Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Double Tree UG (haftungsbeschränkt) – trading as SkillDay
Grotenkamp 19, 22607 Hamburg, Germany
Managing Director: Jörn Steinz
Email: jsteinz@skillday.com
Phone: +49 175 566 43 29

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. Overview of the data we process

We process personal data only where there is a legal basis for doing so, and only to the extent necessary. On this website this concerns:

• Server log data that your browser transmits automatically when you visit the site.
• Contact data that you actively provide by email or by phone.
• Order data when you buy a ticket for The Workshop Playbook via Eventbrite.
• Technically necessary cookies.

We do not sell personal data, and we do not use it for automated decision-making or profiling. We do not use web analytics, tracking or marketing cookies on this website.

3. Legal bases

Depending on the purpose, we process personal data on the basis of:

• Art. 6 (1) (a) GDPR – your consent, where we ask for it.
• Art. 6 (1) (b) GDPR – performance of a contract or pre-contractual measures, for example when you buy the playbook and access to the live calls.
• Art. 6 (1) (c) GDPR – compliance with a legal obligation, for example commercial and tax retention periods.
• Art. 6 (1) (f) GDPR – our legitimate interest in a secure, functional and appropriately presented website.

4. Hosting and server log files

This website is hosted by an external service provider in Germany, acting as our processor under a data processing agreement pursuant to Art. 28 GDPR.

Each time the site is accessed, the hosting provider automatically records information that your browser transmits, in so-called server log files:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing device
• Date and time of the server request
• IP address

This data is not merged with other data sources. It is processed on the basis of Art. 6 (1) (f) GDPR, for the purpose of a technically error-free presentation and the security of our website, and is deleted or anonymised after a short period.

5. Website security

To protect this website against attacks, we use the security plugin Wordfence (Defiant, Inc., USA). The plugin runs on our server and processes the IP address and request data of visitors in order to detect and block malicious access. The legal basis is our legitimate interest in the security of our website, Art. 6 (1) (f) GDPR. Where data is transferred to the USA, an appropriate level of protection is ensured as described in section 10.

6. SSL / TLS encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix in your browser address bar and the lock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.

7. Cookies

This website only uses technically necessary cookies, for example for logged-in administrators. They are set on the basis of Art. 6 (1) (f) GDPR and section 25 (2) TDDDG. We do not use cookies for statistics, tracking or advertising. You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases.

8. Fonts

The fonts used on this website are hosted locally on our server. No connection to servers of third-party font providers is established when you visit this website.

9. Ticket purchase via Eventbrite

When you click “Get the playbook”, you are taken to our ticket page on Eventbrite (Eventbrite, Inc., USA). Your order and payment are processed by Eventbrite; Eventbrite’s own privacy policy applies to this processing. As the organiser we receive the data required to fulfil your order, typically your name, email address and order details, in order to send you the playbook and the links to the live calls. The legal basis is Art. 6 (1) (b) GDPR.

10. Recipients and transfers to third countries

Personal data is only disclosed to third parties where this is necessary, for example to our hosting provider or to Eventbrite for ticket sales. Where a service provider processes data outside the European Economic Area, we ensure an appropriate level of protection through EU standard contractual clauses, an adequacy decision or another valid transfer mechanism under Chapter V GDPR.

11. Contact by email and telephone

If you contact us by email or by telephone, we process the details you provide – typically your name, company, email address, phone number and the content of your message – in order to process the inquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR where your request relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR, based on our legitimate interest in responding effectively to inquiries addressed to us.

12. Storage duration

Unless a more specific storage period is stated in this policy, we store personal data only for as long as necessary for the purpose of processing. When you request deletion or withdraw your consent, your data is deleted unless we have a legally permitted reason to retain it – in particular statutory retention periods under commercial and tax law, which are generally six or ten years.

13. Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Access (Art. 15 GDPR) – to be informed which data we process about you.
• Rectification (Art. 16 GDPR) – to have inaccurate data corrected.
• Erasure (Art. 17 GDPR) – to have your data deleted, subject to statutory retention obligations.
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR) – to receive your data in a machine-readable format.
• Objection (Art. 21 GDPR) – to object to processing based on legitimate interests.
• Withdrawal of consent (Art. 7 (3) GDPR) – at any time, with effect for the future.

To exercise any of these rights, an informal message to jsteinz@skillday.com is sufficient.

14. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. For our registered office this is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.

15. Changes to this privacy policy

We review this privacy policy regularly and update it when our website or the legal situation changes. The current version always applies and can be accessed at any time on this page.

Last updated: October 2026