# Privacy Policy - sktime

Privacy policy for sktime.net, including hosting, contact forms, analytics, and data subject rights.

Last updated: July 2, 2026

Canonical page: https://www.sktime.net/privacy/

## Controller

The controller responsible for this website within the meaning of the General Data Protection Regulation (GDPR) is:

sktime Enterprise Solutions GmbH, Lise-Meitner-Straße 10/1, KICU (AI Campus, Ulm), 89081 Ulm, Germany

Represented by the managing directors Cengiz Genisyürek and Dr. Dr. Franz Király.

Email: dpo@sktime.net

## Website Hosting

This website is hosted on our virtual private server at Hetzner Online GmbH in Germany or the European Union.
When you visit the website, server log data is processed to deliver the site, maintain security, and diagnose technical issues. This can include your IP address, date and time of access, requested URL, HTTP status code, transferred data volume, referrer URL, and browser user agent.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Log data is kept only for as long as required for these purposes and is then deleted or anonymized, unless longer retention is necessary to investigate security incidents or comply with legal obligations.

## Contact by Email

If you contact us by email, we process the data you provide, such as your name, email address, organization, message, and any other information you include.
Our email inbox is hosted by Infomaniak Network SA in Switzerland. Switzerland is recognized by the European Commission as providing an adequate level of data protection.
We use this data to respond to your inquiry, handle follow-up communication, and, where relevant, prepare or perform a contractual relationship. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication and Art. 6(1)(f) GDPR for other inquiries.
We keep contact inquiries only for as long as needed to handle the request and any follow-up questions, unless statutory retention obligations or the establishment, exercise, or defense of legal claims require longer retention.

## Contact Form and Human Verification

If you use the contact form, we process the information you enter, including your name, email address, inquiry type, message, and any other information included in the message. The website also sends the page URL, selected language, browser user agent, and technical request data such as the IP address to the website backend.
We use this data to validate the submission, route the inquiry, respond to your message, handle follow-up communication, and protect the form against abuse. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication and Art. 6(1)(f) GDPR for other inquiries, security, abuse prevention, and reliable form delivery.
To protect the form against automated submissions, we use Cap human verification. The challenge response and verification token are processed by our website backend and the configured Cap service to verify that the form was submitted by a human. We do not use Cap for advertising profiles or cross-site tracking.
Successful submissions are forwarded to the form delivery backend configured for sktime.net. We and service providers acting on our behalf process the data only as needed to deliver, track, and handle the inquiry. Contact-form inquiries are kept only for as long as needed to handle the request and any follow-up questions, unless statutory retention obligations or the establishment, exercise, or defense of legal claims require longer retention.

## Booking Calls with Cal.eu

The contact page includes an embedded scheduler from Cal.eu / Cal.com to let you book a meeting with us directly. When the scheduler is loaded or used, Cal.eu may process technical data such as your IP address, browser user agent, referrer or page URL, timezone, and query parameters forwarded from the website.
If you book a meeting, the information you enter in the scheduler, such as your name, email address, selected time slot, timezone, and message, is processed by Cal.eu and by us to arrange, manage, and follow up on the meeting.
The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual meeting requests and Art. 6(1)(f) GDPR for reliable scheduling, lead handling, and abuse prevention. Booking data is kept only for as long as needed to prepare, hold, and follow up on the meeting, unless statutory retention obligations or the establishment, exercise, or defense of legal claims require longer retention.

## Analytics

We use a self-hosted instance of Umami Analytics to understand how the website is used and to improve the content and user experience. The analytics service runs on infrastructure controlled by us.
Umami is configured without cookies and without cross-site tracking. It collects aggregated usage information such as page views, referrer URLs, browser, operating system, device type, and approximate country. The visitor IP address may be processed briefly to derive analytics data, but is not stored in the analytics database.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is privacy-friendly measurement of website usage. We do not use Umami to identify individual visitors, create visitor profiles, or track visitors across third-party websites.

## External Links

The website links to external services such as GitHub, Discord, LinkedIn, and PyPI. These links are regular outbound links. No data is transmitted to those services by us merely because the link is displayed. If you follow an external link, the privacy policy of the respective provider applies.

## Recipients

We share personal data only where necessary to operate the website, respond to inquiries, comply with legal obligations, or protect our rights. Service providers acting on our behalf are bound by appropriate data protection agreements where required.

## Provision of Data and Automated Decisions

Using the website, contacting us, and booking a meeting are voluntary. Some technical data is necessary to deliver the website, and the required fields in the contact form or scheduler are necessary to handle your inquiry or meeting request. If you do not provide this data, the affected website function, inquiry, or booking may not be available.
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

## Your Rights

Subject to the legal requirements, you have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability, and objection to processing based on Art. 6(1)(f) GDPR. If processing is based on consent, you may withdraw that consent at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

## Updates

We may update this privacy policy when the website, our processing activities, or legal requirements change. The current version is available on this page.

## Cookies

We do not use analytics or advertising cookies. The website may store a functional language preference cookie named `sktime_locale` when you choose English or German in the language switcher. It contains only `en` or `de`; is used to remember your requested language, and expires after about one year.
