Privacy policy

Privacy Policy
(updated: August 8, 2024)

This policy ("Privacy Policy") may be revised from time to time by updating this page. You can review the Privacy Policy at any time by visiting the Privacy Policy link at the bottom of think-cell’s website www.think-cell.com ("Website") or by contacting [email protected] to request a current copy.

The term "You" as used herein refers to all individuals and/or entities accessing any think-cell Website and other websites provided by think-cell, which are mentioned explicitly in this Privacy Policy using think-cell's products, contacting think-cell or think-cell Software or being contacted by think-cell or think-cell Software for any reason or else interacting with think-cell. There are special provisions regarding the protection of personal data, in particular the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and the Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR). think-cell will process personal data strictly in accordance with any applicable provisions. According to these provisions, think-cell is legally obligated to provide You with the following information.

A. Controller and Data Protection Officer

Responsible for the operation of this Website is think-cell Operations GmbH, Leipziger Str. 51, 10117 Berlin, Germany, telephone: +49 30 666473-10. If You specifically interact with a member of the think-cell group of companies, then this group company is the controller.

In some cases explicitly set out below the think-cell Software GmbH (address and phone number as before) (“think-cell Software”) is the data controller.

Please contact us at [email protected] with any queries regarding data protection at think-cell.

You can reach the data protection officer as follows: [email protected]

If you have any questions or suggestions regarding data protection, please contact us or our data protection officer at any time.

B. Personal Data collected by think-cell

think-cell may only collect and process your personal data in accordance with this Privacy Policy. The collection, storage, use and any other form of processing of personal data by think-cell occurs exclusively ’if there is a legal basis allowing this processing. think-cell will not sell, transmit, disseminate or else disclose personal data without Your consent or another legal basis.

I. Use of think-cell’s Websites

The information that may be collected by automated means when accessing our Website includes:

• Approximate location information if allowed by Your web browser settings
• Details about the devices that are used to access our Website (such as the IP address and type of operating system and web browser)
• Dates and times of visits to and use of our Website
• Information about how our Website is used (such as the content that is viewed on our Website and how users navigate between our web pages)
• URLs that refer visitors to our Website
• Search terms used to reach our Website

The legal basis for the temporary storage of these data is Art. 6 Para. 1 Sentence 1 lit. f GDPR, as this processing is necessary to safeguard our legitimate interests in order to be able to operate the Website, to enable the Website to be delivered to Your device, to optimize the Website and to ensure the security of our information technology systems.

The data will be deleted or anonymized 12 months after the collection.

1. Cookies and other Tracking

We use first party and third party cookies for several reasons. Some cookies are required for technical reasons that are strictly necessary for our Website to operate. We refer to these as necessary cookies. Other cookies also enable us to provide Website functionality, or to enhance visitors' experience on our Website by providing them with personalized content and advertising. The specific types of first and third party cookies served through our Website and the purposes they perform are described in our cookie consent management tool, here:

Cookie Settings

Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enable us to recognize when someone has visited our Website. This allows us, for example, to monitor the traffic patterns of users from one page within our Website to another, to understand whether You have come to our Website from an online advertisement displayed on a third-party website and to improve site performance. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will often impair their functioning.

Tracking technologies also allow us to determine if an individual is engaging with us. If they are not, after a period of inactivity we would remove their personal information as a part of our data minimization practices.

You have the right to decide whether to accept or reject non-necessary cookies. You can exercise Your cookie preferences through our cookie consent tool, which You can access here:

Cookie Settings

You can also set or amend Your web browser controls to accept or refuse cookies. If You choose to reject cookies, You may still use our Website though Your access to some functionality and areas of our Website may be restricted. As the means by which You can refuse cookies through Your web browser controls vary from browser-to-browser, You should visit Your browser's help menu for more information.

In addition, most advertising networks offer You a way to opt-out of targeted advertising. If You would like to find out more information, please visit http://www.aboutads.info/choices/ or http://www.youronlinechoices.com.

