Privacy Policy

SKYlink GmbH

Neuer Jungfernstieg 15
20354 Hamburg | Germany
Phone : +49 40 349 941 77
Fax: +49 40 349 627 38
Mail: info@skylinkretail.com
Web: skylinkretail.com

 

Last updated: 22 September 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (EU) 2016/679 ("GDPR") is:

Skylink GmbH
Neuer Jungfernstieg 15
20354 Hamburg | Germany
Phone : +49 40 349 941 77
Fax: +49 40 349 627 38
Mail: info@skylinkretail.com
Web: skylinkretail.com

 

Represented by the Managing Directors:

Thomas Wesch
Barry Fitzpatrick

Commercial Register:

Registration Court: Local Court of Hamburg
Registration Number: HRB 126370

VAT Identification Number pursuant to Section 27a of the German VAT Act (UStG):
DE 287 382 059

Skylink GmbH is the controller for the processing of personal data described in this Privacy Policy.

 

2. Scope of this Privacy Policy

This Privacy Policy explains how we process personal data when you visit or use our website.

"Personal data" means any information relating to an identified or identifiable natural person. This may include, for example, an IP address, contact details, information contained in enquiries, or information concerning your use of our website.

We process personal data in accordance with the GDPR and applicable data protection legislation.

Where the processing of information stored on or accessed from your terminal device requires consent under applicable law, we obtain such consent through our consent management system before carrying out the relevant processing.

 

3. Visiting our website

When you visit our website, technical information may be transmitted automatically by your browser to our web server.

Depending on the technical configuration of the website, this may include:

  • IP address;
  • date and time of access;
  • requested pages or files;
  • referrer URL;
  • browser type and version;
  • operating system;
  • language and other browser settings;
  • information concerning the device used;
  • technical information required to establish and maintain a secure connection; and
  • other technically necessary log information.

We process this information primarily to:

  • deliver and display the website;
  • ensure the technical functionality and security of the website;
  • detect and prevent attacks, misuse and other security incidents;
  • maintain and improve the stability of our IT infrastructure; and
  • comply with legal obligations where applicable.

The legal basis for this processing is Article 6(1)(f) GDPR

 

4. Hosting

Our website is hosted by:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

IONOS provides hosting and infrastructure services required to make our website available online.

In connection with hosting, technical data may be processed, including IP addresses, access times, requested resources and other server log information.

The processing is necessary for the secure and reliable operation of the website.

The legal basis is Article 6(1)(f) GDPR.

Where IONOS processes personal data on our behalf as a processor, the processing is governed by an appropriate data processing agreement pursuant to Article 28 GDPR.

 

5. WordPress and Divi

Our website is based on WordPress.

We use Divi as the website design and page-building framework.

WordPress and Divi enable us to create, manage and display the website.

Depending on the functionality used, technical information may be processed by the website software, including IP addresses, browser information, device information and information submitted through website functions.

Such processing is carried out only to the extent necessary for the operation, security and administration of the website.

The legal basis is Article 6(1)(f) GDPR, unless another legal basis applies.

Where individual functions require consent, the relevant processing will only take place after the required consent has been obtained.

 

6. Cookie and Consent Management – Complianz

We use the Complianz GDPR/CCPA Cookie Consent plugin for WordPress to manage cookies and similar technologies and to record and manage your consent preferences.

Complianz enables us to:

  • obtain and manage consent;
  • prevent certain non-essential third-party services from loading before consent has been given;
  • record and respect your consent preferences;
  • allow you to change or withdraw your consent; and
  • provide information about the cookies and services used on the website.

The consent management functionality may use technically necessary cookies or browser storage to remember your consent choices.

These technologies are used for consent management and do not serve to create behavioural advertising profiles.

The legal basis for processing necessary to manage and demonstrate consent is Article 6(1)(c) GDPR where required for compliance with a legal obligation and, where applicable, Article 6(1)(f) GDPR for the secure administration and documentation of consent.

For non-essential cookies and similar technologies, we rely on your consent pursuant to Article 6(1)(a) GDPR and applicable legislation governing access to information stored on or accessed from your terminal device.

