Privacy Policy

2. Collection and Storage of Personal Data When Visiting This Website

When you visit this website, our web server automatically processes the data your browser transmits (server log files). This includes: the IP address of your device, the date and time of the request, the page or file requested, the amount of data transferred, the previously visited page (referrer URL), your browser type and version, your operating system, and the HTTP status code of the response.

This data is processed solely to deliver the website to you without technical errors, to ensure system security and stability, and to enable criminal prosecution in the event of an attack. The legal basis is Art. 6(1)(e) GDPR in conjunction with § 3 of the North Rhine-Westphalia Data Protection Act (DSG NRW), since operating this website is a task carried out in the public interest. This data is not combined with other data sources and is not evaluated for advertising or analytics purposes – this website deliberately does not use any analytics or tracking services (such as Google Analytics).

Hosting: This website is hosted by STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. We have a data processing agreement with our hosting provider pursuant to Art. 28 GDPR. Data is transmitted between your browser and our server exclusively via encrypted TLS/SSL connections, indicated by "https" in the address bar and the lock icon in your browser.

Cookies: No cookies are set and no data is permanently stored in your browser when you visit the public pages of this website. Only in the password-protected administration area (/admin) is a technically necessary session cookie set after login; it exists solely to keep members of the school's editorial staff signed in while editing content, so it does not concern visitors to the public pages, and it expires at the latest when the browser is closed.

3. Getting in Touch

Contact form: If you use the form on the "Contact" page, we process the details requested there: your name, your email address, optionally a phone number, the subject you selected (General enquiry, Extended day care, or Feedback) and your message. This information is sent by email to the school office (mail@grundschule-haaren.de); your email address is set as the reply-to address so we can reply to you directly. You will also automatically receive an acknowledgement email with a copy of your details, the text of which is maintained in the school's administration area. A form field that is not visible to you serves solely to automatically detect spam software (honeypot); if it is filled in, the message is silently discarded without any further personal data being processed.

Phone and email: If you contact us directly by phone or by email, we process the data you provide (such as your phone number, email address and your enquiry) solely to process and respond to your enquiry.

The legal basis is Art. 6(1)(e) GDPR in conjunction with § 3 DSG NRW; where your enquiry concerns entering into a childcare arrangement (e.g. extended day care), additionally Art. 6(1)(b) GDPR. Your details are deleted as soon as they are no longer required to process your enquiry, and at the latest once statutory retention periods have expired.

4. Embedded Services and External Links

This website deliberately does not embed any third-party services: fonts, images and all program libraries used – including those for the 3D bee on the homepage – are served exclusively from our own server. There is no use of Google Fonts, no CDNs, and no advertising or analytics services. Four exceptions exist, described below.

Google Maps on the contact page: The "Contact" page has an embedded Google Maps map. Simply visiting the page does not load the map and no data is sent to Google; instead you see a placeholder showing our address. Only when you actively click "Load map" is the map loaded. This transmits your IP address and device information to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google may set cookies; transmission to the USA cannot be ruled out. The legal basis is your consent (Art. 6(1)(a) GDPR; for the setting of cookies, additionally § 25(1) of the German Telecommunications-Telemedia Data Protection Act, TTDSG), given by clicking "Load map". This consent is not stored: each time you revisit the page, the map remains unloaded at first. Below the placeholder are also two ordinary links ("Google Maps ↗" and "Apple Maps ↗") that open the respective provider's map application in a new tab; here too, data is only transmitted once you click, and the respective provider is responsible for that processing.

Links on the "Bildungsspenden" (donations) page: Several buttons link to the donation platform bildungsspender.de and from there onward to participating online shops (including Amazon, Booking.com, Check24, Thalia, Otto, and Ernsting's family). These are ordinary outbound links: visiting our page does not transmit any data to these providers, and only a click opens the respective page in a new tab. The respective provider is responsible for any processing there, including attributing the resulting commission to the school, and its own privacy policy applies. The current donation total shown on our page, by contrast, is retrieved exclusively server-side: our server requests the amount directly from bildungsspender.de without transmitting your IP address or any other data about you.

Google Gemini API for translations: So that new or edited blog posts are automatically translated into the other languages offered on this website (English, Ukrainian, Turkish), the password-protected administration area sends a post's title and text to the Google Gemini API (Google Ireland Limited) when the post is saved. This transmission is triggered exclusively by editorial staff when editing a post; posts generally do not contain any personal data about children. To the extent that personal data is exceptionally processed here, the legal basis is Art. 6(1)(e) GDPR in conjunction with § 3 DSG NRW, as part of the school's public relations work.

Map app selection: On phones and tablets, JavaScript adapts the order of the Google Maps and Apple Maps links to the device you are using. Only technical device information (touch capability, user agent) is evaluated locally in your browser for this purpose; no data is transmitted to us or to third parties.

5. Staff, Extended Day Care and Parents' Association: Information About Individuals

On several pages we introduce members of staff, the extended day care team (OGS) and the parents' association (Förderverein) with their name, role or class, and optionally a profile photo; individual details, such as a school email address, may be provided as a clickable contact. Publication only takes place with the prior, voluntary and revocable-at-any-time consent of the person named or shown (Art. 6(1)(a) GDPR). Consent can be withdrawn informally at any time by contacting the school leadership; the profile photo or the entire entry is then promptly removed from the administration area, which also deletes the corresponding image file from our server. This information is maintained by editorial staff in the password-protected administration area and is entirely separate from the processing of your visitor data.

6. Your Rights

You have the following rights regarding your personal data:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent already given, with effect for the future (Art. 7(3) GDPR) – for example regarding the Google Maps map or a published profile

To exercise these rights, please contact us informally using the details given under "Controller" above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, email: poststelle@ldi.nrw.de.