We would like to inform you below about the purpose, nature and scope of the collection, processing and use of personal data on this website. The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (DSGVO) is the

Ghostthinker GmbH
Hunoldsberg 5
86150 Augsburg 

dst@ghostthinker.de

You can find more information in our imprint.

How do we record your data?

On the one hand, your data is collected when you provide it to us. This may be data that you enter in a contact form, for example. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (for example, internet browser, operating system or time of page access). This data is collected automatically as soon as you enter our website.
 

How do we use your data?

Part of the data is collected in order to ensure error-free provision of the website. Other data may be used to analyze your user behavior. If we receive your consent to contact you by telephone, we store your telephone number and address data (first and last name, address data, telephone number). We use your data during a telephone call exclusively for the following purposes:

  • To contact you and clarify enquiries.

  • To provide advice and information about our products and services.

The legal basis for the processing of your data during a telephone call results from your consent according to Art. 6 Paragraph 1 lit. at DSGVO.
 

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the authorisation, blocking or deletion of this data. You can contact us at any time at the address given in the imprint with regard to this and other questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.  The responsible body for data processing on this website is: Ghostthinker GmbH. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data ( for example, names, e-mail addresses).
 

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us (dst@ghostthinker.de) is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
 

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done insofar as it is technically feasible.
 

Where is your data collected?

Newsletter

If you have registered for our newsletter with your email address, we will store and use your email address to send you our newsletter with information and advertising about us until you have unsubscribed from our newsletter. For our newsletter service we use the newsletter service "rapidmail"; rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany ("rapidmail"). If you enter your e-mail address to receive the newsletter, this is first stored at rapidmail for the purpose of sending the owner an e-mail in which he/she can confirm the subscription to the newsletter mailing ("double opt-in"). After such confirmation, the email address will be stored permanently at rapidmail until you have unsubscribed from receiving the newsletter or until it is deleted by us. Rapidmail only processes contact data (telephone number, e-mail address); your e-mail address is not otherwise passed on to third parties. The data is processed on German servers. An order processing agreement has been concluded with the subcontractor, which complies with the requirements of Art. 28 DSGVO. You can unsubscribe from our newsletter at any time. An unsubscribe link is included in every email containing our newsletter. You can also revoke your consent to the use of your e-mail address for the future at any time. To do so, please use the contact options provided in the imprint.

Webinars

For the technical implementation of the webinars offered and conducted by the Ghostthinker team, we use the online meeting service of Zoom Video Communications, Inc, 55 Almaden Boulevard, San Jose, CA 95113. Although the legal validity of the Privacy Shield EU-USA was denied by the EuGh, the comparison with other providers nevertheless shows that Zoom is a stable service. Even before the EuGh ruling, Zoom had already made improvements in data protection - in addition to the internal interface improvements to the edubreak®dialog. 

Personal data is only processed on data centers in Germany (ISV partnership with Zoom): However, this is limited to the time during the webinar; the processing is necessary for the implementation of the service. The core functions video image, audio, screensharing are transmitted but can be consciously controlled in their extent by the webinar participants; this data is only processed via Zoom's EU data centre. The email address is not transmitted from edubreak®. If the Zoom client requests an email address, we recommend providing a fantasy address. User data such as the displayed first and last name are transmitted and displayed pseudonymously by edubreak® (edubreak® has no influence on the user's active changes to this display in the edubreak®dialogue; this is at the user's own discretion); this information is transmitted to the USA. The online meeting service Zoom is regularly controlled and checked by our data protection officer and data security officer: If this control, audit and comparison with other providers shows a more suitable service, Zoom will be replaced.