You can withdraw or change your consent at any time by reopening the cookie settings on our website.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Complianz stores information necessary to remember and apply your consent choices. Depending on the current Complianz configuration and plugin version, this may include consent-status information such as the selected categories, the currently applicable privacy-policy version and the services for which consent has been given or refused. Such information is used for consent management and not for advertising or behavioural profiling.

The exact cookies and browser-storage technologies used by Complianz depend on the current configuration of the website. The current cookie settings and the associated technologies shown by our consent management system form part of this Privacy Policy.

 

7. Google Maps

We use Google Maps to display maps and location information on our website.

Google Maps is provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Depending on the implementation, loading or interacting with Google Maps may involve the transmission of information such as your IP address, browser and device information and information concerning the requested map or location.

Because Google Maps is a third-party service, information may be transmitted to Google when the service is activated.

Where required by applicable law, Google Maps is therefore blocked until you have provided the relevant consent through our consent management system.

The legal basis for the activation of Google Maps following consent is Article 6(1)(a) GDPR.

You may withdraw your consent at any time using our cookie settings.

Google may process personal data outside the European Economic Area. Where personal data are transferred to a third country, the applicable requirements of Chapter V GDPR must be satisfied, for example through an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses, where applicable.

For further information about Google's processing of personal data, please refer to Google's privacy documentation.

 

8. Google Fonts

We use Google Fonts to display fonts on our website.

The required Google Fonts are hosted locally on our own web server and are not loaded directly from Google's servers.

When you visit our website, the font files are therefore delivered from our own hosting infrastructure rather than being requested from Google's servers.

As a result, your browser does not need to establish a connection to Google's servers merely to load and display the fonts.

No personal data are transmitted to Google solely for the purpose of loading the locally hosted font files.

The use of locally hosted Google Fonts is therefore not dependent on a connection to Google's servers.

 

9. Burst Statistics

We use Burst Statistics, a WordPress analytics plugin, to obtain statistical information about the use of our website and to understand how visitors use and interact with our website.
Burst Statistics may process information relating to page views, sessions, interaction with pages and other technical information required to generate website statistics.
The exact data processed by Burst Statistics depends on the privacy configuration selected in the plugin. Burst Statistics currently provides different visitor-recognition modes, including a cookie-based mode, a cookieless "Private Mode" and a cookieless device-fingerprint mode. The selected mode determines whether a first-party cookie or other visitor-recognition information is used.
Where Burst Statistics is configured to use a cookie or another form of visitor recognition for which consent is required, the relevant statistical processing is activated only after the visitor has provided the corresponding consent through our consent management system.
Where Burst Statistics is operated in a configuration that does not require consent under applicable law, the processing is carried out on the applicable legal basis. In particular, the legal basis may be Article 6(1)(f) GDPR where the processing is based on our legitimate interest in analysing and improving the website and the applicable legal requirements permit such processing without consent.
Burst Statistics processes the statistical data locally within our WordPress environment. Depending on the selected configuration, the plugin may process technical information such as IP-address-derived information, browser or device information, page views, session information, referrer information and statistical identifiers. The precise data fields depend on the active Burst Statistics settings.
Burst Statistics may use a first-party cookie called "burst_uid" when the cookie-based visitor-recognition mode is enabled. According to the manufacturer's documentation, this cookie is used to store an anonymous identifier for recognising returning visitors. The retention period depends on the current Burst Statistics configuration and should be verified against the cookie information displayed in our consent management system.
We do not use Burst Statistics to create advertising profiles or to sell visitor data.
If statistical processing requires consent, you may refuse or withdraw your consent at any time through our cookie settings. Withdrawal affects future processing based on consent and does not affect the lawfulness of processing carried out before withdrawal.

