Privacy policy

Privacy Policy
(updated: March 19th, 2025)

This policy ("Privacy Policy") may be revised from time to time by updating this page. You can review the Privacy Policy at any time by visiting the Privacy Policy link at the bottom of think-cell’s website www.think-cell.com ("Website") or by contacting privacy@think-cell.com to request a current copy.

The term "You" as used herein refers to all individuals and/or entities accessing any think-cell Website and other websites provided by think-cell, which are mentioned explicitly in this Privacy Policy using think-cell's products, contacting think-cell Operations GmbH (“think-cell”) or think-cell Software GmbH (“think-cell Software”) or being contacted by think-cell or think-cell Software for any reason or else interacting with think-cell.

There are special provisions regarding the protection of personal data, in particular the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR). think-cell will process personal data strictly in accordance with any applicable provisions. According to these provisions, think-cell is legally obligated to provide You with the following information.

A. Controller and Data Protection Officer

Responsible for the operation of this Website is think-cell Operations GmbH, Leipziger Str. 51, 10117 Berlin, Germany, telephone: +49 30 666473-10 (“think-cell”). If You specifically interact with a member of the think-cell group of companies, then this group company is the controller.

In some cases explicitly set out below the think-cell Software GmbH (address and phone number as before) (“think-cell Software”) is the data controller.

Please contact us at privacy@think-cell.com with any queries regarding data protection at think-cell.

You can reach the data protection officer as follows: privacy@think-cell.com

If You have any questions or suggestions regarding data protection, please contact us or our data protection officer at any time.

B. Personal Data collected by think-cell

think-cell may only collect and process your personal data in accordance with this Privacy Policy. The collection, storage, use and any other form of processing of personal data by think-cell occurs exclusively ’if there is a legal basis allowing this processing. think-cell will not sell, transmit, disseminate or else disclose personal data without Your consent or another legal basis.

I. Use of think-cell’s Websites

The information that may be collected by automated means when accessing our Website includes:

• Approximate location information if allowed by Your web browser settings
• Details about the devices that are used to access our Website (such as the IP address and type of operating system and web browser)
• Dates and times of visits to and use of our Website
• Information about how our Website is used (such as the content that is viewed on our Website and how users navigate between our web pages)
• URLs that refer visitors to our Website
• Search terms used to reach our Website

The legal basis for the temporary storage of these data is Art. 6 Para. 1 Sentence 1 lit. f GDPR, as this processing is necessary to safeguard our legitimate interests in order to be able to operate the Website, to enable the Website to be delivered to Your device, to optimize the Website and to ensure the security of our information technology systems.

The data will be deleted or anonymized 3 weeks after the collection.

1. Cookies and other Tracking

We use first party and third party cookies for several reasons. Some cookies are required for technical reasons that are strictly necessary for our Website to operate. We refer to these as necessary cookies. Other cookies also enable us to provide Website functionality, or to enhance visitors' experience on our Website by providing them with personalized content and advertising. The specific types of first and third party cookies served through our Website and the purposes they perform are described in our cookie consent management tool, here:

Cookie Settings

In addition, third party cookies are described below.

Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enable us to recognize when someone has visited our Website. This allows us, for example, to monitor the traffic patterns of users from one page within our Website to another, to understand whether You have come to our Website from an online advertisement displayed on a third-party website and to improve site performance. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will often impair their functioning.

Tracking technologies also allow us to determine if an individual is engaging with us. If they are not, after a period of inactivity we would remove their personal information as a part of our data minimization practices.

You have the right to decide whether to accept or reject non-necessary cookies. You can exercise Your cookie preferences through our cookie consent tool, which You can access here:

Cookie Settings

The legal basis for the use of necessary cookies is Art. 6 Para. 1 Sentence 1 lit. f GDPR, Section 25 Para 2 No. 2 Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG) since we have a legitimate interest in ensuring the functionality and security of our Websites.

The use of other cookies and similar technologies only takes place with Your consent. The legal basis is Art. 6 Para. 1 Sentence 1 lit. a GDPR and Section 25 Para. 1 TDDDG. You can withdraw Your consent at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Information about the retention periods can be found in the Cookie Settings:

Cookie Settings

You can also set or amend Your web browser controls to accept or refuse cookies. If You choose to reject cookies, You may still use our Website though Your access to some functionality and areas of our Website may be restricted. As the means by which You can refuse cookies through Your web browser controls vary from browser-to-browser, You should visit Your browser's help menu for more information.

