Privacy Policy

As of November 2026

Thank you for visiting our website. This privacy policy explains which personal data we process when you visit our website and use our services, for what purposes and on what legal basis, and what rights you have.

1. Controller

TeamThink International Business Consulting
Owner: Weert Jacobsen-Kramer
Oberdorf 1a
24235 Laboe
Germany

Phone: +49 4343 4962280
E-mail: mail@teamthink.de

We have not appointed a data protection officer, as we are not legally required to do so. If you have any questions about data protection, please contact us directly using the details above.

2. Key points at a glance

  • Our website uses no advertising or tracking cookies and integrates no third-party analytics or advertising services.
  • Visitor statistics run on our own server and work without cookies.
  • Fonts are loaded from our own server, not from Google.
  • Videos and podcast players from external providers (Vimeo, YouTube, Castos) are only loaded when you click on them. Until then, no connection to these providers is established.
  • Forms, newsletter and appointment booking run on software operated on our own server.

3. Legal bases

We process personal data on the basis of the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG). The relevant legal bases are:

  • Consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG) – e.g. for the newsletter or for loading external videos and podcast players.
  • Contract and pre-contractual measures (Art. 6(1)(b) GDPR) – e.g. for enquiries about our services, appointment bookings, proposals and consulting assignments.
  • Legal obligation (Art. 6(1)(c) GDPR) – e.g. retention obligations under commercial and tax law.
  • Legitimate interests (Art. 6(1)(f) GDPR) – e.g. the secure and stable operation of this website, protection against misuse and privacy-friendly audience measurement.

Information is stored on or read from your device only where this is strictly necessary for a service you have expressly requested (Section 25(2) No. 2 TDDDG) or where you have given your consent (Section 25(1) TDDDG).

4. Hosting and server log files

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers are located in Germany. We have concluded a data processing agreement with the host (Art. 28 GDPR).

Each time our website is accessed, information transmitted by your browser is recorded automatically (server log files):

  • IP address
  • date and time of access
  • page or file accessed and amount of data transferred
  • referrer URL (the previously visited page)
  • browser type, version and operating system

These data are technically necessary to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR. The log files are stored only for a limited period and are then deleted or anonymised. Further information: ALL-INKL.COM privacy information.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar. Data you send to us cannot be read by third parties.

6. Cookies and local storage

We only use cookies that are technically necessary for operating the website (Section 25(2) No. 2 TDDDG, Art. 6(1)(f) GDPR). No consent is required for these.

  • pll_language – stores the selected language (German/English/French/Chinese) so that you see the website in your language. Storage period: 1 year.
  • WordPress login cookies – only set when administrators log in to the protected area of the website. They are not relevant for ordinary visitors.

Only when you actively load an external video or podcast player (see section 13) may the respective provider use its own cookies or similar technologies. You can view and delete cookies at any time in your browser settings.

7. Audience measurement with Koko Analytics

To understand which content on our website is used, we use the statistics plugin Koko Analytics. The software runs exclusively on our own server; no data are transferred to third parties.

Koko Analytics works without cookies and does not store IP addresses. It records only the number of page views, the pages accessed and referring websites. To avoid counting visitors twice on the same day, an anonymous check value is generated from the IP address and browser identifier and discarded daily. We cannot draw any conclusions about your identity.

The legal basis is our legitimate interest in a privacy-friendly analysis of the use of our website (Art. 6(1)(f) GDPR).

8. Website security

To protect our website against attacks (e.g. automated login attempts, malware), we use a security plugin with firewall and login protection that runs on our server. In the case of suspicious access, the IP address, time and requested address are logged in order to block attackers temporarily. The logs are deleted automatically after a defined period. The legal basis is our legitimate interest in the security of our website (Art. 6(1)(f) GDPR).

9. Spam protection

We protect our forms (e.g. the newsletter sign-up) with an invisible check field (honeypot). The field is not visible to humans; if it is filled in, the submission is rejected as automated spam. The check takes place entirely on our own server. No data are transferred to third parties, no cookies are set and no additional personal data are stored. The legal basis is our legitimate interest in protecting our forms against spam and misuse (Art. 6(1)(f) GDPR).

10. Contact by e-mail, phone and form

If you contact us by e-mail or phone, we process your details (e.g. name, contact details, content of your enquiry) in order to deal with your request. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or its preparation, otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

For our e-mail communication, video conferencing and collaboration we use Microsoft 365 (Exchange Online, Microsoft Teams, SharePoint) provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have concluded a data processing agreement with Microsoft. Data are generally processed in data centres in the EU; where a transfer to the USA takes place in individual cases, it is based on Microsoft’s certification under the EU-US Data Privacy Framework.

We delete your enquiry once it has been fully dealt with, unless statutory retention obligations apply.