 

10. Rank Math SEO

We use Rank Math SEO in its free version to optimise our website for search engines and to manage technical search engine optimisation functions.
Rank Math provides functions within our WordPress installation, including technical SEO settings, metadata management and related website optimisation functionality.
The basic use of Rank Math SEO does not by itself require the collection of personal data from website visitors. In particular, the plugin is primarily used by us within the WordPress administration area to manage SEO-related settings and metadata.
Rank Math offers an optional anonymous usage-tracking function. According to the manufacturer's documentation, this usage tracking is opt-in and is disabled by default. If we have not actively enabled this function, no Rank Math usage tracking is carried out.
If usage tracking is enabled by us, Rank Math may receive anonymous technical information concerning the WordPress installation and plugin usage, such as plugin and theme information, WordPress and server environment information, locale, timezone and related technical information. According to Rank Math, personal or sensitive information, IP addresses, usernames, website files, database contents, API keys and credentials are not collected as part of this usage tracking.
Rank Math can also be connected to third-party services such as Google Search Console or Google Analytics. Such connections are separate from the basic SEO functionality and may involve the processing of information by the respective third-party provider. We currently use Rank Math only to the extent configured on this website.
If no Rank Math Analytics, Google Analytics, Search Console or other external Rank Math integration is activated on this website, Rank Math does not itself place an analytics tracking code on the website merely because the Rank Math SEO plugin is installed.
The legal basis for the basic technical use of Rank Math is Article 6(1)(f) GDPR, based on our legitimate interest in operating, maintaining and optimising our website. Where an optional external integration or usage-tracking function requires consent under applicable law, the relevant processing will only take place after the required consent has been obtained.

 

11. Contacting us and contact form

If you contact us by email, telephone, fax or another communication channel, we process the information you provide to us.

This may include:

  • your name;
  • contact details;
  • company or organisation;
  • the content of your enquiry;
  • attachments; and
  • any other information you voluntarily provide.

We process this information in order to respond to your enquiry and, where applicable, to take steps at your request before entering into a contract.

Depending on the circumstances, the legal basis may therefore be:

Article 6(1)(b) GDPR, where your enquiry relates to the initiation or performance of a contract;
Article 6(1)(c) GDPR, where processing is required by law; or
Article 6(1)(f) GDPR, where we have a legitimate interest in handling and responding to business enquiries.

We retain correspondence only for as long as necessary for the relevant purpose and, where applicable, for as long as required to comply with statutory retention obligations or to establish, exercise or defend legal claims.

Contact form and WP Mail SMTP Lite

Our website may provide a contact form through which you can send enquiries to us. The information entered into the contact form is processed for the purpose of receiving, handling and responding to your enquiry. Depending on the fields provided in the form, this may include your name, e-mail address, company, telephone number, the subject and content of your enquiry and any attachments or other information you voluntarily provide.

We use WP Mail SMTP Lite to send e-mails generated by the website, including messages submitted through the contact form, via the mail server or e-mail service configured by us.

WP Mail SMTP Lite itself stores the plugin's configuration settings in our WordPress database. According to the manufacturer's documentation, the Lite version does not provide the Pro email-log functionality and does not store e-mail logs containing the content of sent messages in the WP Mail SMTP plugin.

The transmission of the contact-form message nevertheless necessarily involves the e-mail infrastructure used to deliver the message. Depending on the mailer configured on our website, the message and the personal data contained in it may therefore be processed by the respective e-mail or SMTP service provider. Such processing is subject to the privacy policy and terms of the respective provider and, where applicable, to a data processing agreement or other appropriate legal basis.

We do not use WP Mail SMTP Lite for advertising, profiling or behavioural tracking of website visitors.

Please do not submit sensitive personal information through the contact form unless this is necessary for your enquiry. We recommend that you provide only the information required for us to respond to your request.

If the contact form is used to request information or to initiate a business relationship, the legal basis for processing is generally Article 6(1)(b) GDPR where the enquiry is related to pre-contractual measures or the performance of a contract. In other cases, processing is generally based on Article 6(1)(f) GDPR, where we have a legitimate interest in responding to business enquiries. Where another legal basis applies, the relevant legal basis will apply to the specific processing activity.

