Privacy Policy

Version of 10.02.2026 – Optimized for Privacy by Design

1. Introduction and Overview

We hereby inform you about the processing of personal data on our website kitazauberwald.info. Our online presence was fundamentally modernized in 2026 to meet the highest standards of data security, accessibility, and privacy protection.

2. Controller

Kita Zauberwald e.V.
Kuhloweg 7
33689 Bielefeld
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: +49 5205 - 70463
Represented by the Board.

3. Web Hosting and Server Log Files

We host our website with STRATO AG, Pascalstraße 10, 10587 Berlin. When the site is accessed, technical data is recorded in log files (including IP address, browser type, time). This data is stored for a maximum of 7 days for security and IT protection purposes.

Legal basis: Art. 6(1)(f) GDPR. A data processing agreement (DPA) according to Art. 28 GDPR is in place.

4. Protected Parent Area

We use a password-protected area for internal communication. The following rules apply:

• Account creation: Self-registration is not possible. User accounts are created exclusively by the daycare management. Only the data necessary for the childcare relationship is stored.
• Password security: Users must change their initial password upon first login.
• Children’s data: Name, date of birth, and gender of the children are stored in the system and assigned to the parents’ accounts. To ensure data integrity, these details can only be edited or deleted by the daycare management.
• Voluntary parent list: Users may voluntarily provide additional contact details (e.g., phone number) for an internal list. These details can be changed or deleted by the user at any time.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR (consent for voluntary lists).

5. Multilinguality and Language Handling

Our website uses Joomla 6 language features. To display content in your preferred language, your browser’s language settings or your manual selection via the language switcher are evaluated. Technically necessary session cookies may be used. No tracking takes place.

6. LocalStorage (Functional Settings)

To store your accessibility preferences (e.g., disabling animations, contrast mode) permanently, we use your browser’s LocalStorage. These data remain solely on your device.

Legal basis: § 25(2)(2) TDDDG (strictly necessary function).

7. Spam Protection (Friendly Captcha)

To protect our forms from automated attacks, we use Friendly Captcha (Germany). This solution works without tracking and without cookies. Verification is performed via a cryptographic puzzle directly on your device.

Legal basis: Art. 6(1)(f) GDPR (IT security).

8. Local Integration of Resources (Privacy by Design)

We use no external Content Delivery Networks (CDNs). To protect your IP address, the following resources are installed locally on our server in Germany:

• Fonts: Google Fonts and Font Awesome Icons.
• Graphics: All logos (including NRW state logos) and images.

No data is transferred to third-party servers (e.g., Google) when loading the page.

9. Your Rights and Supervisory Authority

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. For data protection complaints, you may contact the competent supervisory authority:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2-4, 40213 Düsseldorf
Website: www.ldi.nrw.de