In order to participate in a webinar organized by Ghostthinker, you must register via the edubreak® registration form: You will be asked for your email address, name and surname. If you would like to be informed about further webinars and be invited to all further webinars, you must actively select this in the corresponding field. The first and, if actively selected in the edubreak® registration mask, all subsequent webinar invitations will be sent by e-mail using the "rapidmail" newsletter service; rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany ("rapidmail"). If you have opted in to receive ongoing invitations to new webinars, your email address will be stored permanently by rapidmail until you have unsubscribed from receiving webinar invitations or until we delete your email address. Rapidmail only processes contact data (telephone number, e-mail address); your e-mail address is not passed on to third parties in any other way. The data is processed on German servers. A contract processing agreement has been concluded with the subcontractor, which complies with the requirements of Art. 28 DSGVO. You can unsubscribe from our webinar invitations at any time. An unsubscribe link is included in every email with our webinar invitations. You can also revoke your consent for us to use your email address in the future at any time. To do so, please use the contact options given in the imprint.
 

Contact form and demo requests

On our website, you have the option of contacting us directly or sending us a demo request. If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. For this purpose, we use the services of third parties who process data on our behalf (subcontractors): The data is processed on German servers of the companies Hetzner Online GmbH and Limtec GmbH. Both subcontractors take technical and organisational measures for data security within the meaning of Art. 32 DSGVO. We have concluded an order processing agreement with both subcontractors that complies with the requirements of Art. 28 DSGVO. We do not pass on this data without your consent.The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions - in particular retention periods - remain unaffected. This data is stored in our customer data management system (CRM). For the management of our customer data, we use the CRM service "Teamleader", NV TEAMLEADER, Dok-Noord 3A, Bfk. 101, 9000 Ghent (Belgium), dpo@teamleader.eu. Please note that the information we store with Teamleader is stored and processed on servers in Ireland. For the management of our customer data that has been collected and processed until July 2019, we will also use the CRM Insightly Inc, 680 Folsom St, San Francisco, California 94107, support@insightly.com for a CRM transition period until 31 December 2021. We would like to point out that the information we deposit with Insightly is stored and processed on servers in the USA. Your data will be deleted by us two years after the last contact.


Protocol data

When you visit our website, data is collected, processed and used, for which a personal reference cannot always be excluded. In order for the pages to be displayed in your browser, the IP address must be collected and stored. As a rule, an IP address is currently assigned dynamically by your provider. This address usually changes regularly, so that we cannot establish a personal reference from the IP address. With static IP addresses, however, it would theoretically be possible to establish a personal reference in individual cases.

In detail, the following data record is stored for each call:

  • IP address of the calling computer

  • Operating system of the calling computer

  • Browser version of the calling computer

  • Name of the retrieved file

  • Date and time of the retrieval amount of data transferred referring URL

In addition, the session duration is also collected at application level. The stored data is only evaluated for statistical purposes and not to establish a concrete personal reference. The data is also used, if necessary, to enable troubleshooting.


Cookies

We use so-called cookies on our website. Cookies are small pieces of text information that are stored on your hard drive. The cookies are necessary to enable certain functions of the service. You have the option of preventing cookies from being set by making the appropriate settings in your browser. However, we would like to point out that the use of our Internet pages may then only be possible to a limited extent. Cookies do not install or start any programs or other applications on your computer.

You can view and update your consent(s) here.

We use the following cookies:

Cookies not requiring consent: Necessary cookies may be technical cookies that are strictly necessary for the provision of the service or for the website to function properly. These cookies anonymously ensure basic functions and security features of the website. Example: saving the setting of a language, or a "login" status. These cookies are all deleted at the end of the session.

Cookies that require consent: These include functional and non-essential cookies. Functional cookies help to perform certain functions, such as sharing the content of the website on social media platforms, improving the usability of the site, collecting feedback and other third-party functions. Analytical cookies are used to understand how visitors interact with the website. These cookies provide information on metrics such as number of visitors, bounce rate, traffic source. Performance cookies are used to understand and analyze key website performance indices in order to provide visitors with a better user experience. Advertising cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies follow visitors around different websites and collect information to deliver customized ads.

Usage data, web analysis and cookies

For the purpose of demand-oriented design of the website, we also use the web analysis tool Piwik. In the variant used here, the Piwik analysis tool works with an anonymization of IP addresses. In doing so, the IP addresses are shortened before any use for the analysis of usage behavior. Your IP address is also only used in the shortened form (and thus without personal reference) to perform a rough geolocation. Here, your country of origin and also your access provider ("Internet access provider") are determined and stored.
 
