Privacy Policy

Last updated: October 2026

Thank you for visiting our website. This privacy policy explains which personal data we process when you visit our website and use our services, for what purposes and on what legal basis, and what rights you have. In case of doubt, the German version of this privacy policy prevails.

1. Controller

TeamThink International Business Consulting
Owner: Weert Jacobsen-Kramer
Oberdorf 1a
24235 Laboe
Germany

Phone: +49 4343 4962280
Email: mail@teamthink.de

We have not appointed a data protection officer, as we are not legally required to do so. If you have any questions about data protection, please contact us using the details above.

2. Summary

  • Our website uses no advertising or tracking cookies and embeds no third-party analytics or advertising services.
  • Visitor statistics run on our own server and work without cookies.
  • Fonts are loaded from our own server, not from Google.
  • Videos and podcast players from external providers (Vimeo, YouTube, Castos, Spotify) are only loaded when you click on them. Until then, no connection to these providers is made.
  • Forms, newsletter and appointment booking run on software operated on our own server.

3. Legal bases

We process personal data on the basis of the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG). The relevant legal bases are:

  • Consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG) – e.g. for the newsletter or for loading external videos and podcast players.
  • Contract and pre-contractual measures (Art. 6(1)(b) GDPR) – e.g. for enquiries about our services and appointment bookings.
  • Legal obligation (Art. 6(1)(c) GDPR) – e.g. retention obligations under commercial and tax law.
  • Legitimate interests (Art. 6(1)(f) GDPR) – e.g. the secure and stable operation of this website, protection against misuse and privacy-friendly audience measurement.

Information is only stored on or read from your device if this is strictly necessary for a service you have expressly requested (Section 25(2) no. 2 TDDDG) or if you have given your consent (Section 25(1) TDDDG).

4. Hosting and server log files

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. We have concluded a data processing agreement with the host (Art. 28 GDPR).

Each time our website is accessed, information transmitted by your browser is recorded automatically (server log files):

  • IP address
  • date and time of access
  • page or file accessed and amount of data transferred
  • referrer URL (the previously visited page)
  • browser type, version and operating system

This data is technically required to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR. The log files are stored only for a limited period and are then deleted or anonymised. More information: ALL-INKL.COM privacy information.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock icon in your browser’s address bar. Data you send to us cannot be read by third parties.

6. Cookies and local storage

We only use cookies that are technically necessary to operate the website (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). No consent is required for these.

  • pll_language – stores the selected language (German/English) so that you see the website in your language. Storage period: 1 year.
  • WordPress login cookies – only set when administrators log in to the protected area of the website. They are not relevant for regular visitors.

Only when you actively load an external video or podcast player (see section 13) may the respective provider use its own cookies or similar technologies. You can view and delete cookies at any time in your browser settings.

7. Audience measurement with Koko Analytics

To understand which content on our website is used, we use the statistics plugin Koko Analytics. The software runs exclusively on our own server; no data is passed on to third parties.

Koko Analytics works without cookies and does not store IP addresses. It only records the number of page views, the pages viewed and referring websites. To avoid counting visitors twice on the same day, an anonymous checksum is generated from the IP address and browser identifier and discarded daily. We cannot identify you personally.

The legal basis is our legitimate interest in a privacy-friendly analysis of how our website is used (Art. 6(1)(f) GDPR).

8. Website security

To protect our website against attacks (e.g. automated login attempts, malware), we use a security plugin with a firewall and login protection that runs on our server. For suspicious requests, the IP address, time and requested address are logged in order to block attackers temporarily. The logs are deleted automatically after a defined period. The legal basis is our legitimate interest in the security of our website (Art. 6(1)(f) GDPR).

9. Spam protection

We protect our forms (e.g. the newsletter sign-up) with an invisible check field (honeypot). The field is not visible to humans; if it is filled in, the submission is rejected as automated spam. The check takes place entirely on our own server. No data is transferred to third parties, no cookies are set and no additional personal data is stored. The legal basis is our legitimate interest in protecting our forms against spam and misuse (Art. 6(1)(f) GDPR).

10. Contact by email and phone

If you contact us by email or phone, we process your details (e.g. name, contact details, content of your enquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or its initiation, otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

For our email communication we use Microsoft 365 (Exchange Online) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have concluded a data processing agreement with Microsoft. Data is generally processed in data centres within the EU; if data is transferred to the USA in individual cases, this is based on Microsoft’s certification under the EU-US Data Privacy Framework.

We delete your enquiry once it has been fully processed, unless statutory retention obligations apply.

11. Newsletter

Sign-up and double opt-in

Our newsletter informs you at most once a month about our services, events and expert topics. To sign up, we need your email address and your first and last name so that we can address you personally.

We use the double opt-in procedure: after signing up, you will receive an email asking you to confirm your subscription. Only then will you receive the newsletter. As proof of your consent, we store the time of sign-up and confirmation as well as the IP address used.

