Privacy policy

Note: This is an English translation provided for convenience. In case of doubt or discrepancy, the German version (Datenschutzerklärung) is authoritative.

General information on data processing

Protecting your personal data is important to me. Personal data is processed on this website only to the extent necessary and in accordance with the General Data Protection Regulation (GDPR).

This privacy policy explains

• which data is collected,
• what it is used for, and
• what rights you have.

Controller

rethink.expert
Dr. Michael Mohaupt
Hohensteiner Pflaster 10
15344 Strausberg
Germany
Phone: +49 156 79 69 19 74
Email: info@rethink.expert

Changing cookie settings

You can adjust or withdraw your consent to cookies and similar technologies at any time. To do so, click the following link to reopen the settings box: Adjust cookie settings.

Data processing in the context of AI-supported systems & generative engine optimization (GEO)

This website and the content offered on it deal with the analysis, optimization and strategic use of generative AI systems (e.g. large language models) and with generative engine optimization (GEO).

Generative engine optimization (GEO) describes the structured preparation of content so that AI-based answer and generation systems can capture, classify and reproduce it correctly and in context. In connection with the use of this website, the following applies expressly:

• There is no automated decision-making within the meaning of Art. 22 GDPR.
• No personal data is used to train our own AI models.
• Personal data is not passed on to AI systems without review.

Analyses, evaluations and optimizations are carried out exclusively:

• at an aggregated level,
• with anonymized or pseudonymized data,
• or on the basis of voluntarily provided information (e.g. in the context of webinars).

The aim is to make content more understandable, more relevant and more precise in context – not to create individual profiles or to evaluate user behaviour on a personal basis.

Legal basis:

• Art. 6(1)(a) GDPR (consent)
• Art. 6(1)(f) GDPR (legitimate interest in optimizing the content and structure of the website)

Ethics & transparency in handling data and AI

The responsible handling of data and AI-supported systems is a central part of this website and the content offered.

Personal data is collected only where it is necessary for operating the website, for communication or for running webinars. It is not used for covert profiling, for manipulative purposes or for uncontrolled disclosure to third parties.

AI-based systems are used for analysing, structuring and optimizing content. The following applies:

• Transparency before automation
• Context before mere scale
• Personal data is not passed on to AI systems without review.
• There is no automated assessment of persons. Decisions with legal or economic effect are not made by AI.

The aim is to prepare knowledge in a comprehensible way and to provide orientation in dealing with generative technologies — not to maximize attention at any cost or to use data as an end in itself.

This ethical standard forms the basis for all content, formats and technical decisions in the context of generative engine optimization (GEO).

Hosting

This website is hosted externally. The personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data and other data generated via a website.

External hosting is used for the purpose of fulfilling contracts with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of this online offering by a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

The host will process your data only to the extent necessary to fulfil its service obligations and will follow the instructions regarding this data.

deploybase.eu
TwanIT (trading as “deploybase”)
Weeshuisstraat 47
8011 TZ Zwolle
Netherlands
KVK 71667415, VAT ID NL002404374B49
Data processing agreement (DPA)

For sending contact and registration forms and the emails they trigger, services of the following provider are also used:

Scaleway SAS
8 rue de la Ville l'Évêque
75008 Paris
France
(RCS Paris 433 115 904)
Data processing agreement (DPA)

(server location EU/France).

Data collection on this website

Cookies

This website uses so-called “cookies”. Cookies are small data packets and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

Cookies can be set directly by the operator (first-party cookies) or by third-party companies (third-party cookies). Third-party cookies enable certain services of third-party companies to be integrated into websites (e.g. cookies for analytics purposes).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. displaying videos). Other cookies can be used to analyse user behaviour or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested, or to optimize the website (e.g. cookies for audience measurement) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); consent can be withdrawn at any time.

You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

You can find out which cookies and services are used on this website in this privacy policy.

Cookie consent management

CCM19 is used to manage consent:

Papoo Software & Media GmbH
Auguststr. 4
53229 Bonn
Germany
Details on data processing on behalf (DPA)

In the cookie settings you can decide for yourself which cookie categories you consent to. Your choice can be changed or withdrawn at any time.

Legal basis:

• technically necessary cookies: Art. 6(1)(f) GDPR
• optional cookies (analytics / marketing): Art. 6(1)(a) GDPR

Server log files

When the website is accessed, the hosting provider automatically processes the following data:

• IP address (anonymized)
• date and time of access
• page accessed
• browser type and version
• operating system
• referrer URL

The processing serves to ensure stable and secure operation of the website. This data is not combined with other data sources.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

Contact form

The data you send via contact requests remains with me until you ask me to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your matter has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

This data is processed on the basis of Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests sent to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be withdrawn at any time.

