Legal
Privacy Policy
Last updated July 14, 2026
1. Who is responsible for your data
The controller for the processing described here, within the meaning of Art. 4(7) GDPR, is:
SkillSynergy
Mohamed Handaoui
Osdorfer Str. 42
12207 Berlin
Germany
Email: contact@skillsynergy.net
Phone: +49 151 525 54041
We have not appointed a Data Protection Officer, as we are not required to do so under Art. 37 GDPR.
2. What we collect, and why
We only process personal data where we have a legal basis under Art. 6(1) GDPR.
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Server logs: IP address, user agent, requested URL, timestamp | Delivering the site and defending it against abuse | Art. 6(1)(f), our legitimate interest in a functioning, secure site | Held briefly by our hosting provider. We keep no logs of our own. |
| Country, derived from your IP address at the edge | Showing prices in your currency | Art. 6(1)(f), our legitimate interest in showing relevant prices. The IP address itself is neither stored nor logged by us. | Not stored |
| Contact form: name, email, subject, message | Answering your enquiry. Your message is stored in our database until we have dealt with it. | Art. 6(1)(a) consent, and Art. 6(1)(b) where your enquiry concerns a contract | Deleted automatically after 24 months |
| Booking form: name, email, course, track, preferred time | Arranging your free consultation. Stored in our database until we have arranged it. | Art. 6(1)(a) consent, and Art. 6(1)(b) steps prior to a contract | Deleted automatically after 24 months |
| A salted hash of your IP address, when you submit a form | Limiting repeated submissions from the same source (spam protection). The raw IP address is never stored, only a keyed hash of it. | Art. 6(1)(f), our legitimate interest in preventing abuse of our forms | Deleted automatically after 24 months |
| Campaign parameters (utm_) from the link you arrived through, and the referring site, submitted together with a form | Knowing which advertisement or link brought an enquiry to us. Nothing is stored on your device for this, and no tracking service is involved. | Art. 6(1)(f), our legitimate interest in measuring our advertising | Stored with the enquiry, deleted with it after 24 months |
| Your cookie choice | Remembering what you agreed to | Art. 6(1)(c), our obligation to honour your choice | Stored in your browser until you clear it |
| Error reports, only if you enable them: IP address, browser, stack trace | Finding and fixing crashes | Art. 6(1)(a) consent | 90 days |
You do not have to provide any of this data. If you do not fill in a form, you simply cannot use that form.
3. Cookies and similar technologies
We set no cookies for advertising, tracking or profiling, and we do not use Google Analytics or any comparable product.
Strictly necessary storage is set without consent because it exists only to honour a choice you made: a single entry in your browser's local storage recording which categories you agreed to. It is never sent to our servers.
Everything else is off until you switch it on. Error reporting loads only after you consent, in line with §25(1) TDDDG. You can change or withdraw your choice at any time via Cookie settings in the footer, with effect for the future.
4. Who else sees your data
We do not sell your personal data, and we never will. We share it only with the processors we need to run the service, each under a contract meeting Art. 28 GDPR.
- Vercel Inc. (United States) hosts the site. Requests are served from EU regions. Transfers rely on Standard Contractual Clauses and Vercel's EU-US Data Privacy Framework certification.
- Functional Software, Inc. (Sentry) receives error reports, only if you consent. Data is stored in Sentry's EU region (
de.sentry.io). - Neon, Inc. (a Databricks company) provides the database that stores the contact and booking details you submit. The database is hosted in the European Union (Frankfurt), and Neon acts as our processor under a data processing agreement.
5. Transfers outside the EU
Where a processor is established outside the European Economic Area, or may access data from outside it, we rely on the European Commission's Standard Contractual Clauses under Art. 46(2)(c) GDPR, on an adequacy decision under Art. 45, or on the EU-US Data Privacy Framework. You may request a copy of the relevant safeguards from us at any time.
6. Your rights
Under the GDPR you have the right to:
- obtain confirmation of whether we process your data, and a copy of it (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- have processing restricted (Art. 18);
- receive your data in a portable, machine-readable format (Art. 20);
- object to processing based on our legitimate interests (Art. 21); and
- withdraw any consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3)).
To exercise any of these, email contact@skillsynergy.net. We answer within one month.
7. Complaints
If you believe we are handling your data unlawfully, you may lodge a complaint with a supervisory authority, in particular in the Member State of your residence or workplace (Art. 77 GDPR). The authority competent for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
8. Security
The site is served exclusively over TLS. We apply technical and organisational measures appropriate to the risk, as required by Art. 32 GDPR, and we keep the personal data we hold to the minimum the purpose requires.
9. Changes to this policy
We update this policy when our processing changes. The current version always carries the date shown at the top of this page.
Questions about this policy?
Reach us anytime at contact@skillsynergy.net.