Privacy policy

With the following information, we would like to give you an overview of how we process your personal data when you visit our website or use our online services (for example appointment reservations). Personal data is any information relating to an identified or identifiable natural person.

Your data is processed exclusively within the framework of statutory provisions, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG) or related law.

1. Controller

The controller within the meaning of the GDPR is:

Sergej Kalinin / SK DIGITAL WORKS
Auf der Aeumes 3
58636, Iserlohn
Phone: +49 15565 929457
Email: eingang@sk-digital-works.de

Privacy requests

For questions about data protection or to exercise your rights, an informal message to the contact details listed above is sufficient.

2. Hosting and server log files

This website is hosted by the following provider:

IONOS

When our website is accessed, information is automatically transmitted by the browser you use to the server of our hosting provider and temporarily stored in server log files. In particular, the following data may be collected:

  • IP address of the requesting device
  • Date and time of access
  • Accessed page/file and transferred data volume
  • Website from which access takes place (referrer URL)
  • Browser, operating system and internet provider used

The processing of this data is technically necessary to display our website to you, to ensure the stability and security of operation and to analyze disruptions. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and stable operation of the website).

The log files are deleted after no more than 7 days unless they are needed longer to clarify a security incident or analyze errors.

3. Use of cookies and similar technologies

Our website currently uses only technically necessary cookies that are required for operating the site and using certain functions (for example form protection or possible session management). Without these cookies, the website cannot function correctly.

For technically necessary cookies, processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in a functional online offering) or Section 25 para. 2 no. 2 TDDDG.

We currently do not use tracking cookies, analytics tools or marketing cookies. If this changes in the future, we will inform you and - where required - obtain your consent in advance. At the moment, only website visits are counted, without your data.

4. Contact forms

If you contact us via our website, we process the data you enter in the form. This usually includes:

  • First and last name
  • Email address
  • Phone number
  • Your message

The processing is carried out to handle your inquiry, manage appointments and perform the service contract concluded with you (Art. 6 para. 1 lit. b GDPR).

The data is stored in our appointment/customer system. If you select in the form that your data may be kept for future inquiries, the additional storage is based on your consent (Art. 6 para. 1 lit. a GDPR), which you may withdraw at any time with effect for the future (see the section Your rights).

4.2 General contact inquiries

If you contact us by email or via a contact form, we process your information (for example name, email address, message content) to handle your inquiry and in case of follow-up questions. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual steps or performance of a contract) or Art. 6 para. 1 lit. f GDPR (legitimate interest in proper communication).

Your information is deleted once your inquiry has been finally processed and there are no statutory retention obligations preventing deletion.

5. Legal bases at a glance

Depending on the type of data processing, we rely on the following legal bases:

  • Art. 6 para. 1 lit. a GDPR (consent): If you have given us consent to process your data for specific purposes.
  • Art. 6 para. 1 lit. b GDPR (contract / pre-contractual measures): For the processing of personal data required to perform a contract or carry out pre-contractual measures.
  • Art. 6 para. 1 lit. c GDPR (legal obligation): If we are subject to legal obligations (for example commercial and tax retention obligations).
  • Art. 6 para. 1 lit. f GDPR (legitimate interest): Where processing is necessary to safeguard our legitimate interests and your interests or fundamental rights do not override them (for example secure operation of the website, defense against attacks, assertion or defense of legal claims).

6. Recipients of data / processors

Within our company, only those persons who need your data to perform the respective tasks receive access to it (for example appointment management, customer communication).

In addition, we use processors as part of our activities, for example:

  • Hosting service providers and operators of server infrastructure
  • Email providers
  • Payment service provider (Stripe) for processing the monthly payments

We have concluded agreements with all processors in accordance with Art. 28 GDPR, obligating them to treat your data confidentially and securely. Your data is not passed on to third parties for their own purposes (for example advertising).

7. Data transfers to third countries

Personal data is generally processed within the EU or the European Economic Area (EEA). In the course of payment processing via Stripe, personal data may be transferred to Stripe, Inc. in the USA. Such a transfer only takes place on the basis of appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular on the basis of EU standard contractual clauses or an adequacy decision of the European Commission (EU-US Data Privacy Framework).

8. Retention period

Unless a specific retention period is stated in this privacy policy, we store personal data only for as long as necessary for the respective purposes or as long as we are legally required to do so (for example commercial and tax retention periods of up to 10 years).

Afterwards, the data is deleted, blocked or anonymized in accordance with legal requirements.

9. Your rights

Within the framework of legal requirements, you have the right at any time to:

  • Access (Art. 15 GDPR) to the personal data processed by us,
  • Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR),
  • Deletion of your personal data (Art. 17 GDPR), unless statutory obligations prevent this,
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Objection to the processing of your data where it is based on Art. 6 para. 1 lit. e or f GDPR (Art. 21 GDPR),
  • Withdrawal of consent granted with effect for the future (Art. 7 para. 3 GDPR).

To exercise your rights, an informal message to the contact details listed under Controller is sufficient.

Right to lodge a complaint with the supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data if you believe that the processing violates data protection law (Art. 77 GDPR). The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de

10. Obligation to provide data

The provision of personal data is generally neither legally nor contractually required. For certain functions (for example contacting us), however, it is necessary that you provide certain information. Without this information, we cannot provide the corresponding services.

11. Data security

We take appropriate technical and organizational measures to protect your data against loss, manipulation, unauthorized access or other misuse. These include, among others:

  • Encryption of the website using TLS/SSL (https)
  • Restriction of access to personal data to authorized persons
  • Regular backup and maintenance of systems

Please note that data transmission over the internet (for example communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

12. Customer account and contract processing

To use our website builder and to conclude a paid subscription, you create a customer account. In doing so, we process in particular your registration and contact data (e.g. name or company, email address, an encrypted stored password) as well as the contract and usage data arising in the course of the order (e.g. selected package, desired domain, order and subscription status).

The processing takes place to establish, perform and manage the contractual relationship (Art. 6(1)(b) GDPR) and to comply with statutory retention obligations (Art. 6(1)(c) GDPR). The data is deleted as soon as it is no longer required for these purposes and no statutory retention obligations prevent this.

13. Payment processing via Stripe

The monthly payments are processed via the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). When you make a purchase, the data required for payment processing (e.g. name, email address, billing and payment information) is transmitted to Stripe and processed there.

The legal basis is Art. 6(1)(b) GDPR (performance of the contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and efficient payment processing). Your full payment details (e.g. card data) are processed exclusively by Stripe; we ourselves do not receive full card data. A possible transfer to the USA is described in the section on data transfer to third countries. Further information can be found in Stripe's privacy policy.

14. Current status and changes to this privacy policy

This privacy policy is currently valid and was last updated 08/2026.

Due to the further development of our website or changed legal or official requirements, it may become necessary to adapt this privacy policy. The current version can always be found on this website under the Privacy menu item.