In addition, most advertising networks offer You a way to opt-out of targeted advertising. If You would like to find out more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com.

2. Matomo

We use the web analysis tool “Matomo” from InnoCraft, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand, to design our websites in line with customer demands. Matomo creates user profiles on the basis of pseudonyms. For this purpose, permanent cookies are stored on Your device and accessed by us. In this way, we are able to recognize and count returning visitors. We also use the modules ‘Heatmap & Session Recording’. The Heatmap service shows us the areas of our website where the mouse is moved most frequently, or which are clicked the most. The Session Recording service records individual user sessions. We can display recorded sessions and thus analyze the use of our website. Data which is entered in online forms is not recorded and is not visible at any time.

The use of this service is based on Your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, Section 25 Para. 1 TDDDG. You can withdraw Your consent at any time. Please make the appropriate settings via our Cookie Settings.

Further information on Matomo's terms of use and data protection regulations can be found at: https://matomo.org/privacy/.

3. Google Services

We use different services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) which may involve the processing of personal data by Google.

To ensure that Google only processes the transferred data in accordance with our instructions and in compliance with the applicable data protection regulations, we have concluded a data processing agreement with Google.

The data is deleted as soon as it is no longer required for the purpose for which it was obtained. Data linked to cookies, user identifiers (e.g. user ID) and advertising IDs will be deleted no later than 14 months after collection.

Google's terms of use, the individual services used and information on data protection can be found at https: //marketingplatform.google.com/about/analytics/terms/de/ and at https://www.google.de/intl/de/policies/ and https://support.google.com/analytics/answer/6004245?hl=de.

Google Ads

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). By clicking on an ad placed by Google, a cookie is set for conversion tracking. Google Ads enables us to use advertising material (so-called Google Ads) on external websites to draw attention to our services. Targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). think-cell can evaluate this data, for example by analyzing which search terms led to the display of our advertisements and how often advertisements were clicked on.

The use of this service is based on Your consent according to Art. 6 Para. 1 Sentence 1 lit. a GDPR and Section 25 Para. 1 TDDDG. You can withdraw Your consent at any time with future effect using our cookie settings. There may be a data transfer to the USA. The data transfer is legitimized by Google's certification under the EU-US Data Privacy Framework.

Google Display 360

We use the Google Display & Video 360 tool. The tool collects data for analysis, marketing and optimization purposes and helps us to improve our marketing measures and our website. This includes online identifiers (including cookie identifiers), internet log files and device identifiers, location data and identifiers assigned by us. The tool uses the data to determine whether users who have seen our ads visit our website or which products they are interested in. This helps us to use our advertising budget more efficiently. The data collected may also be used by us to serve interest-based advertising.

The use of this service is based on Your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR and Section 25 Para. 1 TDDDG. You can withdraw Your consent at any time via our cookie settings with effect for the future. Data may be transferred to the USA. Google is certified for this under the EU-US Data Privacy Frameworks.

Google Analytics

We use Google Analytics, a web analytics service provided by Google. With Your consent, Google Analytics uses cookies to enable an analysis of Your user behavior on our Website, thereby improving the functionality of the Website and evaluating the success of our marketing. For this purpose, Google Analytics processes online identifiers (including cookie identifiers), internet protocol addresses and device identifiers and identifiers assigned by its advertisers.

Google will use this information on our behalf for the purpose of evaluating Your use of the Website, compiling reports on Website activity and providing other services relating to Website activity and internet usage. In doing so, Google may link the data with other data about You (such as search history, personal accounts, usage data of other devices and any other data Google may hold about You).

The legal basis for the data processing is Your consent, Art. 6 Para. 1 Sentence 1 lit. a GDPR, Section 25 Para. 1 TDDDG. You can withdraw Your consent at any time with future effect using our cookie settings. There may be a data transfer to the USA. The data transfer is legitimized by Google's certification under the EU-US Data Privacy Framework.