Forms on our website

We offer online forms for contact enquiries and our Excellence Self-Check. The forms run on the software Fluent Forms, which operates on our own server; entries are stored in our website’s database. Mandatory fields are marked as such.

  • Contact form: name, e-mail address, preferred contact method and your message, and optionally phone number and company. The purpose is to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or its preparation, otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
  • Excellence Self-Check: your answers to the questions, the scores calculated from them, optional comments as well as name, e-mail address and optionally your company. The results are displayed directly on the page and also sent to you by e-mail together with your answers; we receive a notification so that we can offer you a conversation if you are interested. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). You will only receive the newsletter if you tick the corresponding box and confirm your subscription (see section 11).

After submission, you and we receive an automatic confirmation by e-mail. These e-mails are sent via the service Emailit (see section 11). We then deal with your request using Microsoft 365 (see above).

We delete contact enquiries and Self-Check entries once they have been fully dealt with and no further cooperation results from them, at the latest after two years.

11. Newsletter

Sign-up and double opt-in

With our newsletter we inform you at most once a month about our services, events and specialist topics. To sign up, we need your e-mail address and your first and last name for personal salutation.

We use the double opt-in procedure: after signing up, you receive an e-mail in which you confirm your subscription. Only then will you receive the newsletter. As evidence of your consent, we store the time of sign-up and confirmation as well as the IP address used.

Software and delivery

Subscribers are managed with the software FluentCRM, which runs on our own server. For the technical delivery of e-mails we use the service Emailit provided by FunFirst s.r.o., Na louži 258/13, 101 00 Prague 10, Czech Republic. According to the provider, the e-mails are processed in its own data centre in Prague (EU); according to the provider, no transfer to countries outside the EU takes place. We have concluded a data processing agreement with the provider (Art. 28 GDPR). We also use Emailit to send the confirmations of our forms and the messages relating to appointment bookings.

Performance measurement

Our newsletters contain a tracking pixel and personalised links. This allows us to see whether and when a newsletter was opened and which links were clicked. This analysis is personalised and helps us to align our content with our readers’ interests. IP addresses are anonymised. Performance measurement is part of your consent to receive the newsletter; we do not offer a separate withdrawal for performance measurement only – but you can unsubscribe from the newsletter at any time.

Legal basis, withdrawal and storage period

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, e.g. via the unsubscribe link in every e-mail or by message to mail@teamthink.de. We store your data until you unsubscribe. After unsubscribing, your e-mail address may be kept on a block list to prevent you from being contacted again (Art. 6(1)(f) GDPR); we retain proof of consent previously given for up to three years (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

12. Online appointment booking, proposals and assignments

You can book appointments for a conversation with us via our website. For this we use the software FluentBooking, which runs on our own server. We process your name, your e-mail address, the selected appointment, your time zone and any optional information about your request.

To avoid double bookings, FluentBooking compares available times with our calendar in Microsoft 365 (Outlook) and enters your appointment there (provider: Microsoft Ireland Operations Limited, see section 10). Depending on the option selected, we create a meeting link for Microsoft Teams or Zoom (see section 14). Booking confirmations and reminders are sent by e-mail via Emailit (see section 11).

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). We delete the booking data when they are no longer required for the purpose and no statutory retention obligations apply.

Proposals and consulting assignments

A booking via our website does not constitute an assignment. If a conversation leads to cooperation, we process the data of the contact persons at the client required for the proposal, the consulting contract and the performance of the assignment (e.g. name, function, contact details, company name, billing address, VAT ID, purchase order number) as well as project communication. The legal basis is Art. 6(1)(b) GDPR where you yourself are the contracting party, otherwise our legitimate interest in preparing and performing the contract with your company (Art. 6(1)(f) GDPR).

We manage contacts, proposals and projects with the CRM system Perfex CRM. It runs on servers of ALL-INKL.COM – Neue Medien Münnich in Germany (see section 4). Project documents and project communication are stored in Microsoft 365 (Outlook, Teams, SharePoint; see section 10).

If we engage consultants from our network for an assignment, they receive the data required for their work. They are contractually bound to confidentiality and data protection and work exclusively in our systems (Microsoft 365, approved AI tools). Where, in the course of an assignment, we process personal data on behalf of and on the instructions of our client, we conclude a data processing agreement in advance (Art. 28 GDPR).

We retain contract and invoice data for as long as required by commercial and tax law (up to six or ten years, see section 17; Art. 6(1)(c) GDPR).

Use of AI tools

For documentation, analyses, reports and presentations in connection with proposals and assignments we use the AI platform Langdock provided by Langdock GmbH, Greifswalder Straße 212, 10405 Berlin, Germany. We have concluded a data processing agreement with Langdock (Art. 28 GDPR). Content is not used to train AI models. The platform runs on Microsoft Azure in the EU; for client data we only use language models hosted in the EU.

