Privacy Policy

1. Data Controller

SK Consulting S.A., 50 rue de Mühlenbach, L-2168 Luxembourg, is the data controller for the processing of personal data collected through this website. You can reach us at info@skc.lu.

2. What Data We Collect

We may collect the following categories of personal data:

• Contact information (name, email address, phone number) when you submit a form or contact us
• Company name and job title when provided voluntarily
• Technical data (IP address, browser type, device information) collected automatically when you visit our website
• Usage data (pages visited, time spent, referral source) through analytics

3. How We Use Your Data

We process your personal data for the following purposes:

• To respond to your inquiries and provide requested information
• To deliver and improve our services
• To send relevant communications about our products and services (with your consent)
• To analyze website usage and improve user experience
• To comply with legal obligations

4. Legal Basis

We process personal data based on one or more of the following legal grounds under GDPR:

• Your consent (Article 6(1)(a) GDPR)
• Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR)
• Compliance with a legal obligation (Article 6(1)(c) GDPR)
• Our legitimate interests (Article 6(1)(f) GDPR), such as improving our services and website

5. Data Sharing

We do not sell your personal data. We share data with the following trusted service providers who assist us in operating our website and business:

• Microsoft Azure (hosting) — our website is hosted on Microsoft Azure in the EU (West Europe region)
• Google Analytics 4 (analytics) — collects anonymized usage data such as pages visited, session duration, and referral source. Data is processed by Google Ireland Limited. We use Google Consent Mode v2; no cookies are set until you accept our cookie banner
• Google Ads (advertising measurement) — measures the effectiveness of our advertising campaigns. Subject to the same consent controls as Google Analytics
• Microsoft Clarity (analytics) — records anonymized session replays and heatmaps to help us improve the user experience. Clarity only loads after you accept our cookie banner

These providers are contractually bound to protect your data and process it only on our instructions. We may also disclose data when required by law.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Contact form submissions are retained for up to 3 years after the last interaction. Analytics data is retained in anonymized form.

7. Cookies & Consent

Our website uses essential cookies (theme preference, cookie consent choice) that are stored in your browser's local storage and are required for the site to function. Analytics and advertising cookies are only set after you give explicit consent via our cookie banner. We implement Google Consent Mode v2 in advanced mode:

• Before consent — the Google tag loads but all consent parameters (ad_storage, ad_user_data, ad_personalization, analytics_storage) are set to "denied". No cookies are written and no personally identifiable data is sent. Google may use cookieless pings for aggregated, modeled reporting
• After you accept — consent parameters are updated to "granted", allowing Google Analytics 4 and Google Ads to set first-party cookies and collect full measurement data. Microsoft Clarity also loads at this point
• If you decline — no analytics or advertising cookies are set. You can change your choice at any time by clearing your browser's local storage for skc.lu and revisiting the site

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to restriction — request limitation of processing
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at info@skc.lu.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmission.

10. International Transfers

Your data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), the Luxembourg data protection authority.

12. AI Assistant

Our website includes an AI-powered search assistant that helps answer questions about SK Consulting and our services. Queries are processed by Microsoft Azure OpenAI in the EU (Sweden Central). We do not store conversation data beyond the duration of the request. Please do not enter personal or confidential information into the assistant.

13. Changes to This Policy

We may update this privacy policy from time to time. The latest version is always available at this URL. Last updated: April 2026.

SK Consulting S.A.
50, rue de Mühlenbach, L-2168 Luxembourg
info@skc.lu