Home Privacy policy
Privacy policy
This English translation is provided for convenience. The German version is legally binding.
1. Controller
BOLD EXECS NTWK UG (haftungsbeschränkt) & Co. KG, Alstertor 9, 20095 Hamburg, Germany, contact@ben.partners
2. Visiting this website
Hosting: This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and delivered via its content delivery network. When you access the website, technically necessary data is processed: IP address, date and time, the page accessed, browser and operating system. The legal basis is our legitimate interest in a secure and functional website (Art. 6 (1) lit. f of the General Data Protection Regulation (GDPR)). Transfers to the USA are based on the EU-US Data Privacy Framework or EU standard contractual clauses.
Fonts: The fonts on this website are loaded from our own server. No data is transferred to third parties in the process.
Audience measurement: We use Umami (Umami Software, Inc., USA) to analyse the use of this website in anonymous form. Umami does not set cookies and does not store complete IP addresses. It is not possible to identify you personally. The legal basis is our legitimate interest in improving the website (Art. 6 (1) lit. f GDPR).
3. Contact and appointment booking
If you contact us by email or phone, we process the information you provide in order to respond to your enquiry (Art. 6 (1) lit. b or f GDPR). We delete it once your enquiry has been dealt with, unless statutory retention obligations apply.
For appointment bookings we use Cal.com (Cal.com, Inc., USA). In doing so, we process the information you provide when booking, e.g. name, email address and the subject of your request, in order to hold the appointment (Art. 6 (1) lit. b GDPR). Transfers to the USA are based on the EU-US Data Privacy Framework or EU standard contractual clauses.
4. Value App
The Value App (valuetest.ben.partners) lets you discover your personal values. We are the controller (see section 1).
Data: For your account we process your first name, last name, email address and password (encrypted). Depending on the test, we also ask for your year of birth, gender, company and department. Using the app generates your answers and your results (values profile) and, where applicable, an access code from our card game.
Purpose and legal basis: We use this data to provide you with your account, the test and your results (Art. 6 (1) lit. b GDPR). We view your results in order to support you with any questions and to discuss them with you if you arrange a conversation with us.
Optional survey: If you take part in our survey at the end of the test, we evaluate your answers for the Value Driven Leadership Index only in aggregated and anonymised form. Participation is voluntary (Art. 6 (1) lit. a GDPR).
Test via your company: If you take the test as part of a project with your company, your company will receive your individual results only with your consent.
Service providers: The app runs on Firebase (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for hosting, login and database. Data may also be processed by Google LLC in the USA. This is based on the EU-US Data Privacy Framework or EU standard contractual clauses. For audience measurement we use Umami without cookies, as on the website (section 2).
Retention period: for as long as your account exists. If you request deletion, we delete your account and your results.
5. Candidates in executive search
We fill leadership positions in permanent employment, interim management and advisory boards. The following applies when we approach you about a position, speak with you or present you to a company.
Purposes: We process your data in order to identify and approach you as a potential candidate, to assess your suitability and your values in conversation and with our Value Exploration, to present you to a client once you have agreed and, with your consent, to approach you again later about suitable positions.
Data: name, contact details and professional profiles; CV, career history, qualifications, references and employment certificates; current salary, salary expectations, notice period and availability; content of and notes from our conversations; results of the Value Exploration. We do not require special categories of personal data (e.g. health, religion).
Source: We receive most data directly from you. If we approach you proactively, the initial data comes from publicly available sources, mainly professional networks such as LinkedIn and XING, company websites and trade media, or from recommendations within our network. In this case, we draw your attention to this notice when we first contact you, and at the latest within one month.
Legal bases:
- Identification and initial approach: legitimate interest (Art. 6 (1) lit. f GDPR). Our interest is to find suitable executives for our clients. For this purpose we use professional data only and inform you immediately.
- Conversations and support during the placement process: pre-contractual measures at your request (Art. 6 (1) lit. b GDPR).
- Disclosure to a client and storage for future positions: your consent (Art. 6 (1) lit. a GDPR).
- Proof of a completed placement and statutory retention obligations: Art. 6 (1) lit. c and f GDPR.
Recipients: Clients receive your data only with your prior consent, and only the specific company you have agreed to. Your current employer will learn nothing from us without your express consent. We obtain references only with your consent and only from persons you name. We also use carefully selected service providers as processors (Art. 28 GDPR), e.g. for CRM, email, cloud storage, appointment booking and AI-supported tools for transcribing and summarising conversations. Where these process data outside the EU, in particular in the USA, this is based on the EU-US Data Privacy Framework or EU standard contractual clauses. A current list is available on request.
Retention period:
- After an approach with no further interest: for as long as this is necessary for ongoing or foreseeable placement processes for which you may be considered. If you object, we delete your data immediately.
- During the placement process: for the duration of the cooperation and no later than 12 months after it ends.
- With consent for future positions: up to 36 months after the process ends. Before this period expires, we will ask whether you would like to extend it. Without your consent, we delete the data.
- After a successful placement: the data required as proof until the statutory limitation period of 3 years has expired.