We have activated IP anonymization on this Website by adding the code "gat._anonymizeIp();" so that Your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

4. Microsoft Ads

We use the conversion tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. In this process, Microsoft Ads stores cookies on Your computer if You have reached our website via a Microsoft Bing or Yahoo! ad. This processes personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers, and information about device and browser settings. Microsoft and we can recognize in this way that someone has clicked on an ad, has been redirected to our Website and has reached a previously determined target page (conversion page). We only learn the total number of users who clicked on an ad and were then redirected to the conversion page. Microsoft Ads is used for the purpose of optimizing the placement of advertisements.

The processing only takes place with Your consent in accordance with Art. 6 Para.1 Sentence 1 lit. a GDPR. You can withdraw Your consent at any time with effect for the future using our cookie settings. There may be a data transfer to the USA. The data transfer is legitimized by Microsoft's certification under the EU-US Data Privacy Framework.

5. YouTube

We may use the platform YouTube, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), for some embedded videos. think-cell has made sure that no data is transferred to this service unless and until such an embedded video is played.

YouTube will only be displayed and played with Your consent. Once You play an embedded video, a connection to the YouTube servers is established, cookies may be placed and personal data may be tracked and processed by Google. This may result in data being transmitted to the YouTube server concerning the pages You have visited on our website. According to Google, the information in particular serves the purposes to record video statistics, to improve user-friendliness and to avoid improper actions. Solely responsible for these cookies and for the processing of personal data in relation to the playback of videos is Google. If You want to ensure that Google does not receive Your personal data, do not click on the embedded videos on the Website. Further information can be found in Google's privacy policy at https://policies.google.com/privacy.

The legal basis for the use of YouTube is Your consent in accordance with Art. 6 Para.1 Sentence 1 lit. a GDPR, Section 25 Para.1 TDDDG. You can withdraw Your consent at any time with effect for the future using our cookie settings. The recipient of the collected data is the Google. Personal data may be transferred to the USA based on Google's certification under the EU-US Data Privacy Framework.

The period for which Google retains this data varies by data type and is dependent on a user’s specific video history settings. Details are set out in the Google’s data retention policy at https://policies.google.com/technologies/retention.

6. Vimeo

We use Vimeo a service provided by Vimeo.com Inc., 555 West 18th Street, New York, New York 10011, USA (“Vimeo”) for embedding videos about our products and services. Vimeo is only activated upon Your consent, i.e. no data about You as a user will be transmitted to Vimeo if You have not given Your consent. The videos from Vimeo can only be played with Your consent and thus data can also be transferred to the Vimeo server regarding the pages You have visited on our website.

Vimeo places a cookie and stores this data as a user profile and uses it for purposes of advertising, market research and/or customized design of its websites. In particular, this analysis is carried out to display personalized advertising.

We use Vimeo to offer You content provided by Vimeo on our website. The legal basis for the use of the Vimeo is Your consent in accordance with Art. 6 Para.1 Sentence 1 lit. a GDPR, Section 25 Para. 1 TDDDG. The recipient of the collected data is Vimeo. Personal data may be transferred to the USA based on Vimeo's certification under the EU-US Data Privacy Framework.

See Vimeo’s privacy policy for details of data collected and retention periods: https://vimeo.com/privacy

7. Marketo

We use the tool Marketo, provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, 24, Dublin, Ireland ("Adobe"), on our Website to collect statistic data about the use of our Website and the browsing behavior in order to optimize our offer, to place suitable offers, to integrate surveys and to conduct e-mail marketing. For this purpose, cookies may be stored on Your computer, which are used to collect data that is stored on Marketo's servers and processed further, provided that You have given us Your consent to do so. The collected data may be merged with the personal data You voluntarily provided on the website for profiling purposes in order to place targeted ads and conduct e-mail marketing. The legal basis for the use of Marketo is Your consent in accordance with Art. 6 Para.1 Sentence 1 lit. a GDPR, Section 25 Para.1 TDDDG. You can withdraw Your consent at any time with effect for the future using our cookie settings. For more information, please see Adobe’s privacy policy at https://www.adobe.com/privacy/experience-cloud.html.

Data processing may take place in the US. The data transfer to the US is based on Adobe's certification under the EU-US Data Privacy Framework.