The legal basis for the use of necessary cookies is Art. 6 Para. 1 Sentence 1 lit. f GDPR since we have a legitimate interest in ensuring the functionality and security of our Websites.

The use of other cookies and similar technologies only takes place with your consent. The legal basis is Art. 6 Para. 1 Sentence 1 lit. a GDPR and possibly Section 25 Para. 1 German Telecommunications-Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz – TTDSG). You can revoke your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Information about the retention periods can be found in the Cookie Settings:

Cookie Settings

To help think-cell analyze how users in general, including You, use the Website, think-cell uses Matomo (formerly known as Piwik), an open-source software for web analytics. The information about Your use of the Website (including Your IP address anonymized prior to its storage) so collected will be stored on think-cell's servers in Germany, will and can only be accessed by think-cell and will be used for analytical purposes to improve the experience of Website users, the content provided and the Website’s design. You can dissent to the collection of this information by adjusting Your browser settings to disallow tracking ("Do Not Track") or - in case you have not done so already - by clicking on the respective button below ("opt-out"). In case of an opt-out, an essential cookie, a small file stored on Your device, will be placed (mtm_consent_removed) only to implement the opt-out and ensure that no tracking and no analysis of Your use of the Website can take place.

2. Google Ads

We use Google Ads, an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). think-cell can evaluate this data, for example by analyzing which search terms led to the display of our advertisements and how often advertisements were clicked on.

The use of this service is based on Your consent according to Art. 6 Para. 1 Sentence 1 lit. a GDPR and Section 25 Para. 1 TTDSG. There may be a data transfer to the USA. The data transfer is legitimized by Your consent, Art. 49 Para. 1 lit. a GDPR.

3. Microsoft Ads

We use the conversion tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. In this process, Microsoft Ads stores cookies on your computer if You have reached our website via a Microsoft Bing or Yahoo! ad. This processes personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers, and information about device and browser settings. Microsoft and we can recognize in this way that someone has clicked on an ad, has been redirected to our Website and has reached a previously determined target page (conversion page). We only learn the total number of users who clicked on an ad and were then redirected to the conversion page. Microsoft Ads is used for the purpose of optimizing the placement of advertisements.

The processing only takes place with Your consent in accordance with Art. 6 Para.1 S. 1 lit. a GDPR. There may be a data transfer to the USA. The data transfer is legitimized by your consent, Art. 49 Para. 1 lit. a GDPR.

4. Google Display 360

We use the Display & Video 360 tool from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The tool may collect data for analysis, marketing and optimization purposes and help us improve our marketing efforts and our Website. The data collected is used by the tool to determine whether users who have seen our ads visit our Websites or which products they are interested in. This helps us to use our advertising budget more efficiently. The data collected may also be used by us to serve interest-based advertising.

The use of this service is based on Your consent according to Art. 6 Para. 1 Sentence 1 lit. a GDPR and Section 25 Para. 1 TTDSG. There may be a data transfer to the USA. The data transfer is legitimized by your consent, Art. 49 Para. 1 lit. a GDPR.

5. YouTube

We may use the platform YouTube, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), for some embedded videos. think-cell has made sure that no data is transferred to this service unless and until such an embedded video is played; furthermore, the "privacy-enhanced mode" has been enabled. Once You play an embedded video, cookies may be placed and personal data may be tracked and processed by Google. According to Google, the information in particular serves the purposes to record video statistics, to improve user-friendliness and to avoid improper actions. Solely responsible for these cookies and for the processing of personal data in relation to the playback of videos is Google. If You want to ensure that Google does not receive Your personal data, do not click on the embedded videos on the Website. Further information can be found in Google's privacy policy at https://policies.google.com/privacy.

The legal basis for the use of the YouTube is Your consent in accordance with Art. 6 Para.1 Sentence 1 lit. a GDPR, Section 25 Para.1 TTDSG. The recipient of the collected data is the Google. Personal data will be transferred to the USA under standard contractual clauses as defined in Art. 46 Para. 2 lit. c GDPR that act as appropriate guarantees for the data transfer.

