Privacy policy

Last updated: October 2026

Controller

General information

We only process personal data to the extent necessary to provide this website, handle your enquiries and deliver our services. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests).

Hosting and server log files

This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you visit the website, technically necessary data is processed, in particular IP address, date and time, page visited, referrer URL and browser and operating system information. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR).

Data is transferred to the USA. The transfer is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, insofar as the provider is certified under it, and additionally on standard contractual clauses.

Inquiry forms

Our website has two forms. Through the “Request staff” form we process the details of companies (company, contact person, phone number, email address, location, position needed, number of employees, preferred start date, message). Through the “I am looking for work” form we process the details of applicants (name, phone number and/or email address, job wanted, licence classes, work experience, current country, message). We use this data to handle your inquiry or application. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract, otherwise Art. 6(1)(f) GDPR; the section “Applicant data” applies to placement with employers.

We use the following services to transmit and manage enquiries: n8n GmbH, Novalisstraße 10, 10115 Berlin, Germany (n8n Cloud workflow platform – receiving form data and forwarding it by email); Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus (email mailbox); Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace, document storage); Trello, a service of the Atlassian group with servers including in the USA (enquiry management). Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses.

AI chat assistant

Our website offers an optional AI-powered chat assistant. It is only loaded and only receives data when you open the chat and click “Start chat”. We process your chat messages, the details you enter there (e.g. name, company, email address, phone number, your staffing needs or your work experience) and a random session ID.

The purpose is to answer your questions, prepare a possible cooperation and, at your request, book a call. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries quickly).

Services used: n8n GmbH, Berlin, Germany (n8n Cloud workflow platform); Anthropic, PBC, San Francisco, USA (Claude AI model; transfer to the USA based on standard contractual clauses); Google Ireland Limited, Dublin, Ireland (Google Calendar for booking calls, Gmail for forwarding the summary to us). If you book a call, you receive a calendar invitation with a Google Meet link at the email address you provide.

Replies are generated automatically by an AI and may contain errors. Binding information is only provided by our staff. There is no automated decision-making within the meaning of Art. 22 GDPR. Please do not enter ID, health or other sensitive data in the chat. Chat histories and summaries are deleted according to the same periods as other enquiries.

Contact by email, phone or WhatsApp

If you contact us by email, phone or WhatsApp, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). WhatsApp is a service of WhatsApp Ireland Limited (Meta); WhatsApp’s privacy policy also applies when you use it. The link on this website only opens WhatsApp after you click it.

Applicant data and disclosure to employers

If you contact us as an applicant, we process your details to find suitable jobs for you. We only pass your data on to potential employers in Germany with your consent (Art. 6(1)(a) GDPR). In a visa or approval procedure, data is transmitted to the competent authorities insofar as this is necessary for the procedure (Art. 6(1)(b) and (c) GDPR).

Processing in Albania

Our company is based in Albania, so your enquiries are also handled there. There is no European Commission adequacy decision for Albania. The transfer takes place because it is necessary to handle your enquiry or to carry out pre-contractual measures at your request (Art. 49(1)(b) GDPR). We treat your data in line with the principles of the GDPR.

Retention period

We only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods. Enquiries that do not lead to a cooperation are deleted after 6 months at the latest.

Cookies and local storage

This website does not use tracking or marketing cookies and does not load external fonts, maps or videos. Only your choice in the privacy notice is stored in your browser’s local storage. This is technically necessary (Section 25(2) No. 2 TDDDG). See our cookie policy for details.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). An informal message to info@sionconsulting.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your residence or place of work.

Obligation to provide data

Providing your data is voluntary. However, we cannot handle your enquiry without the information marked as required.

No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.