Legal
Privacy Policy
Last updated: 9 October 2026
This policy explains what personal data SkillHack collects through this website, why, and what you can do about it. It is written to meet the information duties in Articles 13 and 14 of the General Data Protection Regulation (GDPR).
1. Who is responsible
The controller for the processing described here is:
Ekaterina Golubina
Brandenburgische Strasse 53
10707 Berlin, Germany
Email: info [at] skillhack.de
No data protection officer has been appointed. SkillHack does not meet the thresholds in Article 37 GDPR or § 38 BDSG that would require one.
2. What this website collects
2.1 The “Request a call” form
When you submit the contact form, the following is collected:
| Field | Required | Why |
|---|---|---|
| Full name | Yes | To address you correctly in the reply. |
| Work email | Yes | To reply to you. Without it there is no way to answer. |
| Company | No | To understand the context before the call. |
| Team size | No | To judge whether and how we can help. |
| What brings you here | No | To prepare for the conversation. |
Legal basis: Article 6(1)(b) GDPR. Processing is necessary to take steps at your request before entering into a contract. For enquiries that are not aimed at a contract, the basis is Article 6(1)(f) GDPR, our legitimate interest in answering messages sent to us.
Please do not send special category data (Article 9 GDPR) or confidential information about third parties through this form.
2.2 Server log data
Our hosting provider automatically records technical data each time the site is accessed: IP address, date and time of the request, the page requested, the referring page, browser and operating system. This is necessary to deliver the site and to detect and defend against attacks.
Legal basis: Article 6(1)(f) GDPR, our legitimate interest in operating a secure and functioning website.
2.3 Spam protection
The form includes a hidden field that is invisible to people and usually filled in by automated bots. Submissions that complete it are discarded. No personal data is used for this.
3. Cookies, tracking and analytics
This website sets no cookies. There is no analytics, no tracking pixel, no advertising network and no social media plug-in. Nothing you do on this site is profiled, and no consent banner is required because there is nothing to consent to.
4. Who else processes your data
4.1 Hosting and form handling — STRATO
This site is hosted by STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. STRATO stores the site, serves it to visitors, records the log data described above, and handles the sending of the email generated by the contact form.
STRATO acts as a processor under Article 28 GDPR on the basis of a data processing agreement. STRATO’s servers are located in Germany, so no personal data from this website is transferred outside the European Union. You can read STRATO’s own privacy notice at strato.de/datenschutz.
Form submissions are not stored in a database on this website. They are sent directly to our mailbox as email and are kept there, as described in section 5.
4.2 Fonts
The typefaces used on this site are served from this website’s own servers. No request is made to Google Fonts or any other third-party font service, and no data about you is transmitted to one.
4.3 Email
When we reply to you, your message and our answer are stored in our email system. Email in transit is not fully secure; please do not send sensitive information by email.
5. How long data is kept
- Form submissions: kept for as long as the enquiry is live, and for up to 12 months afterwards so we can pick up a conversation that resumes. Deleted after that unless a contract has started.
- Enquiries that become client work: kept for the duration of the engagement and then for the statutory retention periods under German commercial and tax law, which are six or ten years depending on the document (§ 257 HGB, § 147 AO).
- Server logs: kept by the hosting provider for a short period, normally no longer than 30 days, and then deleted or anonymised.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and receive a copy (Article 15).
- Rectification of inaccurate or incomplete data (Article 16).
- Erasure of your data, where one of the grounds in Article 17 applies.
- Restriction of processing in the circumstances set out in Article 18.
- Data portability — to receive your data in a machine-readable format (Article 20).
- Object to processing based on legitimate interest, on grounds relating to your particular situation (Article 21).
- Withdraw consent at any time, where processing is based on consent, without affecting processing carried out before the withdrawal.
To exercise any of these, email info [at] skillhack.de. We will respond within one month.
7. Complaints
If you believe your data has been handled unlawfully, you can complain to a supervisory authority, in particular in the EU member state where you live, work, or where the alleged infringement took place.
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
datenschutz-berlin.de
8. Is providing data required?
No. Using this website requires no personal data. Name and work email are required only if you choose to submit the contact form, and only so that we can reply. There is no automated decision-making or profiling within the meaning of Article 22 GDPR.
9. Changes to this policy
If the site changes in a way that affects personal data — a new tool, analytics, a different host — this policy is updated and the date at the top changes with it.