Data protection has the highest priority

When processing your data, we always comply with the requirements of the European Data Protection Regulation ("DSGVO") and the German Federal Data Protection Act ("BDSG"). We work together with our data protection officer to regularly check the level of data protection. The contact details of the data protection officer are: Christoph Heinrich, Stresemannstraße 29, 22769 Hamburg, Germany

1. what information we collect

1.1 Information you provide to us

All information that you provide to us is treated confidentially and in compliance with the applicable legal situation. We are responsible for the processing of the data. The information may relate to your surname, first name, age, work experience, length of employment, type of employment relationship or communication data such as e-mail addresses and telephone numbers. The provision of data is always voluntary.

1.2 Information we process on your behalf

We process all information that a company makes available to us about its employees on behalf of the company. We treat the data confidentially and in compliance with the applicable legal situation. The information may relate to your surname, first name and communication data such as e-mail addresses and telephone numbers. Since this data primarily belongs to the category of publicly available data, it is less sensitive in terms of data protection law.

1.3 Automatically recorded information

1.3.1 Protocol data

When you visit our website, we automatically collect data. We collect the date, time, IP address, website reference, browser version and operating system. This data is stored for 7 days.

1.3.2 Cookies

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your terminal device. Cookies cannot execute programs or transfer viruses to your computer. We use cookies to make our website user-friendly and clear.

The legal basis for data processing is Art. 6 para. 1 lit. f) DSGVO, based on our legitimate interest in making our website more user-friendly and effective.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. In this case, we would like to point out that you may not be able to use all the functions of this website.

If you wish to change your cookie preferences for our website, simply reset your browser cache and re-enter your preferences when you return to the website.

Further information can be found at: https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses.

1.4 Purpose of the processing of your data

As a matter of principle, we only collect, process and store data in which we have a legitimate interest and which serve a specific purpose (Art. 6 para. 1 p. 1 lit. f DSGVO). The purpose may be, for example, to be able to offer our service at all or to provide you with an appropriate user experience. 

1.4.1 Website

Our website provides you with an overview of our services and our company. In order to be able to offer you an appropriate user experience, we automatically collect data and provide you with various technologies so that you can, for example, view the website with the shortest possible loading times.

1.4.2 Utilisation of our services

If you make use of our individual services or products, we require personal data for the implementation in order to be able to assign your person to certain services. Without the processing of personal data, we would not be able to offer our services.

1.5 Legal basis for data processing

The legal basis for the temporary storage of the data is Art. 6 para. 1 p. 1 lit. f DSGVO.

1.6 Duration of storage

In principle, we store data until the purpose of the data processing has been fulfilled. This relates either to the provision of our services and products and/or the provision and use of the website.

We reserve the right to store personal data for up to 6 months after termination of the contractual relationship and to use it anonymously for evaluation. Session data when using the website will be deleted after the end of the session if no consent to the storage of the session data has been given.

2. what we do with the information

We may use information we collect about you or process on your behalf, including personal data, for the following purposes:

2.1 Provision of the service.

We collect, process and store your personal data to provide personalised services. One of the core services is the individual and personalised provision of learning formats for which individualisation would not be possible without personal data.

2.2 Understand and improve our products.

We conduct research and analysis about your use of or interest in our products, services or content, or products, services or content offered by others. We do this to improve our products and to develop new products.

2.3 Protection of rights and interests.

We will use your information to protect our rights and interests and the rights and interests of our users and others and to enforce this notice or our terms of use.

2.4 Compliance with legislation.

We may use your information to comply with applicable legal or regulatory obligations, including to comply with requests from law enforcement or other government authorities or in legal proceedings to which we are a party.

2.5 Communication with you.

We may send you service and support emails to make sure the service is working properly. We will also send you emails about your calendar appointments. These messages are considered part of the Service and you cannot unsubscribe from these messages.

Subject to your opt-out preference, we may send you emails about new product features or other news about us or about topics we think are relevant to you. You can opt out of receiving these communications at any time. thankscoach users are promised that we will not use the email addresses we process on their behalf to send direct marketing of any kind.

We also use your information to respond to your questions or comments.

We may contact you to let you know about changes to your services, our service offering and other important service-related communications, such as changes to the message or security or fraud alerts.

2.6 Other

We may also use your information to administer our business or perform functions described to you at the time of collection, if you consent to this.

3. who we could pass the information on to

We do not sell your information to third parties or share it in exchange for money or other valuable consideration. We do not share your personal information with third parties unless we inform you of this and give you the opportunity to opt out of the sharing of your personal information as set out in this notice.

When processing your data, we always adhere to the requirements of the European Data Protection Regulation ("DSGVO") and the German Federal Data Protection Act ("BDSG"). To this end, we not only keep an eye on our own handling of personal data, but also check our partners with whom we work. To ensure an appropriate level of data protection, we agree on a Data Processing Agreement (DPA) as standard, including the conclusion of the standard contractual clauses and the performance of a Transfer Impact Assessment (TIA).

We may share information we collect about you, including personal data, in the following ways:

3.1 To service providers

In order to provide our services and products, we work together with various service providers. The service providers act in the role of order processors and process the information provided confidentially and in compliance with the applicable level of data protection. 

Below you will find an overview of our service providers and information on where you can obtain further information on data protection:

3.2 To affiliated companies

We may share information with current or future affiliated organisations or parent/subsidiary companies for research, marketing and other purposes consistent with this Privacy Policy.

We may disclose your information if we believe disclosure is reasonably necessary to comply with a law, regulation, legal or regulatory request; to respond to a subpoena, court order, warrant or other legal process; to enforce the applicable Terms of Service or this Notice, including investigating possible violations thereof; to protect the safety, rights or property of the public, any person or thankscoach; to detect, prevent or otherwise address security or technical issues, illegal or suspected illegal activity (including fraud); or as evidence in litigation to which we are a party, as part of a judicial or regulatory proceeding.

If you use thankscoach as a paid member of an organisation or use your organisation's email domain (impersonating a member of the organisation), we may share your email address and personal information with an authorised representative of your organisation upon request so that they can manage the account for the organisation.

4. your rights

4.1 Right of information

Pursuant to Art. 15 DSGVO, you have the right to obtain information about the processing of your personal data.

4.2 Right of rectification

In accordance with Art. 16 DSGVO, you have the right to demand that we correct any inaccurate or incomplete personal data relating to you.

4.3 Right to erasure

You have the right to request the deletion of your data if the conditions set out in Art. 17 of the GDPR apply. This is the case, for example, if your data is no longer required for the purposes for which it was collected. You can also request the deletion of your data if we process it on the basis of your consent and you have revoked this consent.

4.4 Right to restriction

You have the right to request the restriction of the processing of your personal data if the conditions of Article 18 of the GDPR apply. This is the case, for example, if you dispute the accuracy of your data. You can then demand the restriction of processing for the duration of the verification of the accuracy of the data by us.

4.5 Right to data portability

If the data processing is based on your consent or for the performance of a contract and also uses automated processing, you have the right under Art. 20 DSGVO to receive your personal data in a structured, common and machine-readable format and to have it transferred by us to another data processor.

4.6 Right of withdrawal

In accordance with Art. 7 (3) DSGVO, you have the right to revoke your consent at any time with effect for the future.

4.7 Objection to data processing

You can object to data processing based on a legitimate interest at any time if there are special reasons, Art. 21 DSGVO.

4.8 Right of appeal

In addition, you have the right to complain to a supervisory authority about our processing of your data in accordance with Art. 77 DSGVO.

5. contacting

If you have any questions or comments about the information provided here, please contact support@thankscoach.io.