Privacy Policy
We would like to inform you below about the purpose, type and scope of the collection, processing and use of personal data on this website. The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation ( DSGVO) is
Ghostthinker® GmbH
Hunoldsberg 5
86150 Augsburg
dst@ghostthinker.de
Further information can be found in our imprint.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.
If we receive your consent to contact you by telephone, we store your telephone number and your address data (first and last name, address data, telephone number). We use your data during a telephone call exclusively for the following purposes:
To make contact and clarify enquiries.
To provide advice and information about our products and services.
The legal basis for the processing of your data during a telephone call results from your consent in accordance with Art. 6 para. 1 lit. a DSGVO.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the authorisation, blocking or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority. The controller responsible for data processing on this website is: Ghostthinker GmbH. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Where is your data collected?
Newsletter
If you have registered for our newsletter with your e-mail address, we will store and use your e-mail address to send you our newsletter with information and advertising about us and the edubreak® Academy until you have unsubscribed from our newsletter. For our newsletter service, we use the newsletter service ‘rapidmail’; rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany (‘rapidmail’). If you enter your e-mail address to receive the newsletter, it will first be stored by rapidmail for the purpose of sending the owner an e-mail in which he/she can confirm the registration for the newsletter dispatch (‘double opt-in’). After such confirmation, the e-mail address will be stored permanently by rapidmail until you unsubscribe from the newsletter or until it is deleted by us. Rapidmail only processes contact data (telephone number, e-mail address); your e-mail address will not be passed on to third parties in any other way. The data is processed on German servers. An order processing contract has been concluded with the subcontractor, which complies with the requirements of Art. 28 DSGVO. You can unsubscribe from our newsletter at any time. Every email containing our newsletter contains an unsubscribe link. You can also revoke your consent to the use of your e-mail address for the future at any time. To do so, please use the contact options provided in the legal notice.
Webinare
We use the online meeting service of Zoom Video Communications, Inc, 55 Almaden Boulevard, San Jose, CA 95113 for the technical implementation of the webinars offered and conducted by the Ghostthinker team. Although the validity of the EU-US Privacy Shield was revoked by the European Court of Justice, a comparison with other providers shows that Zoom is a stable service. Even before the EuGh ruling, Zoom had already made improvements in data protection – in addition to the internal interface improvements to the edubreak®dialogue. Personal data is only processed in data centres in Germany (ISV partnership with Zoom): However, this is limited to the time during the webinar; the processing is necessary for the performance of the service. The core functions video image, audio, screen sharing are transmitted, but can be consciously controlled in their extent by the webinar participants; this data is only processed via Zoom’s EU data centre. The e-mail address is not transmitted from edubreak®. If the Zoom client requests an e-mail address, we recommend entering an imaginary address. User data such as the first name and surname displayed are transmitted and displayed pseudonymously by edubreak® (edubreak® has no influence on the active changes made by the user to this display in the edubreak® dialogue; this is at the user’s own discretion); this information is transmitted to the USA. The Zoom online meeting service is regularly monitored and checked by our data protection officer and data security officer: If this control, review and comparison with other providers reveals a more suitable service, Zoom will be replaced.
In order to participate in a webinar organised by Ghostthinker, you must register via the edubreak® registration form: You will be asked for your e-mail address, surname and first name. If you would like to be informed about further webinars and be invited to all further webinars, you must actively select this in the corresponding field. We will send the first and, if actively selected in the edubreak® registration form, all subsequent webinar invitations by e-mail using the newsletter service ‘rapidmail’; rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany (‘rapidmail’). If you have opted to be invited to new webinars on an ongoing basis, your e-mail address will be stored permanently by rapidmail until you unsubscribe from receiving webinar invitations or until you are deleted by us. Rapidmail only processes contact data (telephone number, e-mail address); your e-mail address will not be passed on to third parties in any other way. The data is processed on German servers. An order processing contract has been concluded with the subcontractor, which complies with the requirements of Art. 28 DSGVO. You can unsubscribe from our webinar invitations at any time. An unsubscribe link is included in every email with our webinar invitations. You can also withdraw your consent for us to use your email address in the future at any time. To do so, please use the contact options provided in the legal notice.