No automated decisions: We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR. The Value Exploration serves as a basis for conversation; every assessment and decision is made by a human being.
Provision of data: You are not obliged to provide us with any data. Without it, however, we cannot consider you for a position.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 18 and 20 GDPR).
Right to object: Where we process your data on the basis of our legitimate interest, you may object at any time (Art. 21 GDPR).
Withdrawal of consent: You may withdraw your consent at any time with effect for the future.
An informal email to contact@ben.partners is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).
Version: October 2026
Privacy Notice for Candidates
We fill leadership positions in permanent roles, interim management and advisory boards. The following applies when we approach you about a position, speak with you or present you to a company.
Controller: BOLD EXECS NTWK UG (haftungsbeschränkt) & Co. KG, Alstertor 9, 20095 Hamburg, Germany, contact@ben.partners
Purposes: We process your data to identify and approach you as a potential candidate, to assess your fit and your values in conversation and through our Value Exploration, to present you to a client after you have agreed and, with your consent, to contact you about suitable future opportunities.
Data: name, contact details and professional profiles; CV, career history, qualifications, certificates and references; current salary, salary expectations, notice period and availability; content and notes from our conversations; results of the Value Exploration. We do not need special categories of data (e.g. health, religion).
Sources: Most data we receive directly from you. If we approach you actively, the initial data comes from publicly available sources, mainly professional networks such as LinkedIn and XING, company websites and trade media, or from recommendations within our network. In this case, we point you to this notice when we first contact you, at the latest within one month.
Legal basis:
- Identification and initial approach: legitimate interest (Art. 6 (1)(f) GDPR). Our interest is to find suitable leaders for our clients. We use professional data only and inform you right away.
- Conversations and support during the recruitment process: pre-contractual measures at your request (Art. 6 (1)(b) GDPR).
- Forwarding to a client and storage for future opportunities: your consent (Art. 6 (1)(a) GDPR).
- Proof of a completed placement and statutory retention obligations: Art. 6 (1)(c) and (f) GDPR.
Recipients: Clients receive your data only after your prior consent, and only the specific company you have agreed to. Your current employer will learn nothing from us without your explicit consent. We only obtain references with your consent and only from persons you name. We also use carefully selected service providers acting as processors (Art. 28 GDPR), e.g. for CRM, email, cloud storage, scheduling and AI-supported tools for transcribing and summarising conversations. Where they process data outside the EU, in particular in the USA, this is based on the EU-US Data Privacy Framework or EU standard contractual clauses. A current list is available on request.
Retention:
- After an approach without further interest: for as long as this is necessary for ongoing or foreseeable recruitment processes for which you may be considered. If you object, we delete your data immediately.
- During a recruitment process: for the duration of the cooperation and no later than 12 months after it ends.
- With consent for future opportunities: up to 36 months after the process ends. Before this period expires, we will ask whether you would like to extend it. Without your consent, we delete the data.
- After a successful placement: the data required to prove the placement until the statutory limitation period of 3 years expires.
No automated decisions: We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR. The Value Exploration serves as a basis for conversation; every assessment and decision is made by a person.
Your rights: access, rectification, erasure, restriction of processing and data portability (Art. 15 to 18 and 20 GDPR). Where we rely on legitimate interest, you can object at any time (Art. 21 GDPR). You can withdraw consent at any time with effect for the future. An informal email to contact@ben.partners is sufficient. You may also lodge a complaint with a supervisory authority; the authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).
Obligation to provide data: You are not obliged to provide any data. Without it, however, we cannot consider you for a position.
Version: October 2026
Privacy Notice for the Value App
The Value App (valuetest.ben.partners) helps you discover your personal values. The controller is BOLD EXECS NTWK UG (haftungsbeschränkt) & Co. KG, Alstertor 9, 20095 Hamburg, Germany, contact@ben.partners.
Data: For your account we process first name, last name, email address and password (encrypted). Depending on the test, we also ask for year of birth, gender, company and department. Using the app creates your answers and your results (values profile), and possibly an access code from our card game.
Purpose and legal basis: We use this data to provide your account, the test and your results (Art. 6 (1)(b) GDPR). We view your results to support you with questions and to discuss them with you if you book a conversation with us.
Optional survey: If you take part in the survey at the end of the test, we evaluate your answers for the Value Driven Leadership Index only in aggregated and anonymised form. Participation is voluntary (Art. 6 (1)(a) GDPR).
Tests via your company: If you take the test as part of a project with your company, your company will only receive your individual results with your consent.
Service providers: The app runs on Firebase (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for hosting, login and database. Data may also be processed by Google LLC in the USA, based on the EU-US Data Privacy Framework or EU standard contractual clauses. For audience measurement we use Umami, without cookies.
Retention: for as long as your account exists. If you request deletion, we delete your account and your results.
Your rights: access, rectification, erasure, restriction of processing and data portability (Art. 15 to 18 and 20 GDPR), the right to object (Art. 21 GDPR) and to withdraw consent at any time. An informal email to contact@ben.partners is sufficient. You may also lodge a complaint with a supervisory authority; the authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (datenschutz-hamburg.de).
Version: October 2026