Privacy notice

1. Controller and contact

For privacy enquiries: think@thinkworks.biz

2. Accessing and providing the website

Technical connection data is processed when pages are requested, including IP address, time, requested page, browser information and, where provided, the referring page. This supports delivery, troubleshooting and security. The legal basis is Article 6(1)(f) GDPR; our interest is operating a functional, secure website.

The website uses ChatGPT Sites, provided by OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. OpenAI processes hosted data on our behalf under the Sites Data Processing Addendum.

3. Hosting providers and international processing

OpenAI uses infrastructure subprocessors, including Cloudflare for content delivery and hosting. Processing is not limited to Germany or the EEA and may involve other countries, including the United States. The Sites agreement provides for standard contractual clauses or applicable adequacy decisions for relevant transfers. You can request information about these safeguards through our contact address above.

Further details: subprocessors and processing locations. Technical logs are retained according to the platform’s operational, troubleshooting, abuse-prevention and legal requirements. We do not maintain a separate visitor log.

4. Public access

This website is publicly accessible. Visiting the website and using the enquiry form require neither a user account nor a ChatGPT sign-in. We do not provide account registration or maintain our own profile database on this website.

5. Email and enquiries

When you email us, we use your sender address, any name and business contact details you provide, and the message content and time to respond. Article 6(1)(b) GDPR applies to steps towards your own contract. Other enquiries and business contacts are handled under Article 6(1)(f) GDPR: our interest in managing business correspondence.

Recipients are the people handling your enquiry and necessary email and IT providers. You are not automatically subscribed to a newsletter. Providing information is voluntary, although we may be unable to respond without contact details or sufficient context. Please do not send patient data. We will agree a suitable transfer method for confidential documents.

6. Enquiry form and discussion brief

When you submit the enquiry form, your name, email address, selected topic and message, together with any optional company and phone details, are sent over encrypted HTTPS to formular.thinkworks.biz. The service creates an email to think@thinkworks.biz. The form language, submission time and a random reference number are also processed. The legal bases and recipients are described in section 5. Required fields are needed to handle the enquiry; using the form is voluntary.

The form and email delivery use webhosting and email services from IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as a technical provider. The IONOS data processing agreement governs processing on behalf of customers. The sending script does not store form contents in a separate database. The message is held in the email inbox for handling; section 7 applies.

Access to the form endpoint involves IONOS processing technical data such as access time, requested file, browser and device information, and IP address. According to IONOS information about webhosting, visitor data is anonymised on collection and kept for eight weeks, including server-side usage statistics. This supports secure, stable operation under Article 6(1)(f) GDPR.

Our sending script limits repeated requests to prevent abuse under Article 6(1)(f) GDPR. It briefly processes the IP address and stores a pseudonymous identifier derived using a changing daily key, timestamps and counters in a protected file. It does not store the full IP address or message content there. Subsequent valid requests remove timestamps older than one hour; the previous daily record is replaced on the next valid request on a later calendar day. Without further requests, the last record remains until that next request or deletion when the form is decommissioned.

The optional discussion brief below the form is generated entirely in your browser. Our application does not transmit its entries to us or an AI service, or save them in a database or browser storage. A download only happens when you select it. The resulting text file remains on your device until you delete it.

7. Retention

General email enquiries are deleted after handling is complete once no follow-up, ongoing business relationship, specific legal claim or statutory retention duty remains. Where a message qualifies as a commercial or business letter subject to statutory retention, the period is generally six years from the end of the relevant calendar year (section 257 HGB and section 147 AO). Other records are subject to their applicable periods. Records retained by law are used only for the permitted purpose.

8. Cookies, fonts and external content

The pages we built contain no analytics or advertising pixels and set no application cookies or local storage. Fonts and images are loaded from the same website host. We have not embedded maps, videos, social-media plugins or CAPTCHA services.

The hosting platform may use necessary cookies or similar storage to provide and secure the service. Strictly necessary access to a device may fall under section 25(2) TDDDG; subsequent personal-data processing is governed by the GDPR. OpenAI describes its technologies in its cookie notice. External websites are opened only when you select their links.

9. Your rights

Subject to the legal conditions, you have rights to access, rectification, erasure, restriction and portability. Consent may be withdrawn prospectively. You may object to processing based on legitimate interests for reasons relating to your particular situation. Please contact think@thinkworks.biz.

You may complain to a data-protection authority, particularly where you live, work or believe an infringement occurred. Our competent authority is the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information, Heilbronner Straße 35, 70191 Stuttgart, Germany; email: poststelle@lfdi.bwl.de.

10. Automated decisions and updates

This website does not make automated decisions about you or build personal profiles. The AI examples explain our consulting services; no AI chatbot is embedded here. We update this notice when features or service providers change.