Privacy Policy
Protecting your personal data matters to us. This policy explains which data we process on skillduck.com, for which purposes, and which rights you have.
⚠️ Note: this draft will be legally reviewed and finalized before launch.
Controller
Innovationszentrum für Industrie 4.0 GmbH & Co. KG
info@skillduck.com
Hosting
This website is hosted by Vercel Inc. and served from Frankfurt, Germany (region fra1). A data processing agreement is in place with Vercel. When you visit the site, Vercel processes technically necessary data (IP address, timestamp, requested resource, user agent) in server log files based on Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation).
Website content (e.g. blog posts, media) and form submissions are stored in a Postgres database at Neon (Frankfurt region, EU).
Cookies and consent
We only use technically unnecessary cookies and tracking technologies with your consent (Art. 6(1)(a) GDPR, § 25 TDDDG). On your first visit, the consent banner lets you choose which categories (statistics, marketing) to allow. Your choice is stored in a cookie (sd-consent, 12 months) and can be changed anytime via the “Cookie settings” link in the footer.
Google Tag Manager, Google Ads & analytics
With your consent we use Google Tag Manager as well as Google Ads conversion tracking and remarketing by Google Ireland Ltd. We use Google Consent Mode v2: without consent, no marketing cookies are set and no personal identifiers are transmitted.
The legal basis is your consent (Art. 6(1)(a) GDPR). For third-country transfers Google relies on the EU-US Data Privacy Framework and standard contractual clauses.
Contentsquare (heatmaps & usage analysis, formerly Hotjar)
With your consent (statistics category) we use Contentsquare (formerly Hotjar), a service by Contentsquare SAS (France, EU), to better understand how our website is used. Contentsquare records, in pseudonymized form, how visitors interact with the site (e.g. mouse movements, clicks, scroll depth) and presents this as aggregated heatmaps. This helps us see which content is relevant and improve structure and clarity.
Contentsquare anonymizes IP addresses and offers suppression of sensitive input; we operate the service data-minimally. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings. More information is available in Contentsquare’s privacy policy.
Leadfeeder / Dealfront
With your consent (marketing category) we use Leadfeeder by Dealfront Group to identify which companies visit our website. The IP address of your visit is processed and matched to companies; no profiles of private individuals are created. Legal basis: Art. 6(1)(a) GDPR.
Demo access (Clerk) and email delivery (MailerSend)
When you request demo access, we process the data you provide (name, email address, optionally company) to create a demo account and send you the access link. The account is created with our authentication provider Clerk Inc.; the email is sent via MailerSend. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR).
To protect the form we use Cloudflare Turnstile, which processes technical browser signals for bot detection (Art. 6(1)(f) GDPR).
Contact form and whitepaper downloads
For contact form inquiries and whitepaper downloads we process the submitted data to handle your request or provide the document (Art. 6(1)(b) and (f) GDPR). With your consent we store campaign parameters (e.g. UTM sources) with the record for funnel analysis.
To protect against automated requests we use rate limiting via Upstash (EU region).
Retention
We store personal data only as long as necessary for the purposes described or as required by statutory retention obligations. Inactive demo accounts and associated lead data are deleted after 24 months at the latest.
Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority.