Introduction
At Flò Executive Search, trust and confidentiality are fundamental to everything we do. We are committed to handling personal information responsibly, transparently, and in accordance with applicable data protection laws.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website or otherwise interact with us. It also outlines the rights and choices available to you regarding your personal information.
We process personal information in accordance with the European Union General Data Protection Regulation (GDPR) and applicable German data protection laws.
Who We Are
Flò Executive Search is operated by Anastasia Rettig.
For the purposes of the European Union General Data Protection Regulation (GDPR), the Data Controller responsible for processing personal information collected through this website is:
Anastasia Rettig
trading as Flō
Zinklesweg 26
97078 Würzburg
Germany
Email: [email protected]
If you have any questions regarding this Privacy Policy or the processing of your personal information, please contact us using the details above.
Information We Collect
When you interact with Flò Executive Search, we may collect personal information that you choose to provide to us or that is collected automatically when you visit this website.
If you submit an enquiry or contact us through our website or by email, we may collect your name, email address, company, professional title, and any other personal information contained in yourcorrespondence.
If you provide us with a résumé, CV, or other professional materials in connection with a potential executive search assignment, business relationship, or other professional enquiry, we may collect the information contained in those documents, including your educational background, professional experience, qualifications, career interests, references, and any other information you choose to provide.
Where appropriate, we may also collect publicly available professional information from sources such as company websites, professional networking platforms, or other publicly accessible sources, where this is relevant to establishing or maintaining a professional relationship.
If you provide personal information relating to another individual, you are responsible for ensuring that you have the necessary permission to share that information with us.
Information Collected Automatically
When you visit this website, we automatically collect certain technical information necessary for the operation, security, and performance of the website.
This information may include your IP address, browser type, device information, operating system, language settings, referring website, pages visited, the date and time of your visit, and other technical usage information.
We also use cookies and similar technologies to operate the website, improve its functionality, understand how visitors use the website, and, where applicable, support analytics. Further information about our use of cookies is provided below.
How We Use Personal Information
We may use your Personal Information to respond to your enquiries, communicate with you, and provide information relating to Flò Executive Search.
Where applicable, we may use your Personal Information in connection with executive search, leadership advisory, or other professional engagements, including evaluating potential professional relationships, facilitating introductions, assessing suitability for opportunities, and communicating with relevant individuals or organizations where appropriate.
We may also use your Personal Information to operate, maintain, secure, and improve this website, understand how visitors interact with the website, improve its functionality and performance, and enhance the overall user experience.
In addition, we may process Personal Information where necessary to protect the security and integrity of our website, prevent fraud or misuse, comply with applicable legal and regulatory obligations, establish, exercise, or defend legal claims, or respond to lawful requests from public authorities.
Where we wish to process your Personal Information for purposes other than those described in this Privacy Policy, we will do so only where we have an appropriate legal basis or, where required by applicable law, with your consent.
Disclosure of Personal Information
We may share Personal Information with trusted third parties where this is necessary to operate our business, provide our services, comply with legal obligations, or protect our legitimate interests.
Depending on the nature of your interaction with Flò Executive Search, this may include:
- trusted service providers supporting the operation of our website or business;
- professional advisers, including legal, accounting, or other professional advisers;
- clients and prospective clients, where appropriate and with a valid legal basis;
- public authorities or regulatory bodies where disclosure is required by applicable law.
Where appropriate and with an appropriate legal basis, we may share Personal Information with clients, prospective clients, trusted professional advisers, service providers, and other third parties in connection with executive search assignments, leadership advisory engagements, professional introductions, contractual obligations, or to comply with applicable legal or regulatory requirements.
We require third parties processing Personal Information on our behalf to maintain appropriate confidentiality and security measures and to process Personal Information only in accordance with applicable data protection laws.
Legal Basis for Processing
We process Personal Information only where we have a lawful basis to do so under the General Data Protection Regulation (GDPR) and applicable German data protection laws.
Depending on the nature of our relationship with you and the purpose of the processing, this may include one or more of the following legal bases:
Consent
Where we rely on your consent to process Personal Information, you may withdraw that consent at any time.