8. LinkedIn

We use the Insight-Tag, image pixel, Conversion Tracking, Website Demographics and Matched Audiences offered by LinkedIn Ireland Unlimited Company, Wilton Pl, Dublin, Ireland ("LinkedIn"). The LinkedIn Insight-Tag is a snippet of code that we have added to our Website. If You consent, the Insight-Tag places a cookie in Your web browser. The Insight-Tag, as well as the image pixel, allows us to get campaign reporting and lets us better understand the interests of our Website visitors. LinkedIn Conversion Tracking and Website Demographics allow us to see which features our Website visitors have used after clicking on an ad from think-cell. Via Matched Audiences, e-mail addresses stored with us are uploaded in encrypted form to the LinkedIn Campaign Manager to determine recipients of our LinkedIn ads and thus display ads only to users who have a particular interest in our information and offers based on their interaction with us. The LinkedIn Insight-Tag collects the following data from You via our Website: URL, referrer URL, IP address, device and browser properties (user agent), timestamp, user data. We enabled enhanced conversion tracking. Thereby, LinkedIn automatically adds a click ID to the end of the Website URLs, which allows the Insight-Tag to use first-party cookie tracking. LinkedIn does not share any personal data of LinkedIn members with us, but provides us with reports and notifications about the Website audience and the performance of our placed ads. Collected IP addresses are shortened. Direct identifiers of LinkedIn members are removed by LinkedIn within seven days to pseudonymize the data and deleted within 180 days.

The legal basis for the data processing is Your consent, Art. 6 Para. 1 Sentence 1 lit. a GDPR, Section 25 Para. 1 TDDDG. You can withdraw Your consent at any time with effect for the future using our cookie settings. You can also set a LinkedIn opt-out cookie via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further information on the LinkedIn Insight-Tag can be found here: https://www.linkedin.com/help/lms/answer/a427661/linkedin-insight-tag-haufig-gestellte-fragen?lang=de.

Personal data may be transferred to the USA based on the EU-US Data Privacy Framework.

II. Social Media Platforms

We have profiles on the following social media platforms: LinkedIn, Twitter and YouTube.

We process the data (e.g. from commenting, sharing, evaluating) as joint controllers. Information on data processing by the social media platforms, especially details of the processed data, can be found in their privacy policies available on their websites.

We operate our social media profiles in order to present ourselves to the users of these platforms and other interested persons who visit our social media profiles and to communicate with these persons. The processing of users' personal data is based on our legitimate interests in an optimized company and product presentation and marketing purposes under Art. 6 Para. 1 Sentence 1 lit. f GDPR, unless You have given Your consent.

III. Contact and Communication

For the following processing think-cell Software is responsible:

If You contact us by phone or by email or via a contact form (if provided) we store Your personal data that You submit (e.g. the email-address or phone number, name and contact details and other information that You provide).

If You contact us within an existing contractual relationship or contact us in advance for information about our scope of services or other services, the data and information You provide will be processed for the purpose of processing and answering Your contact request in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR, in any other cases based on our legitimate interests in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR for the purpose of properly answering customer/contact inquiries.

The transmitted data will be stored until the purpose for data storage/processing ceases to exist (e.g., after Your inquiry has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

IV. Applications

You have the opportunity to apply for positions we have offered or on Your own initiative.

Current positions we are looking for can be fount at: https://www.think-cell.com/en/career#jobopenings. We process the information you provide in Your application. The legal basis for the processing of Your data is the initiation of a contract at Your request, Art. 6 para. 1 Sentence 1 lit. b GDPR. The data will be stored for six months after the end of the application process. If You receive an offer of employment with us as part of the application process and accept this, we will store the personal data collected as part of the application process for at least the duration of the employment relationship.

 For the application process, we use the software of Greenhouse Software, Inc., 228 Park Ave. S PMB 14744, New York, New York 10003-1502 US (“Greenhouse“), which processes the data on our behalf in accordance with Art. 28 GDPR. The data transmitted as part of your application will be transferred via TLS encryption and stored in a database. The data will be used both by us and by Greenhouse exclusively for processing Your application. You can view the privacy policy of Greenhouse here: https://www.greenhouse.com/de/privacy-policy. There may be a data transfer to the USA. The data transfer is legitimized by Greenhouse's certification under the EU-US Data Privacy Framework.

V. Sales Meetings via Microsoft Teams and their Recording

We use Microsoft Teams for video meetings, especially with potential customers. In this case, Your personal data will be stored on Microsoft's servers for the purpose of conducting the event. This involves the following data

• Inventory data (e.g. names, addresses),
• Contact data (e.g. e-mail address, telephone numbers),
• Content data (e.g. text entries, videos),
• Usage data (e.g. websites visited, access times),
• Meta/communication data (e.g. device information, IP addresses).

