Privacy policy

The controller under GDPR is:

Deutsch-Griechische Kindertagesstätte "Heiliger Basilius der Große"

Günther-Wagner-Allee 51, 30177 Hannover, Germany

Email: hallo@deutsch-griechische-kita.de

When you load our site, our hosting provider (Vercel) processes technical access data (incl. IP address, user agent, timestamp) only as far as required to deliver the site and keep it secure. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure, working site). The data is not combined with other sources.

We use only technically necessary cookies required for the site to function (e.g. language preference).

With your explicit consent (cookie banner) we additionally use anonymised analytics cookies to understand how the site is used. You can withdraw consent at any time by clearing cookies in your browser or adjusting the cookie settings.

For anonymous reach and performance measurement we use Vercel Web Analytics and Speed Insights (provider: see “Data processors”). These services are cookieless, set no cookies and collect no directly identifying data; there is no cross-device tracking or profiling.

The legal basis is our legitimate interest in a technically sound, well-tailored website (Art. 6 (1) (f) GDPR). No consent is required for this.

Google Analytics is used only with your consent via the cookie banner (see “Cookies”); without consent it is not loaded.

If you write to us via the contact or spot-request form, we process your details (name, contact information, information about the child) solely to answer your request. Legal basis: Art. 6 (1) (b) and (f) GDPR.

Data is stored only as long as needed to handle the request and then deleted.

Hosting: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. DPA in place.

Email delivery for spot requests: Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA. DPA in place.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21).

You may also lodge a complaint with the data protection supervisory authority.

We deliberately do not embed external maps, videos, or tracking pixels. Our social-media references are plain text links and do not load any third-party content unless you actively click them.

On our “News” page we embed recent posts from our Instagram profile using the service Behold (behold.so). The posts are fetched server-side; the associated images are delivered via Behold’s content delivery network.

When the images load, your IP address is transmitted to Behold. Behold acts as our data processor (Art. 28 GDPR). No cookies are set for the display and no data is transmitted directly to Instagram or Meta.

Only when you click a post are you redirected to Instagram; the privacy policy of Meta Platforms Ireland Ltd. then applies.

The legal basis is our legitimate interest in an appealing presentation (Art. 6 (1) (f) GDPR).