Performance of a Contract
Where processing is necessary to enter into or perform a contract with you or to take steps at your request prior to entering into a contract.
Legitimate Interests
Where processing is necessary for our legitimate business interests, provided that such interests are not overridden by your fundamental rights and freedoms. This may include operating and improving our website, responding to enquiries, protecting the security of our systems, managing professional relationships, and conducting executive search and leadership advisory activities where appropriate.
Legal Obligations
Where processing is necessary to comply with applicable legal or regulatory obligations.
Cookies and Similar Technologies
This website uses cookies and similar technologies to ensure the secure and efficient operation of the website and to provide certain functionality. Cookies are small text files that are stored on your device when you visit a website.
The cookies used on this website are generally divided into the following categories:
Strictly Necessary Cookies
Strictly Necessary Cookies are essential for the operation, security, and functionality of the website. They enable core features such as page navigation, protection against malicious activity, and the operation of contact forms. These cookies are required for the website to function properly and cannot be disabled through the cookie preference settings.
Analytics Cookies
We do not currently use analytics cookies to measure visitor behaviour or website performance. Should analytics technologies be implemented in the future, they will only be activated after you have provided your consent through our cookie consent platform. This Privacy Policy will be update accordingly.
Marketing Cookies
We do not currently use marketing or advertising cookies. If marketing technologies are introduced in the future, they will only be activated after you have provided your explicit consent where required by applicable law. This Privacy Policy will be updated accordingly.
Cookie Preferences
This website uses Complianz as its consent management platform. When you first visit the website, you are given the opportunity to accept, reject, or customize the use of non-essential cookies. You may change or withdraw your consent at any time by reopening the cookie preferences available on the website. Changes to your preferences will apply to future processing and will not affect the lawfulness of processing carried out before consent was withdraw-n.
Additional information about the cookies currently used on this website, including their purpose, provider, and retention period, is available through the Cookie Policy generated by our consent management platform.
Third-Party Service Providers
We work with a limited number of trusted third-party service providers to support the operation, security, and functionality of this website. These providers process Personal Information only where necessary to perform services on our behalf and in accordance with applicable data protection laws.
Bluehost (Website Hosting)
Our website is hosted by Bluehost. As part of providing hosting services, Bluehost may process technical information such as IP addresses, browser information, server log files, and other information required to ensure the availability, security, and performance of the website.
The processing of this information is based on our legitimate interests in operating a secure and reliable website (Article 6(1)(f) GDPR).
As Bluehost is located in the United States, Personal Information may be transferred outside the European Economic Area. Where such transfers occur, appropriate safeguards are implemented in accordance with applicable data protection laws.
Further information is available in Bluehost’s Privacy Policy.
HubSpot
We use HubSpot to support certain website functionality and manage communications submitted through our website.
Depending on how you interact with the website, HubSpot may process Personal Information such as your name, email address, company name, enquiry details, IP address, browser information, and technical usage data.
We use this information to respond to enquiries, manage communications, improve our website, and support our business operations.
The processing is based on your consent where required, our legitimate interests in operating and improving our website, or other applicable legal bases under Article 6 GDPR.
As HubSpot may process Personal Information in the United States, appropriate safeguards are implemented for international data transfers in accordance with applicable data protection laws.
Further information is available in HubSpot’s Privacy Policy.
Contact Forms
We use Contact Form 7 to enable visitors to contact us through this website.
When you submit an enquiry, we process the information you provide, such as your name, email address, company information, and the content of your message, solely for the purpose of responding to your enquiry and managing subsequent communications.
The processing of this information is based on your request prior to entering into a contract, you consent where applicable, or our legitimate interests in responding to business enquiries.
Complianz
We use Complianz as our consent management platform to manage cookie preferences and ensure compliance with applicable data protection and cookie regulations.
Complianz records users’ cookie preferences and consent choices where required by law. This information is processed solely for compliance purposes and is not used for marketing activities.
The processing is based on our legal obligations and our legitimate interests in complying with applicable data protection laws.
