Privacy policy

Key points at a glance

• This website sets no cookies and uses no analytics or tracking tools.
• No third-party content is embedded – no maps, videos, social media plugins or external fonts. All files come from our own web space.
• We only process data about you when your browser requests our pages (technically necessary server log files) or when you contact us yourself.
• We do not sell data or pass it on for advertising purposes.

Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. We have concluded a data processing agreement with Hetzner in accordance with Art. 28 GDPR.

Each time a page is requested, your browser automatically sends data to the server, which is stored there in log files:

• IP address of the requesting device
• date and time of the request
• page or file requested and amount of data transferred
• HTTP status code (e.g. whether the page was found)
• the previously visited page (referrer), if your browser sends it
• browser type, browser version and operating system

This data is technically necessary to deliver the website, to ensure its stability and security and to fend off attacks. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR. We do not combine this data with other data sources and do not analyse it to identify you. The log files are deleted after seven days at the latest, unless a specific security incident needs to be investigated.

Encrypted transmission

For security reasons, this website uses TLS encryption (you can tell by “https://” in the address bar). This means that data you send to us – for example via the contact form – cannot be read by third parties.

Getting in touch

Phone and email

If you call us or send us an email, we process the information you give us (for example your name, phone number, email address and what your enquiry is about) in order to respond to your enquiry.

Please note: ordinary emails are not encrypted all the way to us. If you would like to share very personal information – for example about the health or family situation of your child – we recommend calling us instead.

Contact form

Using the contact form, you send us:

• who is enquiring (you or your family, a professional body, or a nursery or school)
• your name and phone number
• optionally, your email address and the area your enquiry is about
• your message
• the language of the page you wrote from

The information is transmitted to our web space in encrypted form and forwarded from there to our office by email. We use it solely to process your enquiry and to call you back.

To send this email, we use the Resend service (Resend, Inc., USA) as a processor within the meaning of Art. 28 GDPR. Resend processes your information only to deliver the email and stores it for this purpose for no longer than 30 days. For the transfer to the USA, see “Recipients and transfers to third countries”.

To protect against mass spam messages, we store an irreversible hash of your IP address together with the time when you submit the form. This lets us recognise when a large number of messages are sent from one connection in quick succession. The entry is deleted after one hour. The legal basis is our legitimate interest in a working contact form that is free from abuse (Art. 6(1)(f) GDPR).

Legal basis and storage period

We process your information on the basis of your consent (Art. 6 (1) (a) GDPR) and, where your enquiry concerns support or care from us, to take steps prior to entering into a contract (Art. 6 (1) (b) GDPR).

Enquiries to a child and youth welfare provider often contain health data – for example about a child’s disability or illness – which is specially protected under Art. 9 GDPR. We only process such information because and to the extent that you give it to us voluntarily and consent to its processing (Art. 9 (2) (a) GDPR). All our staff are bound by professional confidentiality.

You can withdraw your consent at any time with effect for the future – an informal phone call or email is enough. This does not affect the lawfulness of the processing carried out up to that point.

We delete your information as soon as your enquiry has been fully dealt with and no care arrangement results from it. If your enquiry leads to care or support, the privacy information you receive from us at the start applies. Statutory retention obligations (for example under commercial and tax law) remain unaffected.

Job applications

If you apply for a job with us, we process your application documents and the information from the application process in order to decide whether to establish an employment relationship (Art. 6 (1) (b) GDPR in conjunction with § 26 of the Federal Data Protection Act – BDSG). Only the people involved in the selection have access.

If you are hired, the documents become part of your personnel file. Otherwise, we delete them six months after the end of the application process so that we can defend ourselves against possible claims under the General Equal Treatment Act (AGG). If you would like us to keep your application for future vacancies, we will ask for your consent beforehand.

Cookies and storage in your browser

This website sets no cookies and stores no other information on your device, for example in local storage or session storage. Consent under § 25 of the Telecommunications Digital Services Data Protection Act (TDDDG) is therefore not required.

Fonts and icons

The font (Source Sans 3) and all icons are stored on our own web space. No connection to Google or other providers is made when the page loads.

Links to other websites

Our pages contain links to websites of other providers, for example to our profiles on Instagram and Facebook. These are simple links, not embedded content or plugins: no data is sent to these networks when you visit our pages. You only leave our website when you click on such a link; from then on, the privacy policy of the respective provider applies. Phone numbers are set up as links so you can call directly. No data is sent to us when you do so.

Recipients and transfers to third countries

Within our organisation, only the people who need your data for their work have access to it. The only external recipients are our hosting provider (see above), the email service Resend for messages from the contact form (see “Contact form”) and – in individual cases – service providers for the maintenance and operation of our IT, whom we have contractually bound to data protection.

Resend is based in the USA. The transfer there is based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR), under which Resend is certified; in addition, we have agreed the EU Standard Contractual Clauses with Resend (Art. 46(2)(c) GDPR). Apart from this, data is not transferred to countries outside the European Union or the European Economic Area.

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

Your rights

You have the right at any time to

• obtain information about the data stored about you (Art. 15 GDPR),
• have incorrect data corrected (Art. 16 GDPR),
• have your data deleted (Art. 17 GDPR),
• have the processing restricted (Art. 18 GDPR),
• receive your data in a common, machine-readable format (Art. 20 GDPR),
• withdraw consent you have given with effect for the future (Art. 7 (3) GDPR).

To do so, simply contact the controller named above informally.

Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR), you can object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint

If you believe that we are not processing your data lawfully, you can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5, 30159 Hannover, Germany
www.lfd.niedersachsen.de

We would be glad, however, if you spoke to us first – many things can be sorted out directly.

Changes to this privacy policy

We update this privacy policy when our website or the legal situation changes. The version published here always applies.