The legal basis is Art. 6 Para. 1 Sentence 1 lit. b GDPR (contract initiation) and our legitimate interest in sales talks (Art. 6 Para. 1 Sentence 1 lit. f GDPR). This data is deleted as soon as it is no longer required. To ensure that Microsoft only processes the transferred data in accordance with our instructions and in compliance with the applicable data protection regulations, we have concluded a data processing agreement with Microsoft.

When providing Microsoft Teams, Microsoft may store cookies on users' devices for analysis or settings purposes. Further information can be found on the Microsoft website: https://privacy.microsoft.com/en-us/privacystatement

We may record and transcribe Teams meetings using the “Gong” tool. In this case, we ask the participants for their consent and then record the consent again. The legal basis is the consent (Art. 6 Para. 1 Sentence 1 lit. a GDPR). We use the recording for quality assurance by using it to train employees. The recording is deleted after 3 years.

The data is processed by Gong.io Inc, 201 Spear St. 13th Floor, San Francisco, CA 94105 (“Gong”) in the USA on our behalf. Gong is certified under the EU-U.S. Privacy Framework, so that a data transfer is legitimized under Art. 45 GDPR (adequacy decision). Further details can be found in Gong's privacy policy at https://www.gong.io/privacy-policy/.

VI. Newsletter

As part of sending newsletters, we use tracking technology (e.g. web beacons) to detect whether the email we send has been opened and to measure the success of email marketing campaigns. The legal basis for sending newsletter and using tracking technologies is Art. 6 Para. 1 Sentence 1 lit. a GDPR possibly Section 25 Para. 1 TDDDG.

Newsletters are only sent after a successful double-opt-in process. For this purpose, we will send You a confirmation email after You have subscribed to our newsletter. After clicking on the confirmation link in this email, You will be added to our newsletter mailing list. Instead of a separate confirmation email we may also ask You to confirm Your email-address by clicking on a link, with which we provide a free service that You ordered if You subscribed to our newsletter during the order process (e.g. by clicking on a link, with which You can download a free e-book).

The newsletter informs You about promotions, offers, helpful tips and features and new functionalities of our software as well as news about our company, our software and other services we offer.

We have engaged Marketo to send our newsletter. The newsletter dispatch and evaluation may involve processing of personal data in the USA based on based on Adobe's certification under the EU-US Data Privacy Framework. You may withdraw Your consent at any time with effect for the future.

VII. User Account

For the following processing think-cell Software is responsible:

If You choose to purchase the think-cell software we store Your personal information provided in Your user account. The following data will be stored: salutation, name, phone number, email-address (company), country, industry, company name, number of employees. The purpose of the processing is to enable You to administer the software. The legal basis of the processing is Art. 6 Para. 1 Sentence 1 lit. b GDPR.

The data is retained for as long as You continue to be a user of the think-cell software and for a period of up to 12-months after this. The legal basis for the extended storage is Art. 6 Para. 1 Sentence 1 lit. f GDPR. We have a legitimate interest storing the data in order to be able to defend ourselves against claims if necessary.

VIII. Test Version

For the following processing think-cell Software is responsible:

If You request to use a test version of the think-cell software via our Website we store Your personal information provided. The following data will be stored: salutation, name, phone number, email-address (company), country, industry and company name. The purpose of the processing is the fulfilling of the agreement on the testing of the software, Art. 6 Para. 1 Sentence 1 lit. b GDPR. We process the data also to verify how often You have requested the test version and decide whether we accept Your request. The legal basis is Art. 6 Para. 1 Sentence 1 lit. f GDPR. We have a legitimate interest not to make a trial version available for free to the same person more than one time.

The data is deleted if You have not become a think-cell customer or engaged with think-cell employees or think-cell communications for a period of 3 years.

IX. Surveys

We use the SurveyMonkey tool, provided by SurveyMonkey Europe UC2, Shelbourne Buildings, Second Floor, Shelbourne Rd, Ballsbridge, Dublin 4, Ireland ("SurveyMonkey"), to conduct customer surveys. For this purpose, we may send e-mails via SurveyMonkey inviting You to participate in the surveys, provided You have given us Your consent to do so. We also use SurveyMonkey to conduct anonymous surveys as part of recruiting events. If you have provided us your consent to send us Your e-mail address as part of these surveys, we will use it for the purpose of informing You about job openings and other recruiting options.  The legal basis for data processing is in each case Art. 6 Para. 1 Sentence 1 lit. a GDPR.