The period for which Google retains this data varies by data type and is dependent on a user’s specific video history settings. Details are set out in the Google’s data retention policy at https://policies.google.com/technologies/retention.

6. Vimeo

We use Vimeo a service provided by Vimeo.com Inc., 555 West 18th Street, New York, New York 10011, USA (“Vimeo”) for embedding videos about our products and services.

The legal basis for the use of the Vimeo is Your consent in accordance with Art. 6 Para.1 Sentence 1 lit. a GDPR, Section 25 Para. 1 TTDSG. The recipient of the collected data is Vimeo. Personal data will be transferred to the USA under standard contractual clauses as defined in Art. 46 Para. 2 lit. c GDPR that act as appropriate guarantees for the data transfer.

See Vimeo’s privacy policy for details of data collected and retention periods: https://vimeo.com/privacy

7. Marketo

We use the tool Marketo, provided by Marketo EMEA Ltd., Cairn House South County Business Park, 18 Dublin, Ireland ("Marketo"), on our Website to collect statistic data about the use of our Website and the browsing behavior in order to optimize our offer, to place suitable offers, to integrate surveys and to conduct e-mail marketing. For this purpose, cookies may be stored on your computer, which are used to collect data that is stored on Marketo's servers and processed further, provided that you have given us your consent to do so. The legal basis for data processing is Art. 6 Para. 1 S.1 lit. a GDPR, Section 25 Para. 1 TTDSG. The collected data may be merged with the personal data you voluntarily provided on the website for profiling purposes. You can object to the profiling by deactivating the cookie function in your browser or by contacting us. For more information, please see Marketo's privacy policy at de.marketo.com/trust/legal/privacy.

Data processing takes place in the US. The data transfer to the US is secured via standard contractual clauses according to Art. 46 Para. 2 lit. c GDPR and additionally your consent according to Art. 49 Para. 1 lit. a GDPR.

8. Google Analytics

We use Google Analytics, a web analytics service provided by Google. With your consent, Google Analytics uses cookies to enable an analysis of your user behavior on our Website, thereby improving the functionality of the Website and evaluating the success of our marketing. The information generated by the cookie is usually transferred to a Google server in the USA and stored there. We have activated IP anonymization on this Website by adding the code "gat._anonymizeIp();" so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The data transfer is secured by the agreement of standard contractual clauses pursuant to Art. 46 Para. 2 lit. c GDPR and furthermore via your consent pursuant to Art. 49 Para. 1 lit. a GDPR.

Google will use this information on our behalf for the purpose of evaluating your use of the Website, compiling reports on Website activity and providing other services relating to Website activity and internet usage. In doing so, Google may link the data with other data about you (such as search history, personal accounts, usage data of other devices and any other data Google has about you).

The legal basis for the data processing is your consent, Art. 6 Para. 1 S. 1 lit. a GDPR, Section 25 Para. 1 TTDSG.

9. LinkedIn

We use the Insight-Tag, image pixel, Conversion Tracking, Website Demographics and Matched Audiences offered by LinkedIn Ireland Unlimited Company, Wilton Pl, Dublin, Ireland ("LinkedIn"). The LinkedIn Insight-Tag is a snippet of code that we have added to our Website. If you consent, the Insight-Tag places a cookie in your web browser. The Insight-Tag, as well as the image pixel, allows us to get campaign reporting and lets us better understand the interests of our Website visitors. LinkedIn Conversion Tracking and Website Demographics allow us to see which features our Website visitors have used after clicking on an ad from think-cell. Via Matched Audiences, e-mail addresses stored with us are uploaded in encrypted form to the LinkedIn Campaign Manager to determine recipients of our LinkedIn ads and thus display ads only to users who have a particular interest in our information and offers based on their interaction with us. The LinkedIn Insight-Tag collects the following data from you via our Website: URL, referrer URL, IP address, device and browser properties (user agent), timestamp, user data. We enabled enhanced conversion tracking. Thereby, LinkedIn automatically adds a click ID to the end of the Website URLs, which allows the Insight-Tag to use first-party cookie tracking. LinkedIn does not share any personal data of LinkedIn members with us, but provides us with reports and notifications about the Website audience and the performance of our placed ads. Collected IP addresses are shortened. Direct identifiers of LinkedIn members are removed by LinkedIn within seven days to pseudonymize the data and deleted within 180 days. There may be a data transfer to the USA. We have concluded standard data protection clauses pursuant to Art. 46 Para. 2 lit. c GDPR. Additionally, and the legal basis for data transfer, is your consent according to Art. 49 Para 1 lit. a GDPR.