Contact-form messages and related correspondence are retained only for as long as necessary to handle the enquiry and, where applicable, for as long as required by statutory retention obligations or to establish, exercise or defend legal claims.

 

12. Legal bases for processing

Depending on the specific processing activity, we rely on the following legal bases under Article 6 GDPR:

Article 6(1)(a) GDPR – Consent

Where you have given consent to a specific processing activity, such as certain statistical services, cookies or third-party services.

Article 6(1)(b) GDPR – Contract

Where processing is necessary for the performance of a contract with you or for steps taken at your request before entering into a contract.

Article 6(1)(c) GDPR – Legal obligation

Where processing is necessary to comply with a legal obligation to which we are subject.

Article 6(1)(f) GDPR – Legitimate interests

Where processing is necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your interests or fundamental rights and freedoms.

Our legitimate interests may include the secure and reliable operation of our website, IT systems and business activities, fraud and abuse prevention, the enforcement or defence of legal claims, and the improvement of our services.

 

13. Recipients of personal data

Depending on the specific processing activity, personal data may be disclosed to or processed by the following categories of recipients:

  • hosting and IT service providers;
  • website and software service providers;
  • analytics providers;
  • consent management providers;
  • providers of embedded services such as maps;
  • professional advisers;
  • legal, tax and accounting advisers;
  • courts, authorities and other public bodies where legally required; and
  • other service providers where necessary to provide our services or operate our website.

We only disclose personal data where there is an appropriate legal basis.

Where a service provider processes personal data on our behalf, we require an appropriate data processing agreement in accordance with Article 28 GDPR where applicable.

In connection with enquiries submitted through our contact form, the recipients may also include the e-mail or SMTP service provider configured by us for the transmission and delivery of the message. The specific provider depends on the mailer configured in WP Mail SMTP.

 

14. International transfers

Some of the service providers used on our website may be located outside the European Economic Area or may form part of international corporate groups.

Where personal data are transferred to a country outside the European Economic Area, we ensure that the applicable requirements of Chapter V GDPR are satisfied.

Depending on the circumstances, transfers may be based on:

  • an adequacy decision of the European Commission;
  • Standard Contractual Clauses adopted by the European Commission;
  • additional safeguards where required; or
  • another legally recognised transfer mechanism.

Further information about international transfers can be obtained from us using the contact details provided above.

 

15. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which they were collected.

The actual retention period depends on:

  • the nature of the information;
  • the purpose of processing;
  • whether a contractual relationship exists;
  • applicable statutory retention obligations; and
  • whether the data are required to establish, exercise or defend legal claims.

Where statutory retention obligations apply, personal data may be retained for the period required by law.

After the applicable retention period has expired, the relevant data are deleted or anonymised unless another lawful basis permits or requires further retention.

 

16. Your rights under the GDPR

Subject to the statutory requirements and limitations, you have the following rights:

Right of access

You have the right to request confirmation as to whether we process personal data concerning you and, where applicable, to request access to that data and the information specified in Article 15 GDPR.

Right to rectification

You have the right to request correction of inaccurate personal data and completion of incomplete personal data.

Right to erasure 

You may request the deletion of your personal data where the requirements of Article 17 GDPR are satisfied.

Right to restriction of processing

You may request restriction of processing where the requirements of Article 18 GDPR are satisfied.

Right to data portability

Where the requirements of Article 20 GDPR are satisfied, you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format and to transmit that data to another controller.

Right to object

Where we process your personal data on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you may object to such processing on grounds relating to your particular situation.

You may also object at any time to processing of personal data for direct marketing purposes.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You may change your cookie and similar technology preferences through our consent management settings.

 

17. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority.

You may exercise this right with the supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

As our registered office is in Hamburg, the competent supervisory authority is generally:

Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)

 

18. Automated decision-making and profiling

Unless expressly stated otherwise, we do not use your personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

The statistical services described in this Privacy Policy are used for website analysis and improvement and are not intended to make decisions about individuals.

 

19. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures include, where appropriate, access controls, authentication mechanisms, secure transmission technologies, software updates, backups and other security measures appropriate to the risks associated with the processing.