Contact form and demo enquiry
On our website, you have the option of contacting us directly or sending us a demo enquiry. If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. For this purpose, we utilise the services of third parties who process data on our behalf (subcontractors): The data is processed on German servers of the companies Hetzner Online GmbH and Limtec GmbH. Both subcontractors take technical and organisational measures for data security within the meaning of Art. 32 DSGVO. We have concluded an order processing contract with both subcontractors that fulfils the requirements of Art. 28 GDPR. We do not pass on this data without your consent. The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions – in particular retention periods – remain unaffected. This data is stored in our customer data management system (CRM). To manage our customer data, we use the CRM service ‘Teamleader’, NV TEAMLEADER, Dok-Noord 3A, Bfk. 101, 9000 Ghent (Belgium), dpo@teamleader.eu. We would like to point out that the information we store with Teamleader is stored and processed on servers in Ireland. For the management of our customer data that was collected and processed until July 2019, we also use the CRM Insightly Inc, 680 Folsom St., San Francisco, California 94107, support@insightly.com for a CRM transition phase until 31 December 2021. We would like to point out that the information we store with Insightly is stored and processed on servers in the USA. Your data will be deleted by us two years after the last contact.
Protocol data
When you visit our website, data is collected, processed and used for which a personal reference cannot always be ruled out. In order for the pages to be displayed in your browser, the IP address must be collected and stored. As a rule, an IP address is currently assigned dynamically by your provider. This address usually changes regularly so that we cannot establish a personal reference from the IP address. In the case of static IP addresses, however, it would theoretically be possible to establish a personal reference in individual cases.
In detail, the following data record is stored for each retrieval:
- IP address of the accessing computer
- Operating system of the accessing computer
- Browser version of the accessing computer
- Name of the retrieved file
- Date and time of the retrieval
- amount of data transferred
- referring URL
In addition, the session duration is also recorded at application level. The stored data is only analysed for statistical purposes and not to establish a specific personal reference. The data may also be used to enable errors to be rectified.
Cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your hard drive. Cookies are required to enable certain functions of the service. You have the option of preventing the setting of cookies by making the appropriate settings in your browser. However, we would like to point out that the use of our Internet pages may then only be possible to a limited extent. Cookies do not install or start any programmes or other applications on your computer.
We use the following cookies:
Cookies that do not require consent: Necessary cookies may be technical cookies that are absolutely necessary for the provision of the service or for the website to function properly. These cookies anonymously guarantee basic functions and security features of the website. Example: Saving the setting of a language or a ‘login’ status. These cookies are all deleted at the end of the session.
Cookies requiring consent: These include functional and non-essential cookies. Functional cookies help to perform certain functions, e.g. sharing the content of the website on social media platforms, improving the usability of the site, collecting feedback and other third-party functions. Analytical cookies are used to understand how visitors interact with the website. These cookies provide information on metrics such as number of visitors, bounce rate, traffic source. Performance cookies are used to understand and analyse the website’s key performance indicators to provide visitors with a better user experience. Advertising cookies are used to provide visitors with relevant adverts and marketing campaigns. These cookies follow visitors across websites and collect information to deliver customised ads.
Usage data, web analytics and cookies
We use the statistical analysis tool “Matomo” (formerly “Piwik”) to constantly improve our website and offer you as a user a better experience. With “Matomo” we analyze the use of our website in order to make regular optimizations and to make the offer more interesting for you. The use of “Matomo” is based on a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
Cookies are stored on your computer for this purpose. The information collected by “Matomo” is stored exclusively on our server in Germany. To object to the analysis, you can prevent the storage of cookies by making the appropriate settings in your browser or deleting cookies that have already been stored. Please note that in this case you may not be able to use all the functions of this website to their full extent.
If you do not want your use of our website to be recorded by “Matomo” for statistical analysis, you can prevent this by deactivating the corresponding function. You have the option of allowing or rejecting the use of a unique web analysis cookie in your browser. To adjust your preferences, you can do this in the website’s cookie settings.