The legal basis for the data processing is your consent, Art. 6 Para. 1 Sentence 1 lit. a GDPR, Section 25 Para. 1 TTDSG. You can revoke your consent at any time with effect for the future. You can also set a LinkedIn opt-out cookie via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further information on the LinkedIn Insight-Tag can be found here: https://www.linkedin.com/help/lms/answer/a427661/linkedin-insight-tag-haufig-gestellte-fragen?lang=de

II. Social Media Platforms

We have profiles on the following social media platforms:

LinkedIn, Twitter and YouTube.

Information on data processing by the social media platforms, especially details of the processed data, can be found in their privacy policies available on their websites.

1. G2

G2’s Privacy Policy can be found here: https://www.g2.com/legal/privacy

G2 retains data according to its cookie policies. Personal data is retained for a maximum of 13 months.

2. Capterra

Capterra’s Privacy Policy can be found here: https://www.capterra.com/legal/privacy-policy

Capterra will retain your personal information for as long as required to perform the purposes for which the data was collected, depending on the legal basis for which that data was obtained and/or whether additional legal/regulatory obligations require us to retain it.

III. Contact and Communication

For the following processing think-cell Software is responsible:

If You contact us by phone or by email or via a contact form (if provided) we store Your personal data that You submit (e.g. the email-address or phone number, name and contact details and other information that You provide).

If You contact us within an existing contractual relationship or contact us in advance for information about our scope of services or other services, the data and information You provide will be processed for the purpose of processing and answering Your contact request in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR, in any other cases based on our legitimate interests in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR for the purpose of properly answering customer/contact inquiries.

The transmitted data will be stored until the purpose for data storage/processing ceases to exist (e.g., after Your inquiry has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

IV. Sales Meetings via Microsoft Teams and their Recording

We use Microsoft Teams for video meetings, especially with potential customers. In this case, your personal data will be stored on Microsoft's servers for the purpose of conducting the event. This involves the following data

• Inventory data (e.g. names, addresses),
• Contact data (e.g. e-mail address, telephone numbers),
• Content data (e.g. text entries, videos),
• Usage data (e.g. websites visited, access times),
• Meta/communication data (e.g. device information, IP addresses).

The legal basis is Art. 6 Para. 1 Sentence 1 lit. b GDPR (contract initiation) and our legitimate interest in sales talks (Art. 6 Para. 1 Sentence 1 lit. f GDPR). This data is deleted as soon as it is no longer required.

When providing Microsoft Teams, Microsoft may store cookies on users' devices for analysis or settings purposes. Further information can be found on the Microsoft website: https://privacy.microsoft.com/en-us/privacystatement

We may record and transcribe Teams meetings using the “Gong” tool. In this case, we ask the participants for their consent and then record the consent again. The legal basis is the consent (Art. 6 Para. 1 Sentence 1 lit. a GDPR). We use the recording for quality assurance by using it to train employees. The recording is deleted after 3 years.