No method of transmission or storage can guarantee absolute security. However, we regularly review and improve our security measures where appropriate.

 

20. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies may be used for different purposes, including:

  • technically necessary functions;
  • storing consent preferences;
  • website preferences;
  • statistical analysis; and
  • third-party services.

Strictly necessary technologies may be used where they are required to provide a service explicitly requested by you or where another legal exception applies.

Non-essential cookies and similar technologies are used only where the applicable legal requirements for consent have been satisfied.

Our cookie consent management system allows you to select and subsequently change your preferences.

Categories of cookies and similar technologies

We distinguish between technically necessary technologies and non-essential technologies used for preferences, statistics or other purposes.

Necessary / functional technologies: These technologies are required for the technical operation of the website, security, consent management or the provision of a function explicitly requested by you. They may be used without consent where the requirements of Section 25(2) TDDDG are met.

Preference technologies: These technologies may store settings or preferences selected by the visitor. Where their use is not technically necessary for a service explicitly requested by the visitor, they are only activated with the required consent.

Statistics technologies: We may use Burst Statistics to analyse website usage. Where the relevant configuration requires consent, statistics are activated only after consent has been provided.

Marketing technologies: We currently do not intentionally use marketing cookies or advertising trackers for behavioural advertising on this website. If such technologies are introduced in the future, the Privacy Policy and consent management configuration will be updated and the technologies will only be activated where the required legal basis and consent are present.

Cookies used for consent management

Complianz may use technically necessary cookies or browser storage to remember your consent choices. Depending on the current plugin version and configuration, these may include consent-status information such as selected categories, the current policy version and permitted or refused services. These technologies are used to apply your choices and do not serve advertising purposes.

The exact names, retention periods and purposes of the currently active Complianz technologies are displayed through our cookie settings and may change when the consent-management configuration or plugin version changes.

Burst Statistics

Burst Statistics may use the first-party cookie burst_uid when its cookie-based visitor-recognition mode is enabled. The cookie is used to recognise returning visitors through an anonymous identifier. Burst also supports cookieless configurations. The actual technology and retention period depend on the current configuration of Burst Statistics on this website.

Where statistics require consent, Burst Statistics is blocked until the visitor has provided the relevant statistics consent.

Google Maps

Google Maps may use cookies and similar technologies when the service is activated. Google Maps is therefore blocked until the relevant consent has been provided where consent is legally required.

Exact cookie information

Because the actual cookies and similar technologies may depend on the current WordPress, plugin and consent-management configuration, the current cookie inventory displayed in our Complianz cookie settings is authoritative for the technologies currently active on this website. It identifies the relevant technology, purpose and applicable retention information where available.

We regularly review the website configuration and update this Privacy Policy and our consent-management configuration where material changes are made to the cookies, services or technologies used.

 

21. Managing and withdrawing cookie consent

You can change or withdraw your consent to non-essential cookies and similar technologies at any time through the cookie settings available on our website.

When you withdraw consent, future processing based on that consent will cease.

Please note that withdrawing consent does not retroactively make processing that was lawful before withdrawal unlawful.

You may also delete cookies through your browser settings. However, deleting or blocking technically necessary cookies may affect the functionality of the website.

The cookie settings can be reopened at any time using the "Manage consent" function available on our website. This allows you to review and change your selections for the available categories and services.

22. Links to external websites

Our website may contain links to websites operated by third parties.

We are not responsible for the privacy practices, content or security of external websites.

We recommend reviewing the privacy policy of each external website before submitting personal data.

 

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, the services we use, legal requirements or our processing activities.

The current version is published on this page.

The date at the beginning of this Privacy Policy indicates when it was last updated.

 

24. Contact

If you have questions concerning the processing of your personal data or wish to exercise your rights, please contact:

Skylink GmbH
Neuer Jungfernstieg 15
20354 Hamburg | Germany
Phone : +49 40 349 941 77
Fax: +49 40 349 627 38
Mail: info@skylinkretail.com
Web: skylinkretail.com