It cannot be excluded that data processing takes place in the USA. SurveyMonkey Inc., the US parent company of SurveyMonkey, has self-certified its compliance under the EU-U.S. Data Privacy Framework, so that a data transfer is permitted under Art. 45 GDPR (adequacy decision).

Further information can be found in SurveyMonkey's privacy policy at https://www.surveymonkey.com/mp/legal/privacy/ and in each specific survey landingpage”

X. Use of think-cell’s Products

For the following processing think-cell Software is responsible:

When You use the Software, think-cell does not intentionally collect or process Your personal data. think-cell has no means to remotely access Your computer or any of Your Data through the Software, including when providing customer support.

However, some data that are processed may be considered personal data:

1. Error Reports

The Software provide a feature to send automated error reports to think-cell when an error condition arises to help improve the Software's stability and robustness. While these error reports do not generally contain any of Your personal data, in certain circumstances it is conceivable that certain information sent could be considered as personal data. think-cell will only process these error reports for their intended purpose, i.e. identifying and addressing possible errors of the Software.

The legal basis for the processing is, therefore, the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR). For further information on the content of error reports and on how to disable this feature, please refer to the Software's documentation at Error reporting.

The data is deleted after 2 years.

2. think-cell Send with Gmail

The Software provides a feature to allow users to send slides with Gmail ("think-cell Send with Gmail"). This feature involves use of the Google Sign-In service that may collect information used to identify You. Solely responsible for the processing of Your Data in relation to the Google Sign-In service and to Gmail is Google. If You want to ensure that Google does not receive Your Data, do not enable think-cell Send with Gmail as the default setting to create and edit emails or do not use the feature think-cell Send with Gmail.

If You use the feature think-cell Send with Gmail, the Software will locally access and use Your Google user data (i.e. Your Gmail address) to create a draft email; no Google user data will be shared or stored (with the exception of, for purely technical reasons, a so-called OAuth2 refresh token) by the Software, and none of Your Google user data will be collected, stored or else processed by think-cell at any time. think-cell's use of the aforementioned information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. Information received from Google APIs will not be transferred to any other app.

The legal basis for the processing is, therefore, the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR).

We point out that a data transfer to third countries may take place. An adequate level of data protection is ensured by standard contractual clauses according to Art. 46 Para. 2 lit. c GDPR and further contractual measures. Furthermore, Google is certified under the EU-US Data Privacy Framework.

Authentication uses OAuth2. think-cell stores the access token encrypted with the user token in the computer user’s profile. If You want to use think-cell Send with Gmail in the future, Google will request the token and use it to recognize your profile. think-cell does not have access to the token, and refresh the token as needed.

Further information on Google's use of Your data and the retention periods can be found in Google's privacy policy at https://policies.google.com/privacy.

3. Image libraries

We integrate various stock image platforms (listed below) into our software to enable You to embed stock images and icons directly into Microsoft PowerPoint when using think-cell. The legal basis for the integration of the images, which may involve the processing of Your personal data, is the fulfilment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR).

We transmit the search queries You enter (including filters) to the stock image platforms and request the necessary thumbnails for the results. At no time do we record or store Your queries or process them in any other way.

Freepik

Freepik is an service provided by Freepik Company, S.L., Calle Molina Lario 13, 5th Floor, 29015 Malaga, Spain. The use of Freepik does not require a Freepik user account. If You download an image, our software requests this image from Freepik via the image ID. Except for this request for the selected image from Freepik, no data is transmitted.

Further information on data protection and Freepik's terms of use can be found at: https://de.freepik.com/legal/privacy and https://de.freepik.com/legal/terms-of-use.

Getty Images

Getty Images is a service offered by is Getty Images (US), Inc., 195 Broadway, 10th Floor, New York, NY 10007, USA, or one of its affiliates (“Getty Images Inc.”). When using this feature, an internet connection to Getty Images Inc.is established. Getty Images Inc. will collect information to identify You and provide You access to images on Getty Images. Solely responsible for collecting and processing Your data in relation to connecting to and using Getty Images is Getty Images Inc. If You want to ensure that Getty Images Inc. does not receive Your data, do not use the respective feature.

