Privacy Policy

1. Controller

• •ILOSKY
• •vertreten durch den CEO
• •Weilimdorferstraße
• •70469 Stuttgart
• •Deutschland
• •Email: founder@ilosky.com

2. General information on processing

We process personal data only where this is necessary to provide a functioning website and our content and services, or where you have given your consent.

The legal bases are in particular Art. 6 (1) (a) GDPR (consent), (b) GDPR (contract or pre-contractual measures), (c) GDPR (legal obligation) and (f) GDPR (legitimate interests).

3. Hosting and server log files

This website is hosted by a service provider that processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. When you access the website, technical access data is automatically stored in server log files:

• •IP address (shortened or stored only briefly)
• •date and time of access
• •page or file requested
• •referrer URL
• •browser and operating system used

4. Legal basis for log files

Processing is based on our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR). Log files are generally deleted after 30 days at the latest.

5. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. All requests are served exclusively via HTTPS; unencrypted connections are redirected automatically.

6. Cookies and local storage

We use strictly necessary cookies and local storage entries required to operate the website (for example storing your language choice and your cookie decision). The legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

All non-essential cookies (statistics/analytics and marketing) are only set after your explicit consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can change or withdraw your consent at any time with future effect via the cookie settings in the footer.

7. Call bookings and contact requests

When you submit a request through our booking or contact form, we process the data you provide (including first name, last name, email address, phone number, country, details about your situation and the selected appointment) in order to handle your request and hold the call.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and your consent under Art. 6 (1) (a) GDPR. Your data is deleted as soon as it is no longer required, at the latest after statutory retention periods expire.

8. Email marketing and double opt-in

For sending emails with tips, offers and information we use the double opt-in procedure: after signing up you receive an email in which you must explicitly confirm your subscription. Only then do we add you to our list.

We log the sign-up, the confirmation and the timestamps in order to demonstrate consent. The legal basis is Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, for example via the unsubscribe link in every email or by writing to founder@ilosky.com.

9. Recipients and processors

Your data is only shared where necessary to perform a contract, where you have consented, or where a legal obligation exists. Service providers (e.g. hosting, email and calendar services) process data solely on our instructions under a data processing agreement pursuant to Art. 28 GDPR.

Where data is transferred to third countries, this only happens on the basis of an adequacy decision or appropriate safeguards (e.g. EU standard contractual clauses, Art. 44 et seq. GDPR).

10. Retention

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations (in particular commercial and tax law, 6 or 10 years).

11. Your rights

As a data subject you have the following rights:

• •access to the data processed (Art. 15 GDPR)
• •rectification of inaccurate data (Art. 16 GDPR)
• •erasure (Art. 17 GDPR)
• •restriction of processing (Art. 18 GDPR)
• •data portability (Art. 20 GDPR)
• •objection to processing based on legitimate interests (Art. 21 GDPR)
• •withdrawal of consent with future effect (Art. 7 (3) GDPR)
• •lodging a complaint with a supervisory authority (Art. 77 GDPR)

12. Competent supervisory authority

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

13. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Changes to this privacy policy

We update this privacy policy whenever changes to our services or the legal situation make it necessary. The version published on this page applies.