Privacy policy

Last updated: 23. Juni 2026

Protecting your personal data matters to us. We process your data only on the basis of applicable legal requirements (GDPR, BDSG). This policy explains the most important aspects of how we handle data on this website.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Mallik Godjé Issa
Holstenweg 19
24211 Preetz
Deutschland
Telefon: 0170 5552978
E-Mail: info@kids-sparplan.de

2. General principles of data processing

We process personal data only to the extent necessary to provide a functioning website and our content and services, or where you have given your consent. Processing generally takes place only where a legal basis exists.

The legal bases we rely on are, in particular, GDPR Art. 6(1)(a) (consent), Art. 6(1)(b) (contract and pre-contractual measures), and Art. 6(1)(f) (legitimate interests).

3. Hosting

This website is hosted by Vercel Inc. (USA). When you visit our website, Vercel processes technical access data (see Server log files below) as a processor on our behalf in order to deliver and secure the site. The legal basis is GDPR Art. 6(1)(f) (legitimate interest in secure and reliable operation).

Data transfers to the USA are safeguarded by a data processing agreement incorporating EU Standard Contractual Clauses and supplementary protective measures. You can find further information in Vercel's privacy policy: vercel.com/legal/privacy-policy.

Server log files

When you access this website, your browser automatically transmits certain information that we collect. This typically includes: the URL accessed, date and time of access, amount of data transferred, referrer URL, browser and operating system used, and your IP address. This data is used solely to provide and secure the website and is not combined with any other data sources.

SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in your browser's address bar.

4. Contact form and consultation request

When you send us a request via the form on the consultation page, we process the data you provide: your name, email address, optionally your phone number, your inquiry, your preferred contact method, an optional preferred time, and your message. We use this data solely to handle your request and get in touch with you.

The legal basis is GDPR Art. 6(1)(a) (your consent) and GDPR Art. 6(1)(b) to the extent your request relates to the initiation of a contract. You may withdraw your consent at any time with future effect, for example by sending us an informal email.

The technical delivery of these messages is handled by STRATO AG, Berlin (Germany), acting as a processor that provides our email mailbox (info@kids-sparplan.de).

If you reached us through a Google ad, the form also sends us the ad click identifier (gclid) along with the campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and the page you arrived on. This tells us which ad prompted your enquiry. These details are held only in your browser's session storage for the duration of your visit and are deleted at the latest when you close the tab. No cookie is set, and no data is reported back to Google. The legal basis is our legitimate interest in understanding where enquiries come from (Art. 6(1)(f) GDPR).

5. Family Compass and email summary

The Family Compass is a voluntary self-assessment. Your answers are evaluated entirely within your browser and are not automatically transmitted to us.

Only if you voluntarily provide your email address at the end and consent to receiving it do we transmit your email address, optionally your first name, and your result category to us, so that we can send you your personal summary and occasional educational tips on saving for your child. The legal basis is GDPR Art. 6(1)(a) (consent). You may unsubscribe at any time with a single click, or send us an informal message; this withdraws your consent with future effect.

6. Fonts

This website uses fonts that are loaded locally from our own server. No connection is made to Google servers or any other third party for this purpose, and no personal data is transmitted to third parties in this context.

7. Cookies and web analytics (Google Analytics)

On your first visit we ask, via a notice banner, whether you consent to web analytics. Only if you click "Accept" will analytics cookies be set and the analytics tool loaded. If you decline or make no selection, no analytics cookies are set and no data is sent to Google. In that case no usage profiles are created; the only data processed is the server log files described above.

We store your choice locally in your browser (in so-called Local Storage) so we do not have to ask you on every page load. You can withdraw or change your consent at any time via the "Cookie settings" link in the page footer.

Google Analytics 4

Only with your consent do we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This helps us understand which content is read and how visitors find us, so we can improve the site.

After your consent, Google Analytics processes, among other things, a truncated IP address, information about your browser and device, the pages you visited, your time on site, and the source of your visit. IP anonymization is enabled, so your IP address is shortened. We do not combine this data with other data or attempt to identify you personally.

The legal basis is exclusively your consent under GDPR Art. 6(1)(a) in conjunction with § 25(1) TDDDG. You may withdraw your consent at any time with future effect via "Cookie settings" in the page footer.

Use of this service may result in data being transferred to Google LLC in the USA. This transfer is safeguarded by EU Standard Contractual Clauses; Google LLC is also certified under the EU-US Data Privacy Framework. For more information, see Google's privacy policy: policies.google.com/privacy. We delete collected analytics data after no more than 2 months.

8. Recipients of data

Your data is passed on to third parties only to the extent necessary to process your request or where we are legally required to do so. The processors we use (hosting, email delivery) are named above and are contractually bound to comply with the GDPR. We do not sell your data.

9. Retention periods

We retain personal data only for as long as necessary for the purposes stated or as required by statutory retention obligations. Requests submitted via the contact form are kept until processing is complete and no further follow-up questions are expected, after which we delete them unless legal obligations require otherwise.

10. Your rights

With respect to the personal data we hold about you, you have the following rights:

• Right of access (GDPR Art. 15)
• Right to rectification (GDPR Art. 16)
• Right to erasure (GDPR Art. 17)
• Right to restriction of processing (GDPR Art. 18)
• Right to data portability (GDPR Art. 20)
• Right to object to processing (GDPR Art. 21)
• Right to withdraw a given consent (GDPR Art. 7(3))

To exercise any of your rights, simply send an informal message to info@kids-sparplan.de.

11. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority. The authority with jurisdiction over us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98, 24103 Kiel
www.datenschutzzentrum.de

12. Updates to this policy

This privacy policy is currently valid and reflects the version date stated above. As our website develops or legal requirements change, it may become necessary to update this policy.