Authentication uses OAuth2. think-cell stores the access token encrypted with the user token in the computer user’s profile. If You want to use Getty Images in the future, Getty Images Inc. will request the token and use it to recognize your profile. think-cell does not have access to the token, and refresh the token as needed.

We point out that a data transfer to third countries may take place based on Getty Images Inc.’s certification under the EU-US Data Privacy Framework..

Further information on Getty Images’ use of Your data and the retention periods can be found in Getty Images’ privacy policy at https://www.gettyimages.com/company/privacy-policy.

Pexels

Pexels is a service provided by Canva Germany GmbH, Pappelallee 78/79, 10437 Berlin. The use of Pexels does not require a user account with Pexels. If You download an image, our software requests this image from Pexels via the image ID. Except for this request for the selected image, no data is transmitted. Information on data protection and the Pexels terms of use can be found at: https: //www.pexels.com/privacy-policy/ and https://www.pexels.com/terms-of-service/.

Unsplash

Unsplash is a service provided by Unsplash Inc, 500-400 rue McGill, Montréal, QC, H2Y 2G1, Canada. The use of Unsplash does not require a user account with Unsplash. If You download an image, our software requests this image from Unsplash via the image ID. Except for the request for this selected image, no data is transmitted. Information on data protection and Unsplash's terms of use can be found at: https://unsplash.com/de/datenschutzregelungen and https://unsplash.com/de/nutzungsbedingungen.

4. Digital Asset Management Tools

We have integrated the following digital asset management (DAM) tools as part of our software. The legal basis for the processing is the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR).

Brandfolder

Brandfolder is a service provided by Brand Holding Inc, 500 108th Ave NE, Suite 200, Bellevue, WA 98004 USA and its subsidiary smartsheets Inc. The use of Brandfolder requires a user account through which You can provide us with an API key. We read this key each time You use our software in order to check Your authorization.

You can use our software to log in to Brandfolder and retrieve the media (photos, videos, other files) provided by Brandfolder. If You access the media, a direct connection is established to Brandfolder and Brandfolder is solely responsible for the data processing. think-cell does not collect any (further) data in connection with Brandfolder.

Further information on Brandfolder’s use of Your data can be found in its privacy policy at: https://brandfolder.com/outfit/privacy-notice/. We would like to point out that data is transferred to the USA. An adequate level of data protection is guaranteed by standard contractual clauses in accordance with Art. 46 Para. 2 lit. c GDPR and other contractual measures.

Canto

Canto is an service provided by Canto GmbH, Lietzenburger Str. 46, 10789 Berlin, Germany and Canto Inc, 625 Market St Ste 600 San Francisco, CA, USA.

The use of Canto requires a user account. You can log in to Canto using our software and access the media (photos, videos, other files) stored in or provided by Canto. If You access the media, You will be connected directly to Canto and Canto will be the sole controller of this processing. think-cell does not collect any data in connection with Canto. Canto GmbH collects information to identify You and enable You to access the media provided.

Authentication uses OAuth2. think-cell stores the access token encrypted with the user token in the computer user’s profile. If You want to use Canto in the future, Canto GmbH will request the token and use it to recognize your profile. think-cell does not have access to the token, and refresh the token as needed.

If You want to ensure that Canto GmbH does not collect Your data, do not use the corresponding function. Further information on Canto’s use of Your data can be found in its privacy policy at: https://www.canto.com/privacy-policy/

5. Tableau Chart Data

The Software provides a feature to allow users to directly embed chart data from Tableau into Microsoft PowerPoint. Tableau is a service offered by Tableau Software, LLC, 1621 N 34th St., Seattle, WA 98103, USA or one of its affiliates (“Tableau Software”). When using this feature, an internet connection to Tableau Software is established. Tableau Software will collect information to identify You and provide You access to chart data offered by Tableau. Solely responsible for collecting and processing Your data in relation to connecting to and using Tableau is Tableau Software. If You want to ensure that Tableau Software does not receive Your data, do not use the respective feature. The Software does not transfer Your data to Tableau Software (with the exception of a token that stores authentication data), and no Tableau user data will be collected, stored or else processed by think-cell at any time.

