Cookie policy

Version: 1.0
Last updated: September 2026

1. Who this Cookie Data Protection Statement applies to

This Cookie Data Protection Statement, hereinafter “the Statement”, applies to all visitors and users of Thinkproject’s website (the “Website”).

2. Who is responsible for processing your data (the Controller)

The controller responsible for the use of cookies and similar technologies on this Website is:

Thinkproject Holding GmbH (Gisela-Stein-Strasse 6, 81671 Munich, Germany, E-mail: info@thinkproject.com).

3. What personal data we collect through cookies

Depending on the type of cookies used, we may collect the following categories of personal data:

Device and browser information
IP address
User identifiers (e.g. cookie IDs)
Website usage data (e.g. pages visited, interactions)
Preferences and settings (e.g. language, consent choices)

4. Where the personal data comes from

The data collected through cookies is obtained:

Directly from your device when you visit our Website
Through your interactions with our Website
From third-party providers (e.g. analytics or advertising partners), where applicable

We may link information collected via cookies with personal data you provide (e.g. via forms) to measure the effectiveness of our marketing activities.

5. Why we use cookies (the purpose of processing)

We use cookies and similar technologies for the following purposes:

To ensure the technical functioning and security of the Website
To remember your preferences and settings
To analyse how the Website is used and improve performance
To provide personalised content and advertisements, where applicable
To measure the effectiveness of marketing activities

Further details are provided in the cookie categories and listed below*.

6. Legal basis for processing

We process personal data collected via cookies based on the following legal grounds:

Strictly necessary cookies: processed based on our legitimate interest to ensure the proper functioning and security of the Website.
All other cookies (e.g. functional, analytics, marketing): processed based on your consent.

You can give, refuse, or withdraw your consent at any time via the cookie settings.

7. Who may receive your data (Recipients)

Your personal data may be shared with:

Thinkproject group companies
Service providers supporting the operation of the Website (e.g. hosting providers, IT service providers)
Third-party providers (e.g. to support functionalities such as analytics, marketing, and embedded content), where applicable

Where third-party cookies are used, these providers may act as independent controllers and process your data for their own purposes in accordance with their respective privacy policies.

For more information, please refer to the cookies table below and the respective third-party privacy policies.

8. International data transfers

When we transfer personal information internationally within Thinkproject group or with our service and third-party providers, we take appropriate safeguards to ensure that such transfers comply with applicable data protection and privacy laws and that personal information remains adequately protected. These measures may include, as appropriate:

transferring personal information to countries that are recognized as providing an adequate level of protection under applicable law;
implementing contractual safeguards designed to protect personal information, such as data transfer agreements and/or standard contractual clauses (SCCs);
applying internal policies, technical measures, and organizational controls to ensure an adequate level of data protection across our group; and
relying on other lawful transfer mechanisms or exceptions permitted under applicable privacy or data protection legislation.

Where required in other cases, the parties shall implement a valid transfer mechanism, including contractual arrangements or other recognised mechanism, prior to such transfer and, where applicable, assess whether supplementary measures are necessary to ensure an adequate level of protection.

9. How long we store your data (Retention)

Cookies are stored for different periods depending on their purpose:

Session cookies are deleted when you close your browser
Persistent cookies remain on your device for a defined period or until deleted

Your cookie preferences are stored for a limited period (1 year), after which you may be asked to renew your consent.

Detailed retention periods for each cookie are provided in the cookie table below*.

10. How you can manage your cookie preferences

You can manage your cookie preferences at any time via the cookie settings available on our Website.

You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

In addition, most browsers allow you to control cookies through their settings (e.g. blocking or deleting cookies). Please note that disabling certain cookies may affect the functionality of the Website.

11. Technical and Organisational Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These measures include, among others:

Access controls
Encryption where appropriate
Secure hosting environments
Regular monitoring and updates

12. Your rights

Under applicable data protection law, you have the right to:

Access your personal data
Request rectification or deletion
Restrict or object to processing
Withdraw your consent at any time

If you have given us your consent, you can withdraw it at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Processing that took place before the revocation is not affected.

13. Contact our Data Protection Officer

You may contact our Data Protection Officer using the contact details below for any questions or requests relating to data protection:

Group Data Protection Officer

Address: Gisela-Stein-Strasse 6, 81671 München, Germany

E-mail: privacy@thinkproject.com .

14. The competent supervisory authority for Thinkproject companies

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority in country of residence or with the authority responsible for us as the controller. A list of supervisory authorities (for the non-public sector) with addresses can be found at
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en or
https://globalprivacyassembly.org/participation-in-the-assembly/members-online/#gtoi

15. Automated decision-making and profiling

No automated decision-making within the meaning of applicable data protection legislation is carried out based solely on the use of cookies and similar technologies on this Website.

While some cookies may be used to analyse user behaviour or support personalised content and advertising, this does not result in decisions that produce legal effects concerning you or similarly significantly affect you.

16. Is there an obligation to provide data?

The use of strictly necessary cookies is required to ensure the proper functioning, security, and stability of the Website. Without these cookies, certain parts of the Website may not function correctly.

All other cookies (such as functional, analytics, or marketing cookies) are used on the basis of your consent and are therefore entirely voluntary. You are free to accept or refuse these cookies at any time via the cookie settings.

17. Changes to this Cookie Data Protection Statement

We may update this Cookie Data Protection Statement from time to time to ensure that it remains accurate and reflects changes in our use of cookies and similar technologies, for example when introducing new services or functionalities.

Any updates will be published on this Website.

Disclaimer: The cookie information below is automatically generated and maintained by our Cookie Consent Management Platform from One Trust based on periodic scans of our Website. Consequently, the content may change over time to reflect updated information.