1. Controller

The controller responsible for the processing of personal data on this website is:

Sarah Scholz, Rohrer Weg 1, 80638 Munich, Germany, Phone: +49 163 7269531, Email: info@sarahscholzadvisory.com 

I am not required to appoint a data protection officer.

​

2. Hosting and provision of the website

This website is operated using the website builder and hosting service Wix. The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Wix processes the data generated when the website is accessed on my behalf. I have concluded a data processing agreement with Wix pursuant to Art. 28 GDPR.

​

The European Commission has determined that Israel provides an adequate level of data protection (Decision 2011/61/EU). Wix also uses sub-processors, including data centre operators in the United States. Transfers to the United States are based on the Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

​

3. Server log files

Each time you access this website, information transmitted by your browser is collected automatically: IP address, date and time of access, the page accessed, referrer URL, browser type and version, and operating system. This data is processed in order to deliver the website, ensure its stable operation, and detect and prevent misuse or attacks. The legal basis is my legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR). The log data is stored by Wix as my processor. Wix does not specify a fixed retention period; the data is retained only as long as necessary to deliver the website and to ensure its security and stability, taking into account the nature of the data and the risk of misuse, and is then deleted or anonymised. Where log data is required to investigate a specific security incident, it is retained until the incident has been resolved.

 

4. Cookies and consent management

This website uses cookies and similar technologies. I use technically necessary cookies to provide the website, ensure its security and store your choices in the cookie banner. These cookies do not require your consent, as they are strictly necessary to provide the service you have requested (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act – TDDDG). The related processing of personal data is based on my legitimate interest in a functional website (Art. 6(1)(f) GDPR). All other cookies, for example for statistical purposes, are only set if you have given your consent via the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You may withdraw your consent at any time with effect for the future via the “Cookie Settings”. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal. You can also delete or block cookies in your browser settings.

​

5. Contact by email or telephone

If you contact me by email or telephone, I process the information you provide, namely your name, contact details and the content of your enquiry, in order to handle and respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract. Otherwise, the processing is based on my legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

My email provider processes emails on my behalf under a data processing agreement pursuant to Art. 28 GDPR.

I delete your data as soon as it is no longer required to process your enquiry. This does not apply to data that I am required to retain under statutory retention obligations, in particular tax-relevant business correspondence pursuant to Section 147 of the German Fiscal Code (AO) (six to eight years).

​

6. Contact form

If you send me an enquiry via the contact form, I process the data you enter, namely your first and last name, email address, message and, if provided, your phone number, in order to handle your enquiry. Mandatory fields are marked with an asterisk; without this information, I cannot process your enquiry. The form data is stored by Wix (see Section 2). Section 5 applies accordingly with regard to the legal bases and retention period.

​

7. Link to LinkedIn

I maintain a profile on the LinkedIn network at https://www.linkedin.com/in/scholz-sarah. Accessing my website does not transmit any data to LinkedIn. You will only be redirected to LinkedIn when you click on the link. From that point on, LinkedIn is responsible for the processing of your data.

​

8. Privacy information for my LinkedIn profile

I maintain a profile on the LinkedIn network at [profile URL]. I use it to present my consulting services and to communicate with prospective clients and business partners. The network is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

​

When you visit my profile, LinkedIn processes your personal data under its own responsibility, such as your IP address, device and browser information and, if you are logged in, the data of your LinkedIn account. LinkedIn uses cookies and similar technologies for this purpose. LinkedIn also transfers data to LinkedIn Corporation in the United States. I have no influence on this processing. Further details can be found in LinkedIn's Privacy Policy at https://www.linkedin.com/legal/privacy-policy.

​

I myself process the data you make available to me via LinkedIn, for example in connection with connection requests, messages or comments, as well as the information in your public profile, to the extent necessary to communicate with you. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion of a contract, and otherwise my legitimate interest in communicating with prospective clients and business partners (Art. 6(1)(f) GDPR). I only receive statistics on profile visits or the reach of my posts in the form provided by LinkedIn. I do not use them to approach individual visitors.

​

9. Your rights

You have the right of access to the personal data stored about you (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, please use the contact details provided in Section 1. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

​

10. Right to object

Where I process your data on the basis of my legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to such processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). I will then no longer process your data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where I process your data for direct marketing purposes, you may object to such processing at any time without giving reasons (Art. 21(2) GDPR).

​

10. Automated decision-making

I do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

​

12. Status

This Privacy Policy is dated October 2026.