The data is processed by Gong.io Inc, 201 Spear St. 13th Floor, San Francisco, CA 94105 (“Gong”) in the USA. Gong is certified under the EU-U.S. Privacy Framework, so that a data transfer is legitimized under Art. 45 GDPR (adequacy decision). Further details can be found in Gong's privacy policy at https://www.gong.io/privacy-policy/

V. Newsletter

As part of sending newsletters, we use tracking technology (e.g. web beacons) to detect whether the email we send has been opened and to measure the success of email marketing campaigns. The legal basis for sending newsletter and using tracking technologies is Art. 6 Para. 1 Sentence 1 lit. a GDPR possibly Section 25 Para. 1 TTDSG. Newsletters are only sent after a successful double-opt-in process. For this purpose, we will send you a confirmation email after you have subscribed to our newsletter. After clicking on the confirmation link in this email, you will be added to our newsletter mailing list. Instead of a separate confirmation email we may also ask you to confirm your email-address by clicking on a link, with which we provide a free service that you ordered if you subscribed to our newsletter during the order process (e.g. by clicking on a link, with which you can download a free e-book).

The newsletter informs you about promotions, offers, helpful tips and features and new functionalities of our software as well as news about our company, our software and other services we offer.

We have engaged Marketo to send our newsletter.

The newsletter dispatch and evaluation may involve processing of personal data in the USA. By consenting to receive newsletters, you also consent to the processing of your personal data in the USA in accordance with Art. 49 Para. 1 lit. a GDPR. The USA is considered by the ECJ to be a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data will be processed by US authorities for control and monitoring purposes, possibly without the possibility of a legal remedy. You may withdraw your consent at any time.

VI. User Account

For the following processing think-cell Software is responsible:

If You choose to purchase the think-cell software we store Your personal information provided in Your user account. The following data will be stored: salutation, name, phone number, email-address (company), country, industry, company name, number of employees. The purpose of the processing is to enable You to administer the software. The legal basis of the processing is Art. 6 Para. 1 Sentence 1 lit. b GDPR.

The data is retained for as long as you continue to be a user of the think-cell software and for a period of up to 12-months after this.

VII. Test Version

For the following processing think-cell Software is responsible:

If You request to use a test version of the think-cell software via our Website we store Your personal information provided. The following data will be stored: salutation, name, phone number, email-address (company), country, industry and company name. The purpose of the processing is the fulfilling of the agreement on the testing of the software, Art. 6 Para. 1 Sentence 1 lit. b GDPR. We process the data also to verify how often You have requested the test version and decide whether we accept Your request. The legal basis is Art. 6 Para. 1 Sentence 1 lit. f GDPR. We have a legitimate interest not to make a trial version available for free to the same person more than one time.

The data is deleted if you have not become a think-cell customer or engaged with think-cell employees or think-cell communications for a period of 3 years.

VIII. Surveys

We use the SurveyMonkey tool, provided by SurveyMonkey Europe UC2, Shelbourne Buildings, Second Floor, Shelbourne Rd, Ballsbridge, Dublin 4, Ireland ("SurveyMonkey"), to conduct customer surveys. For this purpose, we may send e-mails via SurveyMonkey inviting you to participate in the surveys, provided you have given us your consent to do so. The legal basis for data processing is Art. 6 para. 1 Sentence 1 lit. a GDPR.

It cannot be excluded that data processing takes place in the USA. SurveyMonkey Inc., the US parent company of SurveyMonkey, has self-certified its compliance under the EU-U.S. Data Privacy Framework, so that a data transfer is permitted under Art. 45 GDPR (adequacy decision).

Further information can be found in SurveyMonkey's privacy policy at https://www.surveymonkey.com/mp/legal/privacy/ and in each specific survey landingpage”

IX. Use of think-cell’s Products

For the following processing think-cell Software is responsible:

When You use the Software, think-cell does not intentionally collect or process Your personal data. think-cell has no means to remotely access Your computer or any of Your Data through the Software, including when providing customer support.

However, some data that are processed may be considered personal data:

Error Reports

The Software provide a feature to send automated error reports to think-cell when an error condition arises to help improve the Software's stability and robustness. While these error reports do not generally contain any of Your personal data, in certain circumstances it is conceivable that certain information sent could be considered as personal data. think-cell will only process these error reports for their intended purpose, i.e. identifying and addressing possible errors of the Software.

