Privacy Policy

1. Controller and Overview

Controller within the meaning of the General Data Protection Regulation (GDPR):

Thomas Ripplinger Digitale Services
Arnikaweg 11, 76149 Karlsruhe, Germany
E-mail: service@skilltastic.online
Website: skilltastic.online

This privacy policy informs you about the processing of your personal data when you use our website and our online courses. We attach great importance to the protection of your data and to compliance with the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

2. Scope of Data Processing and Legal Bases

2.1 General data processing when visiting our website

If you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server. This data is technically necessary to display our website and comprises:

  • IP address (in anonymized form)
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • Browser and browser version
  • Operating system and its interface

This data is not merged with other data sources and is deleted automatically after statistical evaluation, at the latest after 14 days.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest). Our legitimate interest lies in optimizing our website and ensuring the security of our systems.

2.2 Provision of the website and creation of log files

When you access our website, information transmitted by your browser is automatically recorded in so-called server log files. This data comprises:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Host name of the accessing computer (IP address in anonymized form)
  • Time of the server request

This data is stored separately from other data and is not merged with your personal data. It is stored in log files to ensure the functionality of the website and to defend against attacks.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest). Our legitimate interest lies in the error-free functioning of our website and in system security.

3. Cookies and Similar Technologies

3.1 General information about cookies

Our website uses cookies. Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware.

We distinguish between:

Technically necessary cookies: These cookies are essential for the operation of the website. They enable basic functions such as page navigation and access to secure areas of the website.

Preference cookies: These cookies enable a website to remember information that influences the way the website behaves or looks (e.g. your preferred language or region).

Statistics and analytics cookies: These cookies help us to understand how visitors interact with our website by collecting and analyzing information anonymously. They help us to improve our website.

Marketing cookies: These cookies are used to follow visitors across websites. The intention is to display ads that are relevant and engaging for the individual user.

3.2 Cookie consent management

Our website uses a cookie consent tool to obtain your consent to the storage of certain cookies on your device and to document this consent in compliance with data protection law.

When you visit our website, a pop-up window appears in which you can grant or refuse your consent for various categories of cookies. This banner is displayed until you have made a selection.

You can change your cookie settings at any time by clicking the “Cookie” icon in the footer of our website.

Legal basis: Technically non-essential cookies are only set with your consent pursuant to Section 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act) in conjunction with Art. 6 (1) lit. a GDPR. The documentation of your consent is based on Art. 6 (1) lit. c GDPR in conjunction with Art. 7 (1) GDPR, as we are obliged to document your consent.

3.3 Storage period and withdrawal of consent

The storage period of cookies varies depending on the type:

  • Technically necessary cookies are deleted at the end of the browser session (session cookies) or have a limited lifespan (a few days to months)
  • Analytics, advertising and third-party cookies generally have a lifespan of a few days up to 2 years

You can withdraw your consent at any time with effect for the future. In addition, you can set your browser so that it informs you when cookies are placed and allows cookies only in individual cases, excludes the acceptance of cookies for certain cases or in general, and activates the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.

4. Google Analytics

4.1 Scope of processing

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies that are stored on your device and that enable an analysis of your use of the website.

Google Analytics is used on our website with the “_anonymizeIp()” extension. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

The information generated by the cookie about your use of this website is generally transmitted to a Google server and stored there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website and internet usage.

4.2 Legal basis and purpose

Data is processed by Google Analytics exclusively on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG. You can withdraw this consent at any time with effect for the future by opening the cookie banner again and adjusting your settings, or by installing the Google Analytics opt-out plugin.

The purpose of the processing is the analysis of user behavior in order to optimize our website and our offering.

4.3 Storage period and objection option

The data collected with Google Analytics is stored for a period of 14 months and then deleted automatically.

You can prevent the collection of the data generated by the cookie and related to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout

Alternatively, you can click the “Cookie” icon in the footer of our website. An opt-out cookie will then be stored on your device, which prevents the future collection of your data when visiting this website.

4.4 Data security for transfers to third countries

For the transfer of data to Google in the USA, we rely on appropriate safeguards pursuant to Art. 46 GDPR, in particular on Google’s certification under the EU-US Data Privacy Framework and on Standard Contractual Clauses.

We have concluded a data processing agreement with Google that obliges Google to protect the data of our website visitors and not to pass it on to third parties.

5. Registration and Course Booking

5.1 Registration on our website

You have the option of registering on our website in order to book our online courses or to use other functions. The data entered in the process (usually: name, e-mail address, optionally a profile picture, payment data) is used to set up and manage your user account and to provide our services.

Legal basis:

  • For the performance of the contract pursuant to Art. 6 (1) lit. b GDPR
  • Where you consent to the newsletter subscription, pursuant to Art. 6 (1) lit. a GDPR

Storage period: The data is stored for as long as your user account exists and beyond that for as long as statutory retention periods apply or the data is needed to assert, exercise or defend legal claims.

5.2 Payment processing via Digistore24

When you book our courses, payment processing is carried out exclusively via the service provider Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany.

When you book a course via our website, you are redirected to Digistore24 for payment processing. Digistore24 collects the data required for payment processing (name, address, e-mail address, payment data). We ourselves do not collect or store any payment data.

Digistore24 acts as an independent controller for the data processing carried out in the context of payment processing. Further information on data processing by Digistore24 can be found in the Digistore24 privacy policy: https://www.digistore24.com/page/privacy

Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract)

5.3 Course platform and user profiles

When you use our course platform, data on your use of our courses (learning progress, course results, comments, etc.) is stored in order to provide you with the best possible service.

Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract)

Storage period: The data is stored for the duration of your access to our courses and is then archived for a period of 12 months in order to enable a seamless transition if you book again.

6. Contact Form and E-mail Contact

6.1 Contact form

If you use our contact form, the data you provide (name, e-mail address, subject line, message content) is stored by us for the purpose of processing your inquiry and in case of follow-up questions.

Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual measures at the request of the data subject) or Art. 6 (1) lit. f GDPR (legitimate interest in processing customer inquiries)

Storage period: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, generally 6 months after the communication has been concluded.

6.2 E-mail contact

If you contact us by e-mail, the data you provide (e-mail address, name, any other data you provide) is stored in order to answer your questions.

Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual measures) or Art. 6 (1) lit. f GDPR (legitimate interest)

Storage period: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, generally 6 months after the communication has been concluded.

7. Newsletter and BREVO

7.1 Newsletter dispatch and tracking

If you subscribe to our newsletter, we use the data you provide (e-mail address, name if applicable) exclusively to send you our newsletter, in which we inform you about our offers and news.

We use a double opt-in procedure for sending the newsletter: after you register, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can misuse your e-mail address.

Our newsletters contain technologies for tracking reading behavior, such as tracking pixels and click tracking. This enables us to measure the success rate of our newsletters and to better tailor our content to your interests.

Legal basis: Art. 6 (1) lit. a GDPR (consent)

Storage period: Your e-mail address is stored for as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, your e-mail address is deleted, unless you have expressly consented to further use.

7.2 E-mail marketing via BREVO

We use the service BREVO (formerly Sendinblue) of Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany, to send our newsletters and transactional e-mails.

BREVO is a service that can be used, among other things, to organize and analyze the dispatch of newsletters. The data you enter for the purpose of receiving the newsletter (e-mail address, optionally your name) is stored on BREVO’s servers in the EU.

With the help of BREVO, we can analyze our newsletter campaigns. When you open an e-mail sent with BREVO, a file contained in the e-mail (web beacon) connects to BREVO’s servers. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). This information is used to improve the technical performance of our newsletters.

To protect your privacy, BREVO uses so-called tracking alternatives that enable pseudonymized measurement of opening and click behavior without a specific attribution to you as a person.

Further information can be found in BREVO’s privacy policy: https://www.brevo.com/legal/privacypolicy/

Legal basis: Art. 6 (1) lit. a GDPR (your consent when subscribing to the newsletter)

Storage period: The data is stored for as long as you are subscribed to the newsletter.

8. Embedded External Content

8.1 YouTube videos

YouTube videos are embedded on our website; they are stored on www.youtube.com and can be played directly from our website. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in section 2.1 of this policy is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists.

Legal basis: Art. 6 (1) lit. a GDPR (consent). The videos are only loaded after you have given your consent via the cookie banner.

Further information: https://policies.google.com/privacy

9. Hosting and External Services

9.1 Hosting and content delivery

Our website is hosted on servers of Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany. The servers are located in Germany.

When you visit our website, various access data transmitted by your browser is stored in server log files. This data is technically necessary to display our website to you and to ensure stability and security.

The following data is collected as part of the hosting:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • Browser and browser version
  • Operating system and its interface

This data is generally stored for a maximum of 7 days and then deleted automatically. The collection of this data is technically necessary to display the website and to ensure its stability and security.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest). Our legitimate interest lies in the correct display of our website, its optimization and the secure operation of our systems.

9.2 Google Fonts

No Google Fonts are loaded from Google servers on this website. All fonts used are hosted on our own server and loaded from there when you visit. This prevents any data transfer to Google when the fonts are loaded.

10. Your Rights as a Data Subject

10.1 Right of access

You have the right to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right of access to this personal data and to the following information:

  • the purposes of the processing
  • the categories of personal data being processed
  • the recipients or categories of recipients to whom the personal data has been or will be disclosed
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of the right to request rectification or erasure of personal data concerning you, or restriction of processing by us, or the right to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • where the personal data is not collected from you, any available information as to its source
  • the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you

10.2 Right to rectification and erasure

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed.

You have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay where one of the following grounds applies:

  • The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
  • You withdraw the consent on which the processing was based and there is no other legal ground for the processing.
  • You object to the processing and there are no overriding legitimate grounds for the processing.
  • The personal data has been unlawfully processed.
  • The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.

The right to erasure does not apply to the extent that processing is necessary:

  • for exercising the right of freedom of expression and information
  • for compliance with a legal obligation or for the performance of a task carried out in the public interest
  • for reasons of public interest in the area of public health
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
  • for the establishment, exercise or defence of legal claims

10.3 Right to restriction of processing

You have the right to obtain from us the restriction of processing where one of the following applies:

  • The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead.
  • We no longer need the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims.
  • You have objected to the processing, pending verification of whether our legitimate grounds override yours.

10.4 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, where:

  • the processing is based on consent or on a contract, and
  • the processing is carried out by automated means.

In exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

10.5 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6 (1) lit. e or f GDPR.

We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.

10.6 Right to withdraw consent under data protection law

You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

10.7 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

11. Data Security

In accordance with Art. 32 GDPR, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures include in particular:

  • The encryption of personal data using SSL/TLS technology
  • The ability to ensure the ongoing confidentiality, integrity, availability and resilience of the systems and services related to the processing
  • The ability to restore the availability of and access to personal data in a timely manner in the event of a physical or technical incident
  • A process for regularly testing, assessing and evaluating the effectiveness of the technical and organizational measures

12. Validity and Changes to this Privacy Policy

This privacy policy is currently valid and was last updated in July 2026.

As our website and offerings evolve, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access and print the current privacy policy at any time on this website.

Scroll to Top