If you contact me by email or phone, your request including all personal data arising from it (name, request) will be stored and processed by me for the purpose of handling your matter. I do not pass this data on without your consent.

The data you enter in the contact form remains with me until you ask me to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.

If you send me requests via the contact form, your details from the request form, including the contact details you provide there, will be stored by me for the purpose of processing the request and in case of follow-up questions. I do not pass this data on without your consent.

Analytics tools

Web analytics services can be used to collect and analyse data about how visitors use the website. This makes it possible to find out, among other things, when which pages were viewed and from which region. In addition, various log files (e.g. IP address, referrer, browsers and operating systems used) can be recorded, and it can be measured whether website visitors perform certain actions (e.g. clicks, purchases and the like).

These analytics tools are used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its web offering and its advertising. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

The following web analytics services are used:

Google Search Console

This website uses Google Search Console, a Google service for the technical analysis of the website's performance in Google Search, in particular for monitoring discoverability and identifying technical optimization potential:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Google Search Console is used to

• monitor the discoverability of the website,
• detect technical errors,
• and optimize how the website is shown in search results.

No cookies are set and no personal user profiles are created. The evaluation takes place exclusively at an aggregated level and relates to technical search and performance data. The collected data is not attributed to individual visitors of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical optimization and secure provision of the website)

Bing Webmaster Tools

This website uses Bing Webmaster Tools, a Microsoft service for the technical analysis of the website's performance in Bing Search:

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

Bing Webmaster Tools are used to:

• monitor the discoverability of the website in the Bing search engine,
• detect technical errors,
• and optimize how the website is shown in search results.

No cookies are set and no personal user profiles are created. The data provided is technical and aggregated in nature and does not allow any conclusions to be drawn about individual visitors to the website. The data is not attributed to individual users.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical optimization and secure provision of the website)

Microsoft may also process data in third countries. Appropriate safeguards pursuant to Art. 46 GDPR (e.g. standard contractual clauses) are in place. Information on data processing by Microsoft and on the data protection safeguards is available at: Microsoft Products and Services Data Protection Addendum

GoatCounter

This website uses the web analytics service GoatCounter to statistically evaluate the number of visitors and the use of the website. The operator is:

Martin Tournoij
Ireland
Email: support@goatcounter.com

GoatCounter does not set cookies and does not store any information on visitors' devices (neither in cookies nor in local or session storage). Since no information is stored on or read from users' devices, the service does not technically require consent under Section 25 TDDDG.

To distinguish repeat visits within a day, GoatCounter links the combination of website, IP address and browser identifier with a randomly generated identifier for a maximum of eight hours, exclusively in memory. Only this random identifier is stored in the database – not the IP address or the browser identifier itself.

Irrespective of this, the brief processing of the IP address constitutes processing of personal data within the meaning of the GDPR. The legal basis for this is Art. 6(1)(f) GDPR (legitimate interest in anonymized audience measurement without profiling). The data is processed on servers of Hetzner Online GmbH in Germany and Finland.

Further information on data protection at GoatCounter is available at: https://www.goatcounter.com/help/privacy

MicroAnalytics

This website uses the web analytics service microanalytics.io to evaluate visitors' usage behaviour anonymously and to continuously improve the content and technical performance of the website.

MicroAnalytics is a privacy-friendly analytics service that works without cookies and does not create user profiles across multiple websites. It is therefore used deliberately to ensure data-minimizing and transparent analysis.

The following data in particular is processed:

• pages viewed
• truncated or anonymized IP address
• referrer (previously visited page)
• device type and browser information (in aggregated form)

To distinguish repeat views within the same session, the script creates two entries in the browser's session storage (firstReferrer, visitorId). These are deleted automatically as soon as the browser session ends.

Personal identification of individual visitors is not possible. The processing serves:

• the statistical evaluation of website usage
• the optimization of content, structure and navigation
• ensuring technical stability and security

Since information is stored in the session storage of the device, the use of MicroAnalytics requires consent under Section 25 TDDDG. MicroAnalytics is therefore loaded only after you have given your consent via our cookie consent tool; without this consent, no processing takes place.

Legal basis: Processing is based on your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future (see “Changing cookie settings” above).

Further information on data protection at MicroAnalytics is available at: https://app.microanalytics.io/pages/privacy

Microsoft Clarity

This website uses Microsoft Clarity, a web analytics service of

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

Microsoft Clarity makes it possible to better understand user behaviour on the website. In particular, mouse movements, clicks, scrolling behaviour and page interactions are analysed. For this purpose, cookies are used and information about the use of this website is collected.