The legal basis for the processing is, therefore, the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR). For further information on the content of error reports and on how to disable this feature, please refer to the Software's documentation at Error reporting.

The data is deleted after 2 years.

think-cell Send with Gmail

The Software provides a feature to allow users to send slides with Gmail ("think-cell Send with Gmail"). This feature involves use of the Google Sign-In service that may collect information used to identify You. Solely responsible for the processing of Your Data in relation to the Google Sign-In service and to Gmail is Google. If You want to ensure that Google does not receive Your Data, do not enable think-cell Send with Gmail as the default setting to create and edit emails or do not use the feature think-cell Send with Gmail.

If You use the feature think-cell Send with Gmail, the Software will locally access and use Your Google user data (i.e. Your Gmail address) to create a draft email; no Google user data will be shared or stored (with the exception of, for purely technical reasons, a so-called OAuth2 refresh token) by the Software, and none of Your Google user data will be collected, stored or else processed by think-cell at any time. think-cell's use of the aforementioned information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. Information received from Google APIs will not be transferred to any other app.

The legal basis for the processing is, therefore, the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR).

We point out that a data transfer to third countries may take place. An adequate level of data protection is ensured by standard contractual clauses according to Art. 46 Para. 2 lit. c GDPR and further contractual measures.

Authentication uses OAuth2. think-cell stores the access token encrypted with the user token in the computer user’s profile. think-cell does not have access to the token, and refresh the token as needed.

Further information on Google's use of Your data and the retention periods can be found in Google's privacy policy at https://policies.google.com/privacy.

Images from Getty Images

The Software provides a feature to allow users to directly embed images from Getty Images into Microsoft PowerPoint. Getty Images is a service offered by is Getty Images (US), Inc., 195 Broadway, 10th Floor, New York, NY 10007, USA, or one of its affiliates (“Getty Images Inc.”). When using this feature, an internet connection to Getty Images Inc.is established. Getty Images Inc. will collect information to identify You and provide You access to images on Getty Images. Solely responsible for collecting and processing Your data in relation to connecting to and using Getty Images is Getty Images Inc.. If You want to ensure that Getty Images Inc. does not receive Your data, do not use the respective feature. The Software does not transfer Your data to Getty Images Inc. (with the exception of a token that stores authentication data), and no Getty Images user data will be collected, stored or else processed by think-cell at any time.

The legal basis for the processing is, the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR).

We point out that a data transfer to third countries may take place. An adequate level of data protection is ensured by standard contractual clauses according to Art. 46 Para. 2 lit. c GDPR and further contractual measures.

Authentication uses OAuth2. think-cell stores the access token encrypted with the user token in the computer user’s profile. think-cell does not have access to the token, and refresh the token as needed.

Further information on Getty Images’ use of Your data and the retention periods can be found in Getty Images’ privacy policy at https://www.gettyimages.com/company/privacy-policy.

Tableau Chart Data

The Software provides a feature to allow users to directly embed chart data from Tableau into Microsoft PowerPoint. Tableau is a service offered by Tableau Software, LLC, 1621 N 34th St., Seattle, WA 98103, USA or one of its affiliates (“Tableau Software”). When using this feature, an internet connection to Tableau Software is established. Tableau Software will collect information to identify You and provide You access to chart data offered by Tableau. Solely responsible for collecting and processing Your data in relation to connecting to and using Tableau is Tableau Software. If You want to ensure that Tableau Software does not receive Your data, do not use the respective feature. The Software does not transfer Your data to Tableau Software (with the exception of a token that stores authentication data), and no Tableau user data will be collected, stored or else processed by think-cell at any time.

The legal basis for the processing is the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR). We point out that a data transfer to third countries may take place. An adequate level of data protection is ensured by standard contractual clauses according to Art. 46 Para. 2 lit. c GDPR and further contractual measures.

Authentication uses OAuth2. think-cell stores the access token encrypted with the user token in the computer user’s profile. think-cell does not have access to the token, and refresh the token as needed.

