Privacy Policy
Last updated: April 2026
1. Controller (Data Controller)
The controller for the processing described on this website is:
My Kindergarten e.V.
Langbürgener Str. 2
81549 Munich
Germany
Email: vorstand@mykindergarten.net
Phone: +49 89 55064243
The association is represented by its board (Vorstand).
2. Overview
We process personal data only to the extent required to operate this website, answer enquiries, and handle enrollment, careers, and event registration requests. The applicable legal basis depends on the specific context and is explained below.
This website does not provide user accounts, a newsletter, or advertising tracking. The main processing activities arise from server logs, the contact form, the enrollment form, the careers form, and event registration forms.
3. Data We Collect and How We Use It
3.1 Contact Form
When you use the contact form, we process the data you enter, in particular your name, email address, optional phone number, the selected child age group, and your message.
We use this data to review and answer your enquiry. Submitting the form triggers an email to our internal inbox and may also trigger a confirmation email to the address you provided.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to pre-contractual communication, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in handling enquiries efficiently.
3.2 Enrollment Application
When you submit an enrollment request, we process the information you provide about the child, guardians, emergency contacts, pickup persons, language background, custody situation, desired start date, care needs, and any optional background details included in the form.
We use this information to assess the application, communicate with the family, manage waiting-list or placement decisions, and, where applicable, prepare or perform a childcare contract. Form submission also generates an email to our internal inbox and may generate a confirmation email to the submitting family.
Legal basis: Art. 6(1)(b) GDPR for steps taken at your request before entering into a contract, Art. 6(1)(f) GDPR for the orderly administration of the application process, and Art. 6(1)(c) GDPR where statutory obligations apply, for example regarding measles protection documentation under applicable German law.
3.3 Careers Application
When you submit a careers application, we process your applicant data, in particular your name, email address, optional phone number, selected role, availability, motivation text, and an optional CV or profile link.
The current form does not provide a document upload. We only process the information you enter in the form fields and any optional link you provide.
We use this information to review your application, contact you about the recruitment process, and document the application workflow. Submitting the form triggers an internal notification email and may trigger a confirmation email to you.
Legal basis: Art. 6(1)(b) GDPR for steps prior to entering into an employment relationship and Art. 6(1)(f) GDPR for efficient recruitment administration.
3.4 Event Registration
When you register for an event (for example open day), we process your registration details, in particular your name, email address, optional phone number, selected time slot, and optional notes.
We use this information to manage available slots, confirm your booking, and organize event attendance.
Legal basis: Art. 6(1)(b) GDPR for handling your event participation request and Art. 6(1)(f) GDPR for orderly event organization.
3.5 Server Log Files
When you visit the website, our hosting provider processes technical connection data such as IP address, date and time of access, requested URL, browser information, device information, and referrer data.
We need this processing to deliver the website, maintain system security, and detect abuse or technical faults.
Legal basis: Art. 6(1)(f) GDPR based on our legitimate interest in secure and reliable website operation.
4. Legal Bases for Processing
- ▸Art. 6(1)(a) GDPR - Consent: processing based on a consent you have given for a specific purpose.
- ▸Art. 6(1)(b) GDPR - Contract or pre-contractual measures: processing required to respond to your request or prepare / perform an agreement with you.
- ▸Art. 6(1)(c) GDPR - Legal obligation: processing required to comply with statutory duties.
- ▸Art. 6(1)(f) GDPR - Legitimate interests: processing required for secure website operation and efficient communication, unless your overriding interests require otherwise.
5. Data Retention
We keep personal data only for as long as it is needed for the relevant purpose or for as long as statutory retention obligations apply.
Contact enquiries are reviewed regularly and deleted when the matter has been concluded and no further retention is required. Enrollment data is retained for the duration of the application and waiting-list process and, if a contract is concluded, for the duration of the childcare relationship plus the applicable retention periods for contractual and accounting records. Careers applications are retained for the duration of the recruitment process and then deleted unless legal retention duties apply. Event registration data is kept for event planning and follow-up and then deleted when no longer required. Server logs are retained only for a limited technical period by the hosting provider.
If you request deletion, we will review whether overriding legal retention duties still apply.
6. Processors and Recipients
We do not sell personal data. Data is disclosed only where this is necessary for operating the website, handling enquiries, enrollment requests, careers applications, event registrations, or fulfilling legal obligations. Depending on the case, recipients may include hosting providers, database providers, email delivery providers, internal association contacts, and authorities where a legal reporting obligation exists.
If a provider processes data outside the European Union or the EEA, this takes place only on the basis of the safeguards stated by that provider, such as Standard Contractual Clauses or another permitted transfer mechanism.
7. Cookies and Browser Storage
For language switching, the website temporarily uses sessionStorage in your browser to restore the previous scroll position after navigation. This information remains on your device and is not used to track you across websites.
Website analytics are only enabled after your explicit consent via the privacy settings banner. If you consent, we activate Vercel Web Analytics to evaluate anonymous, aggregated usage data, for example which pages are visited most frequently, how navigation paths are used, and whether page performance can be improved. We use these analytics exclusively to improve content structure, usability, and technical stability of the website. We do not use analytics for advertising, marketing profiles, or cross-site tracking. You can reject analytics or change your decision at any time via the 'Privacy settings' control in the footer.
8. Your Rights Under the GDPR
Under the General Data Protection Regulation, you have the following rights with respect to your personal data:
Right of access (Art. 15 GDPR)
You can request information about whether we process your personal data and, if so, obtain a copy of that data.
Right to rectification (Art. 16 GDPR)
You can request correction of inaccurate data and completion of incomplete data.
Right to erasure (Art. 17 GDPR)
You can request deletion of your personal data where the statutory requirements are met and no overriding retention duty applies.
Right to restriction of processing (Art. 18 GDPR)
You can request that processing be limited under the conditions set out in the GDPR.
Right to data portability (Art. 20 GDPR)
You can request the personal data you provided in a structured, commonly used, machine-readable format, where the legal requirements are met.
Right to object (Art. 21 GDPR)
You can object to processing based on legitimate interests where reasons arise from your particular situation.
Right to withdraw consent (Art. 7(3) GDPR)
Where processing is based on consent, you can withdraw that consent at any time with effect for the future.
Right to lodge a complaint (Art. 77 GDPR)
You can lodge a complaint with a supervisory authority, for example with the Bavarian data protection supervisory authority responsible for non-public bodies.
To exercise these rights, contact us at: vorstand@mykindergarten.net
9. Changes to This Privacy Policy
We may update this Privacy Policy if the website, our processes, or the legal requirements change. The current version is published on this page with the revision date shown above.
10. Contact
If you have questions about data protection or would like to exercise your rights, please contact:
My Kindergarten e.V.
Langbürgener Str. 2, 81549 Munich
Email: vorstand@mykindergarten.net
Phone: +49 89 55064243