Privacy policy

The protection of your personal data is of high importance to us. With this Privacy Policy, we inform you comprehensively about the type, scope, and purposes of the processing of personal data in connection with the use of this website. Personal data means any information relating to an identified or identifiable natural person, such as name, contact details, or usage data. The processing of your personal data is always carried out in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the respective applicable national data protection provisions. This Privacy Policy applies to all content and functions provided on this website, regardless of whether you use it merely for informational purposes or actively transmit data. Unless more specific information is provided within this Privacy Policy, your data will be processed on the basis of the respective applicable legal permissions.

The controller responsible for the processing of your personal data in connection with this online offer is:

Skleo Health GmbH

Brehmstraße 3

40239 Düsseldorf

Email: info@skleo.de

For all questions regarding the protection of your personal data and to exercise your data protection rights, our Data Protection Officer is available as your contact person:

DATENDO GmbH

Hohenzollernring 55

50672 Köln

Email: datenschutz-550@anfragen.datendo.de

Website: www.datendo.de

We process personal data only to the extent necessary to provide our website and our services. Processing is carried out on the basis of the relevant legal grounds of Art. 6 (1) GDPR; more detailed information on this is provided for the respective processing operations. Personal data will only be stored for as long as is necessary to achieve the respective purposes or as required by statutory retention periods. Data will only be passed on to third parties if there is a legal basis for doing so or if this is necessary for the fulfillment of our services. Insofar as data is transferred to third countries, we ensure an adequate level of data protection in accordance with Art. 44 et seq. GDPR.

We take appropriate technical and organizational measures to protect your personal data against loss, destruction, unauthorized access, or other unlawful processing. These measures are continuously adapted in line with technological developments. The transmission of data via this website is encrypted (e.g., by means of SSL or TLS encryption).

For the storage and delivery of content on our website, we use the Hetzner Object Storage service provided by Hetzner Online GmbH. Files and other content are stored on external servers and delivered when requested by the user. In the context of this use, the IP address, timestamp, requested content, as well as browser and device data are processed. The processing is carried out for the purpose of providing our online offer, ensuring availability, scalability, and data security, as well as optimizing loading times. The legal basis is Art. 6 (1) (f) GDPR, whereby our legitimate interest lies in an efficient and secure technical infrastructure of our online offer. The recipient of the data is Hetzner Online GmbH as a processor. In principle, data is not transferred to third countries, as processing takes place in data centers within the European Union. The data will only be stored for as long as is necessary to achieve the stated purposes or as required by statutory retention obligations. The user may object to the processing of their data at any time for reasons arising from their particular situation in accordance with Art. 21 GDPR. Further information on data processing by Hetzner can be found at https://www.hetzner.com/de/legal/privacy-policy.

If you contact us via a contact form on our website, by email, or by telephone, we process the personal data you transmit to handle your inquiry and to answer any follow-up questions. Depending on the type of contact, we process in particular your name, your contact details such as email address and phone number, and the content of your message. The processing is carried out on the basis of Art. 6 (1) (b) GDPR, provided that your inquiry is aimed at the conclusion or performance of a contract. In all other cases, the processing is based on our legitimate interest in the proper handling of the inquiry and efficient communication pursuant to Art. 6 (1) (f) GDPR. Your data will only be passed on to third parties if this is necessary to process your inquiry or if we are legally obliged to do so. Your data will be deleted as soon as your inquiry has been conclusively processed and no statutory retention obligations prevent deletion.

We use technically necessary cookies on our website to provide basic functions of the website and to ensure its proper operation. These are small text files that are stored on the user’s terminal device and contain certain information, such as session identifiers, language settings, or the content of shopping carts. In the context of this processing, the IP address, browser and device data, and usage data are processed. The processing is carried out for the purpose of ensuring the technical functionality, user-friendliness, and IT security of the website. The legal basis is Art. 6 (1) (f) GDPR, whereby our legitimate interest lies in the provision of a functional and secure website. The recipients of the data are deployed IT service providers and hosting providers acting as processors. A transfer to third countries does not generally take place unless individual service providers use servers outside the European Union, in which case appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular Standard Contractual Clauses of the European Commission, are applied. The storage duration of the cookies is limited to the duration of the respective session or takes place for a technically required period. The user can object to the storage of cookies or delete them by adjusting the settings in their browser, although this may restrict the functionality of the website.