Further information on Tableau Software's use of Your data and the retention periods can be found in Tableau Software's privacy statement at https://www.tableau.com/privacy.

GUID and License Key

When You use the Software, usage data (launching Microsoft PowerPoint, selection and use of PowerPoint functions and/or think-cell add-in functions) ("Usage Data") will be transmitted to think-cell together with an anonymous Globally Unique Identifier ("GUID") and the license key used and evaluated by think-cell. The Usage Data does not contain any content data (such as names, addresses and entered numeric variables) and is only stored on think-cell servers. The GUID is created when using think-cell for the first time and stored together with the user’s settings. It is a random string with no connection to the machine, user or document current at the time of creation. Using the GUID, it is only possible to determine whether two requests came from the same or from different users. Together with other information, this could make it possible to draw conclusions about the user. Usage Data is not collected and analyzed if You have deactivated the error report and automatic update functions.

The legal basis for the processing is,  the fulfillment of the software license agreement (Art. 6 Para. 1 Sentence 1 lit. b GDPR).

The bug report created from the GUID is stored indefinitely. However, the personal information the bug report is created from, such as IP address, is not retained or associated with the bug report.

X. Your rights

• You are entitled to obtain from think-cell free-of-charge confirmation as to whether or not personal data concerning You is being processed. Where this is the case, You are further entitled to obtain access to the personal data and additional information in accordance with Art. 15 GDPR.
• In case personal data concerning You is inaccurate or incomplete, You have the right to obtain rectification or completion. In the instances covered by Art. 17 and Art. 18 GDPR, You are entitled to request the erasure or the blocking / restriction of processing of data.
• You have the right, to object at any time to the processing of personal data relating to You, which is based on Art. 6 Para. 1 Sentence 1 lit. e or lit. f GDPR; this also applies to profiling based on these provisions. We will no longer process Your personal data unless we can prove compelling legitimate reasons for the processing that outweigh Your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
• Furthermore, You are entitled to request in accordance with art. 20 GDPR the transmission of personal data concerning You and provided by You to You or directly to another data controller.
• Where processing Your Data is based on Your consent, You have the right to withdraw Your consent at any time, without affecting the lawfulness of processing based on Your consent before its withdrawal.
• If You consider that the processing of personal data relating to You infringes applicable law, You have the right to lodge a complaint with a supervisory authority. Such complaint will not prejudice any other administrative or judicial remedy. The competent supervisory authority for think-cell is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany, https://www.datenschutz-berlin.de.

California Privacy Rights

If You are a California resident, You may have the following consumer privacy rights:

• Right to Know: You have a right to request that we disclose to You the personal information we have collected about You. You also have a right to request additional information about our collection, use, disclosure, or sale of such personal information in the past 12 months. Note that we have provided much of this information in this privacy statement. You may make such a “request to know” by contacting through the Contact Us page.
• Right to Request Deletion: You also have a right to request that we delete personal information under certain circumstances, subject to a number of exceptions. To make a request, please reach out through the Contact Us page.
• Right to Opt-Out: You have a right to opt-out from future “sales” of personal information. Note that the CCPA defines “sell” and “personal information” very broadly, and some of our data sharing described in this privacy statement may be considered a “sale” under those definitions as explained above. For more information, including how to opt-out, please see the cookies section of this statement. If You would like to request Do Not Sell/Share of Your information, please let us know.
• Right to be Notified of Financial Incentives: You have the right to be notified of any financial incentive offers and their material terms, the right to opt-out of such incentives at any time, and may not be included in such incentives without Your prior informed opt-in consent. We do not offer any such incentives at this time.
• Right to Non-Discrimination: We will not discriminate against You for exercising any of these rights.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on Your behalf to exercise Your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof You have authorized it to act on Your behalf, and we may need You to verify Your identity directly with us.

Further, to provide or delete specific pieces of personal information we will need to verify Your identity to the degree of certainty required by law.

For more information regarding data rights requests, refer to section “A. Controller and Data Protection Officer” above.