Privacy

1. Controller

We have not appointed a data protection officer, as we are not required to do so. If you have any questions about data protection, please contact us at the address above.

2. Overview

We only process personal data where this is necessary to run this website, to answer your enquiries or to provide our services, or where you have given your consent. The legal bases are in particular:

• Art. 6(1)(a) GDPR: your consent
• Art. 6(1)(b) GDPR: a contract or pre-contractual measures, such as a quote
• Art. 6(1)(c) GDPR: legal obligations, such as retention periods
• Art. 6(1)(f) GDPR: our legitimate interest in a secure and properly functioning website

We do not store form data on the website. It is transmitted to us exclusively by email.

3. Hosting and delivery

This website is delivered via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technically necessary data such as your IP address, the date and time, the address requested, your browser and your operating system. This is necessary to deliver the site and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR. Cloudflare stores these logs only briefly and only for security purposes. We have concluded a data processing agreement with Cloudflare.

4. Spam protection with Cloudflare Turnstile

We protect our forms against automated submissions with Cloudflare Turnstile. Turnstile uses technical characteristics of your browser and your IP address to check whether a human is filling in the form. This usually happens invisibly. Turnstile does not set any advertising cookies. The legal basis is Art. 6(1)(f) GDPR; our interest lies in protection against spam and abuse.

5. Request, contact, feedback and application forms

When you contact us via a form, we process the information you provide: for example your name, email address, phone number, company, details of your event, your message and, for applications, your documents. A small program on Cloudflare’s servers checks the input and forwards it to us by email. You also receive a confirmation at your email address.

To send these emails we use Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). We have concluded a data processing agreement with Resend; the data is processed in the EU region.

Purpose, legal basis and storage period

• Request: preparing a quote and carrying out the assignment, Art. 6(1)(b) GDPR. If no assignment results, we delete the data after 12 months. If an assignment results, the statutory retention periods apply (up to 10 years).
• Contact: replying to your message, Art. 6(1)(b) or (f) GDPR. We delete the data as soon as your matter has been dealt with and there is no obligation to retain it.
• Feedback: improving our services, Art. 6(1)(f) GDPR. Your name and contact details are voluntary. We only publish your feedback, call you back or reply in writing with your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time.
• Application as a freelance responder: assessing a possible collaboration, Art. 6(1)(b) GDPR. If no collaboration results, we delete your documents no later than 6 months after the rejection.

6. Communication and deployment planning

When you call us, write to us or when we carry out your assignment, we use the following services. The legal basis is Art. 6(1)(b) GDPR where your request or assignment is concerned, otherwise Art. 6(1)(f) GDPR (efficient communication and organisation). Where required, we have concluded data processing agreements with the providers.

• Phone: Our phone system is operated by sipgate (sipgate GmbH, Gladbacher Straße 74, 40219 Düsseldorf, Germany). Calls may also be answered by sipgate’s AI phone assistant. It records your request and forwards it to us as text.
• Email: Our mailboxes are hosted by IONOS (IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany). We read and answer emails with the Spark app (Spark Mail Limited, 26–27 Fitzwilliam Place, Dublin 2, Ireland). Email content remains mainly on our devices.
• WhatsApp and Instagram: If you write to us via WhatsApp or Instagram, the providers also process your message (WhatsApp Ireland Limited or Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). Their privacy policies apply there. For confidential information, please use email or phone.
• Deployment planning and documentation: We plan and document deployments with SanBoard (Beemind GmbH, Brauerstrasse 37, 8004 Zurich, Switzerland). The data is stored in data centres in Switzerland. The European Commission has adopted an adequacy decision for Switzerland.
• Our own applications: For internal processes we use our own applications, which are also operated on Cloudflare.
• Devices: We work with Apple devices. Data may be synchronised via iCloud (Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland).

7. Browser storage and consent

We do not set any cookies unless you have given your consent. We store the following entries locally in your browser because they are necessary for functions you use yourself (Section 25(2) No. 2 TDDDG, German Telecommunications Digital Services Data Protection Act):

• Your cookie choice, so that the notice does not appear every time you visit
• A draft of your request, so that your input is not lost if you leave the form. It is deleted once you submit.
• The result of our calculators, which you can carry over into your request. It is deleted when you close the browser window.

This data stays on your device and is not transmitted to us until you submit a form. You can change your cookie choice at any time via “Cookie settings” in the footer.

8. Google Tag Manager, Google Analytics and Google Ads

Only if you have given your consent in the cookie notice do we load Google Tag Manager and, through it, Google Analytics 4 (statistics) and Google Ads conversion tracking (marketing). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without your consent, these services are not loaded.

• Google Analytics 4 shows us how our website is used, for example which pages are visited. IP addresses are not stored.
• Google Ads conversion tracking measures whether one of our ads led to a request.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. We use Google’s consent mode (Consent Mode v2). You can withdraw your consent at any time via “Cookie settings” in the footer. Google Analytics retains the data collected for a maximum of 14 months. We have concluded a data processing agreement with Google.

9. External links

We do not embed Instagram, Google Maps or our Google Business Profile; we only link to them. Data is only transmitted to the respective provider once you click such a link. Their privacy policies apply there.

10. Fonts and icons

Fonts and icons are hosted on our own server. No connection to Google Fonts or other font providers is established when you visit the website.

11. Transfers to third countries

Cloudflare, Resend, Google, Apple, Meta and Spark are based in the USA or also process data there. These transfers are covered by the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, under which these companies are certified, and additionally by standard contractual clauses.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent you have given with effect for the future (Art. 7(3)). Simply write to us at kontakt@skala-paramedics.de.

Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Last updated: October 2026