The legal basis for the processing is the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR). We point out that a data transfer to third countries may take place. An adequate level of data protection is ensured by standard contractual clauses according to Art. 46 Para. 2 lit. c GDPR and further contractual measures.

Authentication uses OAuth2. think-cell stores the access token encrypted with the user token in the computer user’s profile. If You want to use Tableau in the future, Tableau Software will request the token and use it to recognize your profile think-cell does not have access to the token, and refresh the token as needed.

Further information on Tableau Software's use of Your data and the retention periods can be found in Tableau Software's privacy statement at https://www.tableau.com/privacy.

6. GUID and License Key

When You use the Software, usage data (launching Microsoft PowerPoint, selection and use of PowerPoint functions and/or think-cell add-in functions) ("Usage Data") will be transmitted to think-cell together with an anonymous Globally Unique Identifier ("GUID") and the license key used and evaluated by think-cell. The Usage Data does not contain any content data (such as names, addresses and entered numeric variables) and is only stored on think-cell servers. The GUID is created when using think-cell for the first time and stored together with the user’s settings. It is a random string with no connection to the machine, user or document current at the time of creation. Using the GUID, it is only possible to determine whether two requests came from the same or from different users. Together with other information, this could make it possible to draw conclusions about the user. Usage Data is not collected and analyzed if You have deactivated the error report and automatic update functions.

The legal basis for the processing is, the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR).

The bug report created from the GUID is stored indefinitely. However, the personal information the bug report is created from, such as IP address, is not retained or associated with the bug report.

C. Your rights

• You are entitled to obtain from think-cell free-of-charge confirmation as to whether or not personal data concerning You is being processed. Where this is the case, You are further entitled to obtain access to the personal data and additional information in accordance with Art. 15 GDPR.
• In case personal data concerning You is inaccurate or incomplete, You have the right to obtain rectification or completion. In the instances covered by Art. 17 and Art. 18 GDPR, You are entitled to request the erasure or the blocking / restriction of processing of data.
• You have the right, to object at any time to the processing of personal data relating to You, which is based on Art. 6 Para. 1 Sentence 1 lit. e or lit. f GDPR; this also applies to profiling based on these provisions. We will no longer process Your personal data unless we can prove compelling legitimate reasons for the processing that outweigh Your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
• Furthermore, You are entitled to request in accordance with art. 20 GDPR the transmission of personal data concerning You and provided by You to You or directly to another data controller.
• Where processing Your Data is based on Your consent, You have the right to withdraw Your consent at any time, without affecting the lawfulness of processing based on Your consent before its withdrawal.
• If You consider that the processing of personal data relating to You infringes applicable law, You have the right to lodge a complaint with a supervisory authority. Such complaint will not prejudice any other administrative or judicial remedy. The competent supervisory authority for think-cell is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany, https://www.datenschutz-berlin.de.

D. California Privacy Rights

If You are a California resident, You may have the following consumer privacy rights:

• Right to Know: You have a right to request that we disclose to You the personal information we have collected about You. You also have a right to request additional information about our collection, use, disclosure, or sale of such personal information in the past 12 months. Note that we have provided much of this information in this privacy statement. You may make such a “request to know” by contacting through the Contact Us page.
• Right to Request Deletion: You also have a right to request that we delete personal information under certain circumstances, subject to a number of exceptions. To make a request, please reach out through the Contact Us page.
• Right to Opt-Out: You have a right to opt-out from future “sales” of personal information. Note that the CCPA defines “sell” and “personal information” very broadly, and some of our data sharing described in this privacy statement may be considered a “sale” under those definitions as explained above. For more information, including how to opt-out, please see the cookies section of this statement. If You would like to request Do Not Sell/Share of Your information, please let us know.
• Right to be Notified of Financial Incentives: You have the right to be notified of any financial incentive offers and their material terms, the right to opt-out of such incentives at any time, and may not be included in such incentives without Your prior informed opt-in consent. We do not offer any such incentives at this time.
• Right to Non-Discrimination: We will not discriminate against You for exercising any of these rights.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on Your behalf to exercise Your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof You have authorized it to act on Your behalf, and we may need You to verify Your identity directly with us.

Further, to provide or delete specific pieces of personal information we will need to verify Your identity to the degree of certainty required by law.

For more information regarding data rights requests, refer to section “A. Controller and Data Protection Officer” above.