Further information is available in Complianz’s Privacy Policy.
International Data Transfers
As a business based in Germany, we primarily process Personal Information within the European Economic Area (“EEA”).
In certain circumstances, Personal Information may be transferred to service providers or professional partners located outside the EEA. This may include, for example, trusted technology providers that support the operation of our website or, where applicable, clients, prospective clients, or professional advisers located in jurisdictions outside the EEA in connection with executive search or leadership advisory engagements.
Where Personal Information is transferred outside the EEA, we ensure that such transfers are protected by appropriate safeguards in accordance with applicable data protection laws. Depending on the circumstances, these safeguards may include an adequacy decision issued by the European Commission, the European Commission’s Standard Contractual Clauses, or other legally recognized transfer mechanisms.
Where required by applicable law, we will also implement additional technical and organizational measures to ensure an appropriate level of protection for Personal Information.
If you would like further information regarding international data transfers or the safeguards applied, please contact us using the details provided in this Privacy Policy.
Data Retention
We retain Personal Information only for as long as necessary to fulfil the purposes for which it was collected, including responding to enquiries, maintaining professional relationships, operating and improving this website, complying with legal obligations, resolving disputes, and protecting our legal rights.
Retention periods vary depending on the nature of the Personal Information, the purpose of the processing, and any applicable legal or regulatory requirements.
Where Personal Information is no longer required for the purposes described in this Privacy Policy, we will securely delete, anonymize, or otherwise dispose of it, unless we are required or permitted to retain it for a longer period under applicable data protection, commercial, tax, or other applicable laws.
Your Rights
Under the General Data Protection Regulation (“GDPR”) and other applicable data protection laws, you have certain rights regarding the Personal Information we process about you.
Subject to the conditions and limitations set out in applicable law, these rights include:
Right of Access
You have the right to request confirmation as to whether we process your Personal Information and, where this is the case, to obtain access to that information and receive a copy of the Personal Information we hold about you.
Right to Rectification
You have the right to request that inaccurate or incomplete Personal Information be corrected or updated without undue delay.
Right to Erasure
In certain circumstances, you have the right to request the deletion of your Personal Information where there is no longer a lawful basis for its continued processing.
Right to Restriction of Processing
You have the right to request that we restrict the processing of your Personal Information in certain circumstances provided by applicable law.
Right to Data Portability
Where the processing is based on your consent or on a contract and carried out by automated means, you have the right to receive your Personal Information in a structured, commonly used, and machine-readable format and, where technically feasible, to have that information transmitted to another controller.
Right to Object
You have the right to object to the processing of your Personal Information where the processing is based on our legitimate interests or where your Personal Information is processed for direct marketing purposes.
Right to Withdraw Consent
Where we rely on your consent as the legal basis for processing, you may withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before the consent was withdrawn.
Right to Lodge a Complaint
If you believe that the processing of your Personal Information does not comply with applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority. In Germany, this is generally the data protection supervisory authority responsible for your federal state or for our place of establishment.
To exercise any of these rights, or if you have any questions regarding the processing of your Personal Information, please contact us using the contact details provided in this Privacy Policy.
Data Security
We maintain appropriate technical and organizational measures designed to protect Personal Information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
These measures are designed to ensure a level of security appropriate to the nature of the Personal Information processed and the risks associated with its processing, taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of the processing.
While we take reasonable steps to safeguard Personal Information, no method of transmitting information over the Internet or storing information electronically can be guaranteed to be completely secure. We therefore cannot guarantee the absolute security of Personal Information.
Where we engage trusted third-party service providers to process Personal Information on our behalf, we require them to maintain appropriate technical and organizational security measures and to process Personal Information in accordance with applicable data protection laws.
Contact
Anastasia Rettig
Founder | Flō
Zinklesweg 26
97078 Würzburg
Germany
Email: [email protected]
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business activities, website functionality, applicable laws, or regulatory requirements.
Any updates will be published on this page together with the date of the latest revision. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect Personal Information.
Last Updated: July 29, 2026