We use the Cookiebot CMP consent management platform provided by Usercentrics A/S on our website to obtain, manage, and document user consent for the use of cookies and comparable technologies in a legally compliant manner. In the course of use, cookies are set and personal data such as the IP address, date and time of consent, browser information, device information, and an anonymized consent ID are processed. The processing is carried out for the purpose of fulfilling legal obligations to obtain and verify consent pursuant to Art. 6 (1) (c) GDPR in conjunction with Art. 7 GDPR, as well as to safeguard our legitimate interests in a legally secure design of the website pursuant to Art. 6 (1) (f) GDPR. The recipient of the data is Usercentrics A/S as a processor. A transfer to third countries cannot be ruled out if sub-processors are used, in which case appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular Standard Contractual Clauses of the European Commission, apply. The data will be stored for the duration of the legally required burden of proof and then deleted. The user can revoke or change their consent at any time with effect for the future via the settings provided on the website. Further information on data processing by Cookiebot CMP can be found at https://www.cookiebot.com/en/privacy-policy/.

We use various services provided by Google Ireland Limited on our website, including Google Tag Manager for managing and deploying tags, Google Maps for displaying interactive maps, Google Fonts for the uniform display of fonts, and Google CDN for the fast and reliable delivery of content. In the context of using these services, personal data, in particular the IP address, location data, browser and device data, and usage data, are processed and transmitted to Google servers. The processing is carried out for the purpose of technically efficient provision, improving user-friendliness, and analyzing and controlling web content. Depending on the service, the legal basis is Art. 6 (1) (a) GDPR for consent-based services and Art. 6 (1) (f) GDPR for technically required functions, whereby our legitimate interest lies in an economic and user-friendly design of our online offer. The recipient of the data is Google Ireland Limited and its affiliated companies. A transfer to the USA cannot be ruled out, whereby Google provides appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the conclusion of Standard Contractual Clauses of the European Commission. The storage period depends on the respective type of service and the storage periods specified by Google. The user can revoke a given consent at any time with effect for the future or object to the processing of their data insofar as this is based on Art. 6 (1) (f) GDPR. Further information on data processing by Google can be found at https://policies.google.com/privacy.

We use services provided by HubSpot Germany GmbH on our website to statistically evaluate the use of our website, record user behavior for analysis and marketing purposes, and deploy and optimize advertising measures. Data is collected and processed via integrated scripts and cookies, in particular the IP address, usage data, device information, and meta and communication data. Requests may also be made to domains such as:

• cta-eu1.hubspot.com

• forms-eu1.hscollectedforms.net

• forms-eu1.hsforms.com

• hsforms.com

• hubspot.com

• js-eu1.hs-analytics.net

• js-eu1.hs-banner.com

• js-eu1.hs-scripts.com

• js-eu1.hscollectedforms.net

• js-eu1.hsforms.net

• js-eu1.hubspot.com

• js.hs-scripts.com

• perf-eu1.hsforms.com

• track-eu1.hubspot.com

The processing is carried out for the purpose of analyzing user behavior, measuring the success of marketing measures, and designing our website in line with user needs. The legal basis is Art. 6 (1) (a) GDPR based on the user’s consent. The recipient of the data is HubSpot Germany GmbH and affiliated companies as processors. A transfer to third countries, in particular to the USA, cannot be ruled out, whereby appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular Standard Contractual Clauses of the European Commission, are applied. Cookies with a maximum storage period of up to one hour are used, whereby individual cookies may be set before consent is granted if this is technically necessary. The user can revoke their consent at any time with effect for the future. Further information on data processing by HubSpot can be found at https://legal.hubspot.com/privacy-policy.

We use services provided by Leadinfo B.V. on our website to statistically evaluate the use of our website, analyze user behavior for marketing purposes, and track visitor interactions for lead generation. Data is collected and processed via integrated scripts and technologies, in particular the IP address, usage data, device information, and meta and communication data. Requests may also be made to domains such as api.leadinfo.com, cdn.leadinfo.net, collector.leadinfo.net, and collector4.leadinfo.net. The processing is carried out for the purpose of analyzing user behavior, optimizing our marketing measures, and identifying potential business contacts. The legal basis is Art. 6 (1) (a) GDPR based on the user’s consent. The recipient of the data is Leadinfo B.V. as a processor. In principle, data is not transferred to third countries since the provider is based within the European Union; however, it cannot be completely ruled out if sub-processors are used, in which case appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular Standard Contractual Clauses of the European Commission, apply. The data will only be stored for as long as is necessary to achieve the stated purposes. The user can revoke their consent at any time with effect for the future. Further information on data processing by Leadinfo can be found at https://www.leadinfo.com/en/legal/privacy/.