The Piwik analysis tool works by setting a cookie, which is stored as a so-called "persistent cookie" as a small text file on your terminal device beyond the end of your visit.
 
We do not establish a personal reference via the cookies.

Social-Media-Plug-ins

We use various social media plug-ins on our website that allow you to share the content of our website with other internet users via these social media platforms or to link to our presences on these platforms. The following information about the type and scope of the data collected is based on the notifications and information provided by the individual providers.

Youtube

On our website we use YouTube, a video service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube"). YouTube uses cookies when playing videos to store and process usage data. Personal data, such as your IP address and information about your interaction with YouTube, may also be collected in the process. When playing a video, YouTube establishes a connection to Google's servers. Google may use information for the purpose of personalising advertising or analysing user behaviour.

For more information on data processing by YouTube and Google, please refer to the privacy policies of YouTube (YouTube Policy - How does YouTube work?) and Google (Privacy Policy - Privacy Policy & Terms of Use - Google).

Facebook

Plug-ins of the social network of Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our pages. Among other things, we use the Facebook "Like" button (also known as the "Like" button). Likewise, a page plug-in from Facebook is integrated into our site, with which parts of the content of our Facebook page are integrated into our website. When you visit a page of ours that contains such a plug-in, your browser establishes a direct connection to a Facebook server. The contents of the plug-ins are transmitted directly to your browser and integrated into the website. In this process, data is automatically transmitted to Facebook and stored on their servers. This transmitted data includes connection data (such as your IP address, date and time, the URL called up) as well as the browser and operating system used. Your visit to our pages can thus be tracked by Facebook, even if you do not actively use the plug-in functions. If you are logged in with your Facebook account while visiting our website, Facebook can directly assign the visit to our pages to your user account. If you wish to prevent this direct association, you must log out of Facebook before visiting our website. Facebook decides at its own discretion for what purposes and to what extent the transmitted data is processed and used on its servers. Information on the purpose and scope of data collection and the further processing and use of the transmitted data by Facebook is contained in Facebook's data protection guidelines (http://www.facebook.com/policy.php). These also contain information on your rights. These also contain information on your rights and the possibilities of settings to protect your privacy.

Twitter

Plug-ins from Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter") are integrated on our website. For this purpose, we use Twitter buttons, with which our Twitter account can be called up, as well as Twitter share buttons, with which content from our website can be shared via your Twitter account. When you call up our website, your browser establishes a direct connection to a Twitter server and the content of the plug-ins is transmitted directly to your browser and integrated into the website. In the process, certain data is automatically transmitted to Twitter in the USA and stored there. The data includes connection data (your IP address, date and time, the URL called up), the browser type and the operating system. If you are logged in to Twitter when you call up our website with the aforementioned plug-ins, your account information is transmitted to Twitter, which enables Twitter to identify you directly via your profile and to associate you with your visit to our site.When you click a button, further data is transmitted to Twitter and saved to your profile. Twitter's privacy policy at https://twitter.com/privacy contains information on the type, scope and purpose of data processing by Twitter. If you want to prevent Twitter from receiving the aforementioned data in the future and assigning it to your Twitter profile, you must log out of Twitter before visiting our website. 

Google Webfonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font from your computer will be used. You can find more information on Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

Right to information and revocation of consent to data use

In accordance with the Federal Data Protection Act, you have the right to free information about your stored personal data as well as the right to correction, blocking or deletion of this data. If you have any questions about the collection, processing or use of your personal data, or if you wish to request information, correction, blocking or deletion of data or revoke your consent, please use the contact details provided in the imprint.

Information, blocking or deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

Questions about data protection

We have appointed a data protection officer for our company. If you have any questions about data protection or wish to exercise your rights as a data subject, please feel free to contact our data protection officer Andreas Bethke at dst@ghostthinker.de at any time.

Amendment of these provisions

In the event of a change in legal regulations or in our service, it may be necessary to adapt this data protection statement. The current version of the data protection provisions can be viewed at any time under the link Data Protection.

Version: 09.08.2023