This website uses “Matomo” with the “AnonymizeIP” extension, which means that IP addresses are processed in abbreviated form. This ensures that direct personal identification is excluded. The IP address transmitted by your browser is not merged with other data collected by us.
Matomo is an open source project. Further information on data protection and the use of “Matomo” can be found at: matomo.org/privacy-policy.
Social-Media-Plug-ins
We use various social media plug-ins on our website that allow you to share the content of our website with other internet users via these social media platforms or to link to our presence on these platforms. The following information on the type and scope of the data collected is based on the notifications and information provided by the individual providers.
YouTube
On our website, we use YouTube, a video service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘YouTube’). YouTube uses cookies to store and process usage data when videos are played. Personal data, such as your IP address and information about your interaction with YouTube, may also be collected.
When you play a video, YouTube establishes a connection to Google’s servers. Google may use information for the purpose of personalising advertising or analysing user behaviour.
Further information on data processing by YouTube and Google can be found in the privacy policies of YouTube (YouTube Policy – How does YouTube work?) and Google (Privacy Policy – Privacy Policy & Terms of Use – Google).
Plug-ins of the social network of Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our pages. Among other things, we use the Facebook ‘Like’ button (also known as the ‘Like’ button) for this purpose. A Facebook page plug-in is also integrated into our site, with which parts of the content of our Facebook page are integrated into our website. When you visit one of our pages that contains such a plug-in, your browser establishes a direct connection to a Facebook server. The content of the plug-ins is transmitted directly to your browser and integrated into the website. Data is automatically transmitted to Facebook and stored on its servers. This transmitted data includes connection data (such as your IP address, date and time, the URL called up) as well as the browser and operating system used. Your visit to our pages can therefore be tracked by Facebook, even if you do not actively use the plug-in functions. If you are logged into your Facebook account while visiting our website, Facebook can directly associate your visit to our pages with your user account. If you want to prevent this direct assignment, you must log out of Facebook before visiting our website. Facebook decides at its own discretion for what purposes and to what extent the transmitted data is processed and used on its servers. Information on the purpose and scope of data collection and the further processing and use of the transmitted data by Facebook can be found in Facebook’s privacy policy (http://www.facebook.com/policy.php). These also contain information about your rights and the options for settings to protect your privacy.
Plug-ins from Twitter, Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA (‘Twitter’) are integrated on our website. For this purpose, we use Twitter buttons with which our Twitter account can be accessed, as well as Twitter share buttons with which the content of our website can be shared via your Twitter account. When you visit our website, your browser establishes a direct connection to a Twitter server and the content of the plug-ins is transmitted directly to your browser and integrated into the website. Certain data is automatically transmitted to Twitter in the USA and stored there. The data includes connection data (your IP address, date and time, the URL called up), the browser type and the operating system. If you are logged in to Twitter when you visit our website with the plug-ins mentioned, your account information will be transmitted to Twitter, which will enable Twitter to identify you directly via your profile and associate it with your visit to our site. When you click on a button, further data is transmitted to Twitter and saved to your profile. The Twitter privacy policy at https://twitter.com/privacy contains information about the type, scope and purpose of data processing by Twitter. If you want to prevent Twitter from receiving the aforementioned data in the future and assigning it to your Twitter profile, you must log out of Twitter before visiting our website.
Right to information and revocation of consent to data use
According to the Federal Data Protection Act, you have a right to free information about your stored personal data as well as a right to correction, blocking or deletion of this data. If you have any questions about the collection, processing or use of your personal data, for information, correction, blocking or deletion of data as well as revocation of consents granted, please use the contact options given in the imprint with us.
Information, blocking or deletion
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.
Questions about data protection
We have appointed a data protection officer for our company. If you have any questions about data protection or wish to assert your rights as a data subject, you are welcome to contact our data protection officer Andreas Bethke at dst@ghostthinker.de at any time
Amendment of these provisions
In the event of a change in legal regulations or our service, it may be necessary to amend this privacy policy. The current version of the data protection provisions can be viewed at any time under the link Data protection.
Stand: 01/2025