Privacy policy

1. Controller

The controller responsible for data processing on this website is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. Overview of the data we process

We process personal data only where there is a legal basis for doing so, and only to the extent necessary. In practice this concerns:

• Server log data that your browser transmits automatically when you visit the site.
• Contact data that you actively provide via our contact form, by email or by phone.
• Newsletter data if you subscribe to our newsletter.
• Cookies and similar technologies, to the extent that they are technically necessary or that you have consented to them.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

3. Legal bases

Depending on the purpose, we process personal data on the basis of:

• Art. 6 (1) (a) GDPR – your consent, for example for optional cookies or the newsletter.
• Art. 6 (1) (b) GDPR – performance of a contract or pre-contractual measures, for example when you request a training proposal.
• Art. 6 (1) (c) GDPR – compliance with a legal obligation, for example commercial and tax retention periods.
• Art. 6 (1) (f) GDPR – our legitimate interest in a secure, functional and appropriately presented website.

4. Hosting and server log files

This website is hosted by an external service provider within the European Union, acting as our processor under a data processing agreement pursuant to Art. 28 GDPR.

Each time the site is accessed, the hosting provider automatically records information that your browser transmits, in so-called server log files:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing device
• Date and time of the server request
• IP address

This data is not merged with other data sources. It is processed on the basis of Art. 6 (1) (f) GDPR, for the purpose of a technically error-free presentation and the security of our website, and is deleted or anonymised after a short period.

5. SSL / TLS encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix in your browser address bar and the lock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.

6. Cookies and consent management

Our website uses cookies. Cookies are small text files stored on your device that do not cause any damage.

• Technically necessary cookies are required for the basic operation of the site (for example to store your cookie preferences). They are set on the basis of Art. 6 (1) (f) GDPR and section 25 (2) TDDDG.
• Optional cookies – for example for statistics or embedded content – are only set once you have given your consent via our consent banner, on the basis of Art. 6 (1) (a) GDPR and section 25 (1) TDDDG.

You can withdraw your consent at any time with effect for the future via the cookie settings link on our website, or by deleting cookies in your browser. You can also configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases. Disabling cookies may limit the functionality of this website.

7. Contact form, email and telephone

If you send us an inquiry via our contact form, by email or by telephone, we process the details you provide – typically your name, company, email address, phone number and the content of your message – in order to process the inquiry and any follow-up questions.

The legal basis is Art. 6 (1) (b) GDPR where your request relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR, based on our legitimate interest in responding effectively to inquiries addressed to us. Where you have given consent, the legal basis is Art. 6 (1) (a) GDPR.

We retain this data until you ask us to delete it, until your consent is withdrawn, or until the purpose for storing it no longer applies. Mandatory statutory retention periods – in particular under commercial and tax law – remain unaffected.

If the contact form is provided by an external form service, that provider acts as our processor on the basis of a data processing agreement pursuant to Art. 28 GDPR.

8. Newsletter

If you subscribe to our newsletter, we use the email address you provide, and any optional details, to send you information about our training offering. The subscription uses a double opt-in procedure: you will receive an email asking you to confirm your subscription.

The legal basis is your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, for example via the unsubscribe link in every newsletter. Your data will then be deleted from our newsletter distribution list. Data stored for other purposes is not affected.

Newsletter dispatch may be carried out by an email service provider acting as our processor on the basis of a data processing agreement pursuant to Art. 28 GDPR.

9. Web analytics

To improve our website we may use a web analytics service that measures how visitors use the site. Analytics is only activated if you have given your consent via the cookie banner (Art. 6 (1) (a) GDPR). IP addresses are shortened or anonymised where the service supports it, and you can withdraw your consent at any time via the cookie settings.

10. Fonts, maps and embedded content

Where our pages include web fonts, maps or embedded videos from third-party providers, your browser may establish a connection to that provider's servers so that the content can be delivered. This may involve the transmission of your IP address. We only load such external content after you have consented via the cookie banner, or we host the resources locally so that no connection to third-party servers is established.

11. Recipients and transfers to third countries

Personal data is only disclosed to third parties where this is necessary, for example to our hosting provider, email service provider or a form service, each acting as a processor. Where a service provider processes data outside the European Economic Area, we ensure an appropriate level of protection through EU standard contractual clauses or another valid transfer mechanism under Chapter V GDPR.

12. Storage duration

Unless a more specific storage period is stated in this policy, we store personal data only for as long as necessary for the purpose of processing. When you request deletion or withdraw your consent, your data is deleted unless we have a legally permitted reason to retain it – in particular statutory retention periods under commercial and tax law, which are generally six or ten years.

13. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Access (Art. 15 GDPR) – to be informed which data we process about you.
• Rectification (Art. 16 GDPR) – to have inaccurate data corrected.
• Erasure (Art. 17 GDPR) – to have your data deleted, subject to statutory retention obligations.
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR) – to receive your data in a machine-readable format.
• Objection (Art. 21 GDPR) – to object to processing based on legitimate interests.
• Withdrawal of consent (Art. 7 (3) GDPR) – at any time, with effect for the future.

To exercise any of these rights, an informal message to jsteinz@skillday.com is sufficient.

14. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. For our registered office this is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.

15. Changes to this privacy policy

We review this privacy policy regularly and update it when our website or the legal situation changes. The current version always applies and can be accessed at any time on this page.

Last updated: August 2026