willing to Win". YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit our YouTube channel or watch our videos on YouTube's platform, Google/YouTube collects data according to its own data protection rules. We currently do not embed YouTube videos directly on our website. Links to YouTube content open the YouTube platform in a new tab.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in content distribution). Further information: https://policies.google.com/privacy
8. Data Protection in the Context of Our Recruitment Activities
The following information applies in particular to candidates, applicants, clients, interested parties, cooperation partners, and authorized representatives.
What sources and data do we use?
We process personal data that we receive from candidates, applicants and clients in the course of our business relationship. This can include personal data (name, contact details, email, phone, location), professional data (current and previous employers, position, academic background, leadership experience), career preferences (career goals, target compensation, notice period, motivation for change), application documents (CV, certificates, references, project lists) provided via our Jotform upload or directly by email, communication records (email correspondence, phone notes, records of briefings), records of interactions with our clients (introductions, feedback, status updates), data from online meetings via Microsoft Teams, data we obtain lawfully from publicly accessible sources (LinkedIn, press, internet) to the extent necessary for our services, and master data of clients (company details, contact persons, contractual data, billing data).
Where and how is this data stored?
CV files and application documents: Microsoft SharePoint (EU-hosted), with metadata references in Airtable. Communication: Microsoft Outlook (IONOS for incoming/outgoing transport, Microsoft 365 for storage). Meeting records: Microsoft Teams (transient) and Microsoft SharePoint where saved. Calendar and scheduling: Microsoft Outlook and Calendly.
For what purposes do we process your data?
We process personal data in accordance with the GDPR and the German Federal Data Protection Act (BDSG):
To fulfill contractual obligations (Art. 6(1)(b) GDPR): Processing for the provision of executive search services, candidate consulting, placement, anonymized candidate profiles, needs analyses, and contractual obligations.
Within the framework of legitimate interests (Art. 6(1)(f) GDPR): Contacting candidates with relevant job opportunities, internal organization, data security, prevention of legal claims.
Based on consent (Art. 6(1)(a) GDPR): Where you have given consent for specific purposes, such as long-term storage in our candidate database beyond a specific search.
Due to legal obligations (Art. 6(1)(c) GDPR): Identity verification, tax obligations, money laundering prevention.
Who receives your data?
Within our company, only those persons who need access to your data to fulfill our contractual and legal obligations receive access. Given that we operate as a solo founder firm, this is primarily Christian Rados personally.
External recipients may include our clients, when introducing you as a candidate (only with your prior consent for each specific introduction); processors we use (Microsoft, Webflow, IONOS, Calendly, Jotform, Make, Airtable) for the technical operation of our infrastructure, on the basis of data processing agreements; and tax advisors, auditors and authorities where legally required.
Are data transferred to a third country?
Primary data storage takes place within the European Union (SharePoint in EU, IONOS in Germany). Where processors are based in the USA (Webflow, Calendly, Jotform, Airtable, Microsoft parent), data transfer is based on the EU-U.S. Data Privacy Framework and additionally on EU Standard Contractual Clauses.
How long will your data be stored?
We process and store your personal data as long as it is necessary for the fulfillment of our contractual and legal obligations. After the conclusion or termination of our business relationship, your data will be stored for the duration of statutory retention periods. These periods include Commercial Code (HGB) and Fiscal Code (AO) requirements of typically 6 to 10 years, Money Laundering Act (GwG) requirements of typically 5 years, and statutory limitation periods (BGB) of typically 3 years, up to 30 years in exceptional cases.
If you wish to remain in our candidate database beyond the conclusion of a specific search, we will store your data based on your explicit consent, which you can revoke at any time.
Your data protection rights
Every data subject has the right to information (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to deletion (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to object (Art. 21 GDPR), and the right to data portability (Art. 20 GDPR).
The restrictions according to §§ 34 and 35 BDSG apply to the right of access and the right to erasure. In addition, there is a right to lodge a complaint with a supervisory authority under Art. 77 GDPR.
A consent given for processing personal data can be revoked at any time. The revocation is only effective for the future; processing carried out before the revocation remains lawful.
Is there automated decision-making or profiling?
We do not use automated decision-making according to Art. 22 GDPR. We partially process your data with the aim of evaluating specific aspects of your professional profile to inform and advise you about relevant opportunities. For this purpose, we use evaluation criteria within our internal systems. The evaluation does not constitute automated decision-making in the legal sense.
Are you obliged to provide your data?
In the context of our business relationship or its initiation, you must provide those personal data necessary for establishing and carrying out a consulting or placement service and fulfilling the associated contractual obligations. Without this data, we will generally not be able to provide our services.
9. Contact
For all questions on data protection, to exercise your rights, or to revoke consent, you can contact us at any time:
Rados Recruiting GmbH
Prinzregentenstr. 54
80538 Munich, Germany
Email: contact@rados-recruiting.com
Phone: +49 89 1250 9538-0