Software and delivery

Subscribers are managed with the software FluentCRM, which runs on our own server. For the technical delivery of emails we use Amazon Simple Email Service (SES) provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, with servers located in Frankfurt am Main, Germany. We have concluded a data processing agreement with Amazon. Amazon is certified under the EU-US Data Privacy Framework in case data is transferred to the USA in individual cases.

Performance tracking

Our newsletters contain a so-called tracking pixel and personalised links. This allows us to see whether and when a newsletter was opened and which links were clicked. This analysis is carried out on a personal basis and helps us to align our content with our readers’ interests. IP addresses are anonymised. Performance tracking is part of your consent to receive the newsletter; we do not offer a separate withdrawal of tracking only – but you can unsubscribe from the newsletter at any time.

Legal basis, withdrawal and storage period

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, e.g. via the unsubscribe link in every email or by sending a message to mail@teamthink.de. We store your data until you unsubscribe. After unsubscribing, your email address may be stored on a blocklist to prevent you from being contacted again (Art. 6(1)(f) GDPR); we keep proof of previously given consent for up to three years (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

12. Online appointment booking

You can book appointments with us via our website. For this we use the software FluentBooking, which runs on our own server. We process your name, email address, the selected appointment, your time zone and any voluntary information about your request.

To avoid double bookings, FluentBooking checks available times against our Microsoft 365 (Outlook) calendar and adds your appointment there (provider: Microsoft Ireland Operations Limited, see section 10). Depending on the option chosen, we create a meeting link for Microsoft Teams or Zoom (see section 14). Booking confirmations and reminders are sent by email via Amazon SES (see section 11).

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). We delete booking data when it is no longer required for this purpose and no statutory retention obligations apply.

13. Embedded videos and podcast players

On some pages we show videos and podcast episodes stored with external providers. This content is not loaded automatically. Instead, you first see a preview image or placeholder stored on our own server. Only when you click on it is a connection to the respective provider established. In particular, your IP address, browser information and the page accessed are transmitted to the provider; the provider may use cookies or similar technologies.

The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). It applies only to the individual action. Where data is transferred to the USA, this is based on the adequacy decision for the EU-US Data Privacy Framework if the provider is certified, and otherwise on your explicit consent (Art. 49(1)(a) GDPR). In the USA there is a risk that authorities may access the data without you having effective legal remedies.

  • Vimeo – Vimeo.com, Inc., New York, USA. We embed Vimeo videos with the “Do Not Track” parameter. Vimeo privacy policy
  • YouTube – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the privacy-enhanced mode (youtube-nocookie.com). Google privacy policy
  • Castos – podcast hosting service Castos, USA, which provides our podcast episodes. Castos privacy policy
  • Spotify – Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. Spotify privacy policy

14. Video conferences and online meetings

For online meetings, webinars and workshops we use Microsoft Teams (Microsoft Ireland Operations Limited, see section 10) and Zoom (Zoom Communications, Inc., 55 Almaden Boulevard, San Jose, CA 95113, USA). When you take part in a meeting, the respective provider processes the data required to conduct it, in particular name, email address, IP address, device information and the content of the communication (audio, video, chat, shared screen content). Recordings are only made after prior notice and with your consent.

The legal basis is Art. 6(1)(b) GDPR if the meeting takes place within the scope of a contract or its initiation, otherwise our legitimate interest in efficient communication (Art. 6(1)(f) GDPR). We have concluded data processing agreements with both providers. Microsoft and Zoom are certified under the EU-US Data Privacy Framework. More information: Microsoft privacy statement, Zoom privacy statement.

15. Our social media profiles

Our website links to our profiles on LinkedIn, Facebook and X. These are simple links; no data is transmitted to these networks when you visit our website. Only when you follow a link do the privacy policies of the respective network apply.

When you visit our profiles on these networks, the operators process your data under their own responsibility, often also for advertising purposes and in the USA. For the page statistics of our company pages on Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) and LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), we are joint controllers with the respective operator (Art. 26 GDPR); the operators have undertaken to fulfil data subject rights in this respect. The legal basis for our presence is our legitimate interest in communicating with prospects and clients (Art. 6(1)(f) GDPR). Privacy policies: LinkedIn, Facebook, X.

16. Recipients and transfers to third countries

We only pass on your data if this is described in this privacy policy, if you have given your consent or if we are legally obliged to do so. Service providers acting on our behalf have been carefully selected and contractually bound to comply with data protection (Art. 28 GDPR). Transfers to countries outside the EU/EEA only take place subject to the safeguards stated in the respective sections.

17. Storage period

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods (in particular up to six years under the German Commercial Code and up to ten years under the German Fiscal Code). The data is then deleted or, if deletion is not possible, blocked.

18. Your rights

You have the right at any time to:

  • access the data we hold about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)

Simply contact us at mail@teamthink.de.

Right to object (Art. 21 GDPR)

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims. If your data is processed for direct marketing purposes, you may object to this at any time without giving reasons.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.

19. Obligation to provide data and automated decision-making

You can use our website without providing any personal data. For the newsletter and appointment booking, we need the information marked as mandatory; without it we cannot provide the service. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

20. Changes to this privacy policy

We will adapt this privacy policy if our website, our services or the legal situation change. The version published here always applies.