Privacy Policy
Dr. William Clark Consulting
Last Updated: July 11, 2025
I. GDPR Compliance Statement
Data Protection and Privacy Statement
This Data Protection and Privacy Statement explains how Dr. William Clark Consulting ("we," "us," or "our") processes personal data in compliance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
1. Data Controller
Dr. William Clark Consulting
Zwickauer Str. 137, 01187 Dresden, Germany
Tel: +49 (0) 15234 606 638
2. Categories of Personal Data We Process
In providing our academic-to-industry transition services, we collect and process:
-
Identity and Contact Data: Name, email address, phone number, postal address
-
Professional Data: CV/resume, academic history, work experience, skills inventory, career goals
-
Account Data: Login information for our client portal (if applicable)
-
Communication Data: Our correspondence and consultation records
-
Service Delivery Data: Documents produced, feedback provided, project timelines
-
Payment Data: Banking or payment information necessary for billing
3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes and legal bases:
Purpose Legal Basis Details
Service Delivery Contract Performance To fulfill our contractual obligations in providing academic-to-industry transition services
Client Communication Contract Performance To communicate about your project and provide consultative advice
Document Creation & Storage Contract Performance To create, revise, and store documents relevant to your service
Service Improvement Legitimate Interest To analyze service effectiveness and improve our offerings
Marketing Consent To share information about relevant services (only with explicit consent)
Legal Compliance Legal Obligation To comply with applicable legal requirements
4. Data Storage and Security
Your personal data is stored on and processed by:
-
Wix Platform: Our website hosting provider, where initial contact forms and client portal functions may be hosted
-
Microsoft OneDrive: Cloud storage for document drafts and final deliverables
-
Personal Computer: Local storage of working documents with appropriate security measures
-
Writesonic: AI content generation platform used to assist in creating personalized career transition documents
-
Canva: Design platform used to create professional documents and visual materials
Third-Party Processing Information
Wix
-
Processes contact form submissions and website interactions
-
Stores client account information if you use our client portal
-
Privacy policy available at: https://www.wix.com/about/privacy
Microsoft OneDrive
-
Stores client documents and communication records
-
Implements enterprise-grade security and compliance features
-
Privacy policy available at: https://privacy.microsoft.com
Writesonic
-
Processes information we input to generate tailored content
-
Temporarily processes document content and professional information
-
Privacy policy available at: https://writesonic.com/privacy-policy
Canva
-
Used to design and create professional documents
-
May store document templates and design elements
-
Privacy policy available at: https://www.canva.com/policies/privacy-policy/
We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:
-
Password protection and encryption of devices and accounts
-
Multi-factor authentication where available
-
Regular security updates and patches
-
Limited access to personal data on a need-to-know basis
-
Regular security reviews of our processing systems
-
Secure data transfer protocols
-
Careful selection of third-party processors with appropriate data protection measures
-
Data minimization practices to limit processing to what is necessary
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
-
Active Client Relationship: Throughout our contractual relationship
-
Post-Service Period: Up to 24 months after service completion to allow for follow-up support
-
Legal Requirements: As required by applicable tax, accounting, or other legal obligations (typically 6-10 years for financial records in Germany)
Our retention practices for specific platforms include:
-
Wix: Client account data maintained until account closure or data deletion request
-
OneDrive: Client documents retained according to our retention schedule
-
Writesonic: Input data removed after content generation is complete
-
Canva: Document templates retained for service delivery but client-specific information removed after project completion
You may request deletion of your data at any time, subject to legal retention requirements.
6. Data Recipients and Transfers
Your personal data may be accessed by:
-
Authorized personnel within our organization
-
Contracted service providers necessary for service delivery (e.g., professional photographers if arranged through our service)
-
Cloud service providers (Microsoft, Wix, Canva, Writesonic)
Our service providers are bound by data processing agreements ensuring GDPR compliance.