We use the web analysis service Umami Analytics provided by Umami Software, Inc. on our website to statistically evaluate the use of our website and to optimize our online offer. Data is collected and processed via integrated scripts, in particular the IP address, usage data, device information, and meta and communication data. Requests may also be made to domains such as api-gateway.umami.dev and cloud.umami.is. The processing is carried out for the purpose of analyzing user behavior and improving the functionality and user-friendliness of our website. The legal basis is Art. 6 (1) (a) GDPR based on the user’s consent. The recipient of the data is Umami Software, Inc. as a processor. A transfer of data to the USA takes place, whereby the provider is certified under the EU-US Data Privacy Framework or appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR, are in place. The data will only be stored for as long as is necessary to achieve the stated purposes. The user can revoke their consent at any time with effect for the future. Further information on data processing by Umami Analytics can be found at https://umami.is/privacy.

We maintain online presences on the platforms LinkedIn Ireland Unlimited Company, Meta Platforms Ireland Limited, and TikTok Technology Limited to communicate with users, provide information about our company, and carry out marketing measures. In the context of using these platforms, personal data is processed, in particular the IP address, usage data, device information, and meta and communication data, whereby this data is processed both by us and by the respective platform operators. The processing is carried out for the purpose of public relations, interaction with users, and the analysis and optimization of our social media activities. The legal basis is Art. 6 (1) (f) GDPR, whereby our legitimate interest lies in an effective public corporate presentation and communication with interested parties, as well as, if applicable, Art. 6 (1) (a) GDPR insofar as consent has been obtained. The recipients of the data are the respective platform operators as joint controllers or independent controllers. A transfer of data to third countries, in particular to the USA, cannot be ruled out, whereby appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular Standard Contractual Clauses of the European Commission or certifications under the EU-US Data Privacy Framework, are provided. The storage duration depends on the respective platform operators and their data protection settings. The user can object to the processing of their data at any time or revoke a given consent with effect for the future. Further information on data processing can be found in the privacy policies of the respective providers at:

• https://www.linkedin.com/legal/privacy-policy

• https://privacycenter.instagram.com/policy

• https://www.facebook.com/privacy/policy

• https://www.tiktok.com/legal/privacy-policy

Automated decision-making, including profiling pursuant to Art. 22 GDPR, does not take place in connection with the use of our website.

In the context of the purely informational use of our website, there is generally no legal or contractual obligation to provide personal data. However, certain functions of the website can only be used if the data required for this purpose is provided (e.g., when using forms). Insofar as data transfers to third countries take place, we ensure appropriate safeguards pursuant to Art. 46 GDPR.

As a data subject, you have various rights under the General Data Protection Regulation regarding the processing of your personal data:

• Right of Access (Art. 15 GDPR): You have the right to obtain information, in particular as to whether and to what extent we process personal data about you, the purposes of this processing, the categories of data concerned, and the recipients to whom this data has been or will be disclosed.

• Right to Rectification (Art. 16 GDPR): You have the right to request the rectification of inaccurate or incomplete data in order to keep the personal data stored with us up to date.

• Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided that no statutory retention periods or other legal obligations prevent such erasure.

• Right to Restriction of Processing (Art. 18 GDPR): You have this right under certain conditions, for example, if you contest the accuracy of the data or if the processing is unlawful and you request the restriction of use instead of erasure.

• Right to Data Portability (Art. 20 GDPR): You have the right to receive the data you have provided in a structured, commonly used, and machine-readable format and to transmit this data to another controller, provided that the processing is based on your consent or on a contract and is carried out by automated means.

• Right to Object (Art. 21 GDPR): You have the right to object to the processing of your personal data if we base the processing on a legitimate interest or if it is carried out for the purpose of direct marketing.

• Right to Withdraw Consent (Art. 7 (3) GDPR): If the processing of your data is based on consent granted by you, you have the right to withdraw this consent at any time with effect for the future.

• Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. The supervisory authority competent for our company is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Kavalleriestr. 2-4

40213 Düsseldorf

Phone: +49 (0) 211/38424-0

Fax: +49 (0) 211/38424-999

Email: poststelle@ldi.nrw.de

Insofar as the processing of your personal data is based on consent pursuant to Art. 6 (1) (a) GDPR, you have the right to withdraw this consent at any time with effect for the future. The withdrawal can be made informally, for example by email to the controller. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected by this.

For reasons of better readability and comprehensibility, gender-specific differentiation is partially omitted in this Privacy Policy. All personal designations apply equally to all genders in the interest of equal treatment. This shortened language form does not imply any valuation and is used exclusively for editorial reasons of linguistic simplification.

We reserve the right to adapt this Privacy Policy so that it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, for example when introducing new services or functionalities on our website. The respective current version of the Privacy Policy will then apply to your next visit. This Privacy Policy is current as of April 2026.

This Privacy Policy was created using the online privacy generator of the external Data Protection Officers of DATENDO GmbH.

The decisive text of the privacy policy is the one written in German language. The English translation serves for information purposes only.