Privacy Policy

SK Services GmbH, represented by its Managing Directors Stefan Schrott and Gürkan Kondu, Im Steinig 1, 76307 Karlsbad, as the controller within the meaning of Art. 4 No. 7 GDPR, takes the protection of your personal data very seriously and strictly complies with the applicable data protection laws.

 

§ 1 Controller and Data Protection Officer

The controller responsible for data processing on this website within the meaning of Art. 4 No. 7 GDPR is:

SK Services GmbH
Im Steinig 1
76307 Karlsbad
Germany

Phone: +49 7202 27 42 671
E-mail: info@sk-serv.de

Represented by the Managing Directors Stefan Schrott and Gürkan Kondu

You can contact our Data Protection Officer at datenschutz@sk-serv.de or via our postal address using the reference “Data Protection Officer”.

 

§ 2 Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

Withdrawal of consent: You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). You can change your cookie settings at any time via the cookie icon located in the lower-left corner of every page.

Right to object: If we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

 

§ 3 Hosting and Server Log Files

We host our website with:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Germany

We have concluded a Data Processing Agreement (Art. 28 GDPR) with our hosting provider.

When you visit our website, the server automatically processes the following data transmitted by your browser:

  • IP address
  • Date and time of access
  • Requested page or file
  • HTTP status code and amount of data transferred
  • Referrer URL
  • Browser type and version
  • Operating system

We process this data to provide the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR.

 

§ 4 SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize this by the “https://” prefix and the padlock symbol in your browser’s address bar.

 

§ 5 Cookies and Consent Management (Borlabs Cookie)

We use cookies and similar technologies. Technically necessary cookies are used on the basis of Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. All other cookies and services are only used with your consent on the basis of Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

We manage your consent using the Borlabs Cookie plugin (Borlabs GmbH, Hamburg, Germany). It runs on our own server and no data is transmitted to Borlabs. Borlabs stores your selection in the “borlabs-cookie” cookie for one year. To document consent, we store a random ID, the date, and your selection. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.

An overview of all cookies and services used can be found in the cookie settings accessible via the cookie icon in the lower-left corner.

 

§ 6 Contacting Us

By e-mail or phone: If you contact us, we process the information you provide, including your name, contact details, and inquiry, for the purpose of handling your request.

Via the contact form (page “Dialogue”): The form uses the WordPress plugin WPForms. Your entries are transmitted to us by e-mail.

The legal basis is Art. 6(1)(b) GDPR if your request is related to a contract; otherwise, Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to your inquiry.

We delete the data as soon as your request has been fully processed and no statutory retention obligations apply.

 

§ 7 Google reCAPTCHA

To protect our contact form against spam and automated access, we use Google reCAPTCHA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA checks whether data entry is performed by a human. For this purpose, information such as your IP address, browser and device information, mouse movements, and time spent on the page may be transmitted to Google. Google also uses cookies such as “_GRECAPTCHA”.

reCAPTCHA is only loaded after you have provided consent through our cookie banner. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Without consent, you may always contact us by e-mail or phone.

Data may be transferred to the United States. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

Further information: https://policies.google.com/privacy

 

§ 8 SAP Operations Check (Zite / Fillout)

For our interactive SAP Operations Check, we integrate an application provided by Zite. The provider is Fillout, Inc., USA.

If you load the check after providing your consent, your IP address, device and browser information, as well as your responses, will be transmitted to and processed by Fillout. If you voluntarily provide contact details such as your name, company, or e-mail address during the check, we use this information to provide you with your results and, if applicable, to contact you.

The check is only loaded after you have given your consent via the notice displayed on the page. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. We have concluded a Data Processing Agreement with Fillout.

Data is transferred to the United States. Such transfers are based on the EU Standard Contractual Clauses.

We store responses submitted during the check until you withdraw your consent.

Further information: https://www.fillout.com/privacy

 

§ 9 Job Postings (Zoho Recruit)

We display our open job positions on the careers page through Zoho Recruit. The provider is Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands.

When the job listings are loaded, your IP address and technical browser data are transmitted to Zoho. The data is processed in Zoho’s EU data center (zohorecruit.eu).

The job listings are only loaded after you have given your consent through our cookie banner. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

If you click on a specific job posting, you will be redirected to Zoho Recruit’s careers page. Zoho’s Privacy Policy also applies there: https://www.zoho.com/privacy.html

 

§ 10 Applications

If you apply for a position with us, either via e-mail to karriere@sk-serv.de or through Zoho Recruit, we process your application documents for the purpose of deciding whether to establish an employment relationship. The legal basis is Section 26 BDSG and Art. 6(1)(b) GDPR.

Applications submitted via Zoho Recruit are stored there on our behalf. We have concluded a Data Processing Agreement with Zoho.

If no employment relationship is established, your data will be deleted no later than six months after completion of the recruitment process. This does not apply if you have consented to a longer retention period for future vacancies (Art. 6(1)(a) GDPR).

 

§ 11 Web Analytics with Matomo

We use the web analytics tool Matomo to evaluate and improve the use of our website. The provider is InnoCraft Ltd., 7 Waterloo Quay PO625, 6140 Wellington, New Zealand. The data is stored on servers located within the EU. We have concluded a Data Processing Agreement with InnoCraft (Art. 28 GDPR).

The following data may be processed:

  • Truncated IP address
  • Pages visited
  • Time spent on the website
  • Referrer information
  • Device and browser information
  • Campaign parameters, for example when you access our website via a QR code

Matomo uses cookies such as “_pk_id” and “_pk_ses”. Your IP address is shortened by 2 bytes before being stored.

Matomo is activated only with your consent. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Further information: https://matomo.org/matomo-cloud-privacy-policy/

 

§ 12 Security (Wordfence)

To protect our website against attacks, we use the Wordfence security plugin. The provider is Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA.

Wordfence checks access requests for malicious patterns. For this purpose, IP addresses and request data are processed and, where necessary, compared against Defiant’s threat intelligence database. For logged-in users, Wordfence sets technically necessary cookies.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the security of our website. Transfers to the United States are based on EU Standard Contractual Clauses.

 

§ 13 Multilingual Website (WPML)

We use the WPML plugin to provide German and English versions of our website. WPML stores your language preference in a cookie (“wp-wpml_current_language”). This cookie is technically necessary and no data is transmitted to the provider. The legal basis is Section 25(2) No. 2 TDDDG and Art. 6(1)(f) GDPR.

 

§ 14 Digital Business Cards

We provide digital business cards for our employees via QR codes and links using the Vizito plugin, which runs on our own server.

When a business card is accessed, we anonymously record how often it is viewed and which actions are used, such as “Save Contact”. Bots are filtered out. No personal reference is established and no cookies are set.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to evaluate the use of our business cards.

 

§ 15 Google Maps

On our contact page, we integrate a map provided by Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded after you have consented to its display. In this context, your IP address and technical browser data are transmitted to Google. Google may also transfer data to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You may withdraw your consent at any time through the cookie settings.

Further information:
https://policies.google.com/privacy

 

§ 16 Links to Other Websites

Our website contains links to external services, such as Google Maps for route planning, certification bodies, or social media platforms. Data is only transmitted once you click on a link. The privacy policy of the respective provider applies to the linked website.

 

§ 17 Data Retention Period

Unless otherwise stated in this Privacy Policy, we store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. In particular, retention periods of 6 or 10 years under the German Commercial Code (HGB) and Fiscal Code (AO) may apply.

 

§ 18 Amendments

We will update this Privacy Policy whenever our website or the applicable legal requirements change. The version published on this page shall apply in each case.

 
November 2026