Client data are processed there exclusively in anonymised form: before input, we remove names, contact details and any other information that would identify a person or our client, or replace them with neutral placeholders. This also applies to the consultants from our network. Your personal data therefore generally do not reach the AI platform; the data processing agreement applies as a precaution in case anonymisation is incomplete in an individual case.

We only enter the data required for the respective task and review all results ourselves. We do not make automated decisions about individuals. We delete project content in the AI tools once the assignment has been completed. We agree the use of AI with our clients in advance.

13. Embedded videos and podcast players

On some pages we show videos and podcast episodes stored with external providers. This content is not loaded automatically. Instead, you first see a preview image or placeholder stored on our own server. Only when you click on it is a connection to the respective provider established. In particular, your IP address, browser information and the page accessed are transmitted to the provider; the provider may use cookies or similar technologies.

The legal basis is your consent, which you give by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). It applies only to each individual instance. Where data are transferred to the USA, this is based on the adequacy decision for the EU-US Data Privacy Framework if the provider is certified, otherwise on your explicit consent (Art. 49(1)(a) GDPR). In the USA there is a risk that authorities may access the data without effective legal remedies being available to you.

  • Vimeo – Vimeo.com, Inc., New York, USA. We embed Vimeo videos with the “Do Not Track” parameter. Vimeo privacy policy
  • YouTube – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the privacy-enhanced mode (youtube-nocookie.com). Google privacy policy
  • Castos – podcast hosting service Castos, USA, through which our podcast episodes are provided. Castos privacy policy

14. Video conferences and online meetings

For online meetings, webinars and workshops we use Microsoft Teams (Microsoft Ireland Operations Limited, see section 10) and Zoom (Zoom Communications, Inc., 55 Almaden Boulevard, San Jose, CA 95113, USA). When you take part in a meeting, the respective provider processes the data required to hold it, in particular name, e-mail address, IP address, device information and the content of the communication (audio, video, chat, shared screen content). Recordings are only made after prior notice and with your consent.

The legal basis is Art. 6(1)(b) GDPR where the meeting takes place in the context of a contract or its preparation, otherwise our legitimate interest in efficient communication (Art. 6(1)(f) GDPR). We have concluded data processing agreements with both providers. Microsoft and Zoom are certified under the EU-US Data Privacy Framework. Further information: Microsoft privacy statement, Zoom privacy statement.

15. Our profiles on social networks

On our website we link to our profiles on LinkedIn, Facebook and X. These are simple links; no data are transferred to these networks when you visit our website. Only when you follow a link do the privacy provisions of the respective network apply.

When you visit our profiles on these networks, the operators process your data under their own responsibility, often also for advertising purposes and in the USA. For the page insights of our company pages on Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) and LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), we are joint controllers with the respective operator (Art. 26 GDPR); the operators have undertaken to fulfil data subject rights in this respect. The legal basis for our presence is our legitimate interest in communicating with prospects and clients (Art. 6(1)(f) GDPR). Privacy policies: LinkedIn, Facebook, X.

16. Recipients and transfers to third countries

We only pass on your data where this is described in this privacy policy, where you have consented or where we are legally obliged to do so. Service providers acting on our behalf have been carefully selected and contractually bound to comply with data protection (Art. 28 GDPR). Consultants from our network only receive data to the extent that they are involved in an assignment (see section 12). Transfers to countries outside the EU or EEA only take place subject to the safeguards stated in the respective sections.

Our service providers at a glance:

  • ALL-INKL.COM: hosting and CRM, Germany
  • Microsoft: e-mail, video conferencing and collaboration (Teams), file storage; EU, in individual cases USA (EU-US Data Privacy Framework)
  • Emailit (FunFirst s.r.o.): e-mail delivery, Prague, Czech Republic (EU)
  • Zoom: video conferencing, USA (EU-US Data Privacy Framework)
  • Langdock: AI platform (anonymised content only), EU (Microsoft Azure)

17. Storage period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods (in particular up to six years under the German Commercial Code and up to ten years under the German Fiscal Code). Thereafter, the data are deleted or, where deletion is not possible, restricted.

18. Your rights

You have the right at any time to:

  • access the data we hold about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent given, with effect for the future (Art. 7(3) GDPR)

Simply contact us at mail@teamthink.de.

Right to object (Art. 21 GDPR)

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. Where your data are processed for direct marketing purposes, you may object at any time without giving reasons.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Independent Centre for Privacy Protection Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, ULD), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.

19. Obligation to provide data and automated decision-making

You can use our website without providing personal data. For contact enquiries, the Self-Check, the newsletter and appointment booking we need the information marked as mandatory; without it we cannot provide the service. For proposals and the conclusion of contracts we need the information required to perform and invoice the assignment. Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

20. Changes to this privacy policy

We update this privacy policy when our website, our services or the legal situation change. The version published at teamthink.de/en/privacy-policy applies.

This English version is provided for convenience; the German version prevails.