The following data in particular is processed:

• IP address (truncated / anonymized)
• device and browser information
• screen resolution
• referrer URL
• usage data (e.g. clicks, scroll depth, time on page)
• session recordings (without input of sensitive data)

Microsoft Clarity is configured so that no sensitive personal data (e.g. names, email addresses or form content) is recorded. Text input is masked automatically. Microsoft Clarity is loaded only after your express consent.

The processing serves:

• the analysis of user behaviour
• the optimization of usability
• the improvement of the website and its content

Legal basis: Microsoft Clarity is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Consent is obtained via the cookie consent tool and can be withdrawn at any time.

Transfer to third countries: The collected data may be transferred to the USA. Microsoft is certified under the EU–US Data Privacy Framework, which ensures an adequate level of data protection. Further information on data protection at Microsoft Clarity is available at: Microsoft Privacy Statement

Plugins and tools

YouTube with enhanced privacy

This website embeds videos from YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of the pages of this website on which YouTube is embedded, a connection to YouTube's servers is established. The YouTube server is informed which of my pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

I use YouTube in privacy-enhanced mode. According to YouTube, videos played in privacy-enhanced mode are not used to personalize browsing on YouTube. Ads shown in privacy-enhanced mode are not personalized either. No cookies are set in privacy-enhanced mode. Instead, however, so-called local storage elements are stored in the user's browser which, like cookies, contain personal data and can be used for recognition. Details on privacy-enhanced mode can be found here: YouTube Help: privacy-enhanced mode.

After a YouTube video has been started, further data processing operations may be triggered over which I have no influence.

YouTube is used in the interest of an appealing presentation of the online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Further information on data protection at YouTube can be found in its privacy policy at: https://policies.google.com/privacy?hl=en.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: Data Privacy Framework – participant entry.

E-commerce and payments

Processing of customer and contract data

I collect, process and use personal customer and contract data to establish, define the content of and amend my contractual relationships. I collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill for it. The legal basis for this is Art. 6(1)(b) GDPR.

The collected customer data is deleted after the order has been completed or the business relationship has ended and any applicable statutory retention periods have expired. Statutory retention periods remain unaffected.

Payment services

I integrate payment services of third-party companies on my website. When you make a purchase, your payment data (e.g. name, payment amount, bank details, credit card number) is processed by the payment service provider for the purpose of processing the payment. The respective contractual and data protection provisions of the respective providers apply to these transactions. Payment service providers are used on the basis of Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for the data processing; consent can be withdrawn at any time with effect for the future.

I use the following payment services / payment service providers on this website: none

Audio and video conferences

Data processing

Among other things, I use online conferencing tools to communicate with my customers. The specific tools I use are listed below. If you communicate with me via video or audio conference over the internet, your personal data is collected and processed by me and by the provider of the respective conferencing tool.

The conferencing tools collect all data that you provide/use to use the tools (email address and/or your phone number). The conferencing tools also process the duration of the conference, the start and end (time) of participation in the conference, the number of participants and other “context information” related to the communication process (metadata).

Furthermore, the tool provider processes all technical data required to handle the online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker, and the type of connection.

If content is exchanged, uploaded or otherwise provided within the tool, it is also stored on the tool provider's servers. Such content includes in particular cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that I do not have full influence over the data processing operations of the tools used. My options depend largely on the corporate policy of the respective provider. Further information on data processing by the conferencing tools can be found in the privacy policies of the tools used, which I have listed below this text.

Purpose and legal bases

The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to my customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with me or my company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Where consent has been requested, the tools concerned are used on the basis of this consent; consent can be withdrawn at any time with effect for the future.

Storage period

The data collected directly by me via the video and conferencing tools is deleted from my systems as soon as you ask me to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

I have no influence on the storage period of your data that is stored by the operators of the conferencing tools for their own purposes. For details, please contact the operators of the conferencing tools directly.

Conferencing tools used

Zoom is used to run the webinars:

Zoom Communications, Inc.
55 Almaden Blvd.
San Jose, CA 95113
USA

Further privacy information from Zoom. A transfer of data to third countries (e.g. the USA) cannot be ruled out.

Storage period

Unless a more specific storage period has been stated in this privacy policy, your personal data will remain with me until the purpose for the data processing no longer applies. If you assert a justified request for deletion or withdraw consent to data processing, your data will be deleted unless there are other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place once these reasons no longer apply.

Your rights

You have the right at any time to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to me as the site operator, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the browser's address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL/TLS encryption is activated, the data you transmit to me cannot be read by third parties.

Currency of this policy

This privacy policy is currently valid and will be adapted when the website or legal requirements change.