Privacy Policy
Dr. William Clark Consulting
Last Updated: 30 September, 2026
1. Controller
Dr. William Clark Consulting
Dr. rer. nat. William Clark
Zwickauer Str. 137, 01187 Dresden, Germany
Tel: +49 (0) 15234 606 638 · Email: info@williamclarkconsulting.com
This policy explains how we process personal data under the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (BDSG) and the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG).
2. Categories of Personal Data We Process
-
Identity and contact data: name, email address, telephone number, postal address
-
Professional data: CV/resume, academic history, work experience, skills, career goals
-
Account data: login information for our website members area, if you use it
-
Communication data: correspondence, consultation notes, webinar and workshop participation
-
Service delivery data: documents produced, feedback, project timelines
-
Payment and billing data: the data needed to invoice and collect payment
-
Website usage data: see section 4
3. Purposes and Legal Bases
PurposeLegal basisDetailsDelivery of our consulting, coaching and training servicesArt. 6(1)(b) GDPR — contractPerforming the agreement we have with youClient communicationArt. 6(1)(b) GDPR — contractProject communication and consultative adviceCreating and storing your documentsArt. 6(1)(b) GDPR — contractDrafting, revising and storing your deliverablesAnswering enquiries before a contract existsArt. 6(1)(b) GDPR — pre-contractual stepsContact and application formsOperating and securing the websiteArt. 6(1)(f) GDPR — legitimate interestA technically reliable, secure websiteAnalytics and measurementArt. 6(1)(a) GDPR — consentOnly after you accept in the cookie bannerNewsletter and marketing emailsArt. 6(1)(a) GDPR — consentSee section 6; withdrawable at any timeAdvertising and reach measurement (LinkedIn)Art. 6(1)(a) GDPR — consentOnly after you accept in the cookie bannerInvoicing, accounting, tax retentionArt. 6(1)(c) GDPR — legal obligation§§ 147 AO, 257 HGBEstablishing or defending legal claimsArt. 6(1)(f) GDPR — legitimate interestOnly where necessary4. Visiting our website
Our website is hosted by Wix.com Ltd. (Israel/EU/USA). When you access the site, your browser automatically transmits data that our host stores in server log files: IP address, date and time of the request, the page requested, referrer URL, browser type and version, operating system. This is processed on the basis of Art. 6(1)(f) GDPR for a stable, secure presentation of the website and is deleted or anonymised after a short period. Wix acts as our processor under a data processing agreement (https://www.wix.com/about/privacy).
Cookies, analytics and advertising technologies are described in detail in our Cookie Policy. Nothing beyond what is strictly necessary is loaded before you consent in the cookie banner, and you may withdraw that consent at any time with effect for the future.
4. Recipients and processors
We use the following service providers. All of them process personal data on our behalf under Art. 28 GDPR or as independent controllers where indicated.
Website and online services
-
Wix.com Ltd. — website hosting, contact and signup forms, bookings, online store, members area, blog. https://www.wix.com/about/privacy
-
Google Ireland Ltd. / Google LLC — Google Analytics 4 (measurement ID G-5Z4X1029VJ) and Google Tag Manager. Only after consent. IP addresses are shortened; we do not use Google Signals-based advertising features. https://policies.google.com/privacy
-
LinkedIn Ireland Unlimited Company / LinkedIn Corporation — LinkedIn Insight Tag, used to measure the success of our LinkedIn content and campaigns. Only after consent. https://www.linkedin.com/legal/privacy-policy
-
Writesonic Inc. — an SEO script loaded on our site, plus AI-assisted drafting of content. https://writesonic.com/privacy-policy
Email, sales and events
-
Klaviyo Inc. — newsletter and email marketing platform; stores your email address, name, signup source, and whether you opened or clicked our emails. https://www.klaviyo.com/legal/privacy-notice
-
ThriveCart LLC — checkout and order processing for our digital products and programmes. https://thrivecart.com/privacy/
-
Zoom Communications Inc. — webinars, workshops and online consultations (name, email, participation data). https://explore.zoom.us/en/privacy/
-
Zoho Corporation B.V. — our business email (Zoho Mail), which processes the content of our correspondence with you. https://www.zoho.com/privacy.html
Documents and design
-
Microsoft Ireland Operations Ltd. — OneDrive cloud storage for drafts and deliverables. https://privacy.microsoft.com
-
Canva Pty Ltd. — design of documents and visual materials. https://www.canva.com/policies/privacy-policy/
Beyond these, personal data may be disclosed to our tax advisor, bank and payment service provider, and to public authorities where we are legally required to do so.
5. Newsletter ("PhD Power Minute") and marketing emails
If you subscribe to our newsletter or download a free resource, we process your email address and first name to send you the content you asked for and related career-transition tips. The legal basis is your consent under Art. 6(1)(a) GDPR; sending is governed by § 7 UWG. We record your consent (time, IP address where available, and the form used) so that we can demonstrate it. Our newsletter is operated by Klaviyo Inc.; the measurement of opens and clicks is part of the consent you give when subscribing and helps us send more relevant content.
You can unsubscribe at any time — through the unsubscribe link in every email or by writing to info@williamclarkconsulting.com. After unsubscribing, we keep your email address on a suppression list so that we do not contact you again.
6. Retention
We keep personal data only as long as it is needed:
-
Active client relationship: for the duration of the contract
-
After service completion: up to 24 months for follow-up support, unless you ask us to delete earlier
-
Invoices, contracts and accounting records: 6 to 10 years (§ 147 AO, § 257 HGB)
-
Newsletter data: until you unsubscribe; the suppression entry is kept to honour your objection
-
Website log data: a short period for security purposes
-
Consent records: for the duration of the processing plus the limitation period
7. Transfers outside the EU/EEA
Some of the providers above are based in, or process data in, the United States or other third countries. Such transfers are based on an adequacy decision of the European Commission (Art. 45 GDPR — EU-US Data Privacy Framework, where the provider is certified) and/or the European Commission's standard contractual clauses (Art. 46 GDPR), supplemented by additional safeguards where required. Despite these measures, we cannot rule out that authorities in third countries obtain access to transferred data. You may request a copy of the safeguards from us at any time.
8. Your documents and deliverables
Ownership of the deliverables we create for you, and the limited licence to use anonymised excerpts for marketing, are governed by our Terms & Conditions. You may object to that use at any time by writing to contact@williamclarkconsulting.com.
9. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects for you or similarly significantly affects you. Where AI tools assist in drafting content, every output is reviewed and adapted by a human before it reaches you.
10. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent you gave, at any time with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR. If your data is processed for direct marketing, you have the right to object at any time, without giving reasons; we will then stop processing your data for that purpose.
To exercise any of these rights, write to info@williamclarkconsulting.com. We respond within one month.
11. Right to lodge a complaint
You may lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority competent for us is:
Die Sächsische Datenschutz- und Transparenzbeauftragte, Maternistraße 17, 01067 Dresden, Germany — www.datenschutz.sachsen.de
12. Contact for data protection matters
Questions about this policy or about your data: Dr. William Clark, info@williamclarkconsulting.com, +49 (0) 15234 606 638.
We are not required to appoint a Data Protection Officer under § 38 BDSG.
13. Data security
We protect your data with appropriate technical and organisational measures, including TLS encryption of the website, password protection and encryption of devices and accounts, multi-factor authentication where available, regular updates, need-to-know access, careful selection of processors and data minimisation.
14. Changes to this policy
We update this policy when our processing or the legal requirements change. The current version is always available on this page; significant changes affecting active clients are communicated directly.