Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. General information

We process personal data solely within the limits of applicable law (GDPR, German Federal Data Protection Act). Below we explain the nature, scope and purpose of processing in connection with your visit to this website.

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, the server automatically processes technically necessary data (server log files, see section 4).

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure and stable provision of the website).

A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Vercel. Transfer to the USA: Vercel is certified under the EU-US Data Privacy Framework (DPF) and additionally relies on the EU Standard Contractual Clauses (SCC), providing appropriate safeguards for the transfer to a third country.

4. Server log files

With every access, the server automatically records information transmitted by your browser: IP address, date and time of access, the URL requested, the volume of data transferred, the referrer URL, browser type and version, and operating system. This data is technically required to deliver the website and ensure its stability and security. Legal basis: Art. 6 (1) (f) GDPR. This data is not merged with other data sources, and no individual person is identified.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in the address bar and by the padlock symbol in your browser.

6. Fonts

We use the IBM Plex fonts (Sans, Sans Condensed, Mono). The fonts are served locally from our own server. No connection to third-party servers, in particular Google Fonts, is established, and no personal data (such as your IP address) is transmitted to third parties in this process.

7. Cookies

This website does not use any tracking or advertising cookies. We use only one technically necessary cookie (NEXT_LOCALE), which stores your language choice (DE/EN) when you switch languages. This cookie is required for the function you requested; consent is not required under Section 25 (2) TTDSG. We therefore do not use a cookie banner.

8. Social media

The website (e.g. in the footer) contains links to our profiles on Instagram and LinkedIn. These are simple links, not embedded social media plug-ins. No data is transferred to the respective providers until you actively click a link and open the relevant platform. The provider's own privacy terms then apply to any processing there.

9. Your rights as a data subject

You have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). To exercise them, an informal message to start@skala-social.de is sufficient.

10. Right to object

Where processing is based on Art. 6 (1) (f) GDPR, you have the right to object at any time for reasons arising from your particular situation.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI),
Alt-Moabit 59-61, 10555 Berlin, Germany.

12. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

13. Validity and changes

This privacy policy is currently valid. As the website develops or legal requirements change, it may become necessary to update it. Last updated: June 2026.