For international transfers, we ensure appropriate safeguards are in place through:
-
Standard contractual clauses approved by the European Commission
-
Transfers only to countries with adequate data protection as determined by the European Commission
-
Service providers certified under approved certification mechanisms (e.g., EU-US Data Privacy Framework)
7. Your Rights Under GDPR
As a data subject, you have the following rights:
-
Right to Access: Request information about your personal data we process
-
Right to Rectification: Request correction of inaccurate data
-
Right to Erasure: Request deletion of your data under certain circumstances
-
Right to Restriction: Limit how we use your data under certain circumstances
-
Right to Data Portability: Receive your data in a structured, machine-readable format
-
Right to Object: Object to processing based on legitimate interests or direct marketing
-
Right to Withdraw Consent: Withdraw previously given consent at any time
-
Right to Lodge a Complaint: File a complaint with a supervisory authority
To exercise these rights, please contact us at info@williamclarkconsulting.com. We will respond to your request within one month as required by the GDPR.
8. Automated Decision-Making
Our services do not involve automated decision-making or profiling that produces legal or similarly significant effects. While we use Writesonic to assist in content generation, all outputs are reviewed and customized by our human experts before being provided to you.
9. Changes to This Statement
We may update this statement to reflect changes in our data practices or legal requirements. Significant changes will be communicated directly to active clients.
10. Data Protection Officer/Contact
II. Document Ownership and Usage Rights
1. Ownership of Deliverables
All final documents, assessments, strategies, and other deliverables ("Deliverables") created by Dr. William Clark Consulting for the client as part of our academic-to-industry transition services shall become the property of the client upon full payment of applicable fees. This includes content generated with the assistance of Writesonic and designed using Canva that has been professionally reviewed and finalized by our team.
2. Limited License for Marketing Purposes
While maintaining full respect for client confidentiality and in compliance with German data protection law (particularly the BDSG and GDPR), the client grants Dr. William Clark Consulting a limited, non-exclusive license to use anonymized excerpts from Deliverables for marketing, educational, and promotional purposes, subject to the following conditions:
a) Anonymization Process: All identifying information will be removed, including:
-
Names and contact information
-
Specific employers and institutions
-
Unique project details that could identify the client
-
Dates that could be used to identify the client
-
Any other information that could reasonably identify the client
b) Usage Limitations: Anonymized content may be used for:
-
Service examples on our website
-
Case studies demonstrating effective transition strategies
-
Training materials for our team
-
Marketing materials demonstrating our expertise
-
Educational content for prospective clients
c) Restricted Content: We will never use:
-
Sensitive personal data as defined by GDPR Article 9
-
Confidential career information shared during consultations
-
Financial information or salary discussions
-
Negative feedback or challenging aspects of a client's situation
3. Client Opt-Out Right
Clients may opt out of this limited license at any time by submitting a written request to contact@williamclarkconsulting.com. Upon receipt of such request, we will:
-
Cease using the client's anonymized content in new marketing materials
-
Remove the content from digital marketing channels within 30 days
-
Exclude the content from future printed materials
4. Compliance with German Law
This limited license is specifically designed to comply with German data protection law, including:
-
Section 7 of the German Federal Data Protection Act (BDSG)
-
Article 6(1)(f) GDPR regarding legitimate interests
-
Relevant provisions of the German Civil Code (BGB) regarding personal rights
-
Case law of German courts regarding testimonials and anonymized examples
Under German law, the use of anonymized content for marketing purposes is generally permissible when:
-
The content is truly anonymized (no identification possible)
-
The use serves legitimate business interests
-
The fundamental rights and freedoms of the data subject do not override these interests
-
There is transparency about this practice
-
Opt-out mechanisms are provided
5. No Endorsement Implied
Use of anonymized content does not imply endorsement by the client and will not be presented as testimonials unless separate explicit consent is obtained for that specific purpose.
6. Term of Limited License
This limited license shall remain in effect for three (3) years from the completion of services, after which we will obtain renewed permission before continuing to use the anonymized content.