KIDS-SPARPLAN LogoKids-Sparplan. Back to home Deutsch

Privacy policy

Last updated: 23. Juni 2026

Protecting your personal data matters to us. We process your data only on the basis of applicable legal requirements (GDPR, BDSG). This policy explains the most important aspects of how we handle data on this website.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Mallik Godjé Issa
Holstenweg 19
24211 Preetz
Deutschland
Telefon: 0170 5552978
E-Mail: info@kids-sparplan.de

2. General principles of data processing

We process personal data only to the extent necessary to provide a functioning website and our content and services, or where you have given your consent. Processing generally takes place only where a legal basis exists.

The legal bases we rely on are, in particular, GDPR Art. 6(1)(a) (consent), Art. 6(1)(b) (contract and pre-contractual measures), and Art. 6(1)(f) (legitimate interests).

3. Hosting

This website is hosted by Vercel Inc. (USA). When you visit our website, Vercel processes technical access data (see Server log files below) as a processor on our behalf in order to deliver and secure the site. The legal basis is GDPR Art. 6(1)(f) (legitimate interest in secure and reliable operation).

Data transfers to the USA are safeguarded by a data processing agreement incorporating EU Standard Contractual Clauses and supplementary protective measures. You can find further information in Vercel's privacy policy: vercel.com/legal/privacy-policy.

Server log files

When you access this website, your browser automatically transmits certain information that we collect. This typically includes: the URL accessed, date and time of access, amount of data transferred, referrer URL, browser and operating system used, and your IP address. This data is used solely to provide and secure the website and is not combined with any other data sources.

SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" in your browser's address bar.

4. Contact form and consultation request

When you send us a request via the form on the consultation page, we process the data you provide: your name, email address, optionally your phone number, your inquiry, your preferred contact method, an optional preferred time, and your message. We use this data solely to handle your request and get in touch with you.

The legal basis is GDPR Art. 6(1)(a) (your consent) and GDPR Art. 6(1)(b) to the extent your request relates to the initiation of a contract. You may withdraw your consent at any time with future effect, for example by sending us an informal email.

The technical delivery of these messages is handled by STRATO AG, Berlin (Germany), acting as a processor that provides our email mailbox (info@kids-sparplan.de).

So that your enquiry does not get lost, we also create a record for it in our task management system, Trello. That is where we track who will get back to you, when, and where things stand. Access is limited to the people handling your request. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in handling enquiries in an orderly and traceable manner (Art. 6(1)(f) GDPR). Trello is operated by Atlassian and processing takes place on servers in the United States. This transfer is safeguarded by EU Standard Contractual Clauses; Atlassian, Inc. (San Francisco, California, USA) is also certified under the EU-US Data Privacy Framework, and Trello, Inc. is expressly listed there as a covered entity.

If you reached us through an ad, the form also sends us the ad click identifier (gclid for Google, fbclid for Meta, meaning Facebook and Instagram) along with the campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and the page you arrived on. This tells us which ad prompted your enquiry. These details are held in your browser's storage, not in a cookie. Without your consent this happens only for the duration of your visit (session storage), and they are deleted at the latest when you close the tab. If you have consented to measurement, we additionally keep them in your browser's local storage for up to 90 days, so that your enquiry can still be matched to the right ad if you get in touch on a later visit. If you withdraw your consent via the Cookie settings link, we delete this entry again; you can also remove it yourself by clearing the site data in your browser. No data is reported back to Google or Meta by this route; for measurement via the Meta pixel see section 7. The legal basis for the longer retention is your consent (Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG); otherwise it is our legitimate interest in understanding where enquiries come from (Art. 6(1)(f) GDPR).

Enquiries via a form on Facebook or Instagram

We run ads on Facebook and Instagram that let you submit your enquiry right there, without visiting our website. Meta calls this an instant form. In that case you enter your details on Meta's platform, and Meta pre-fills your name, email address and phone number from your profile there; you can change them before submitting. Processing within the platform is the responsibility of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, and Meta's own privacy policy applies there: facebook.com/privacy/policy.

Once you have submitted the form, we retrieve the data you provided (name, email address, phone number) through an interface offered by Meta. From that retrieval onwards we are the controller, and everything proceeds exactly as it does for an enquiry sent through our website: an email to our team, a copy in our mailbox and a record in Trello, as described above in this section. We also learn which ad and which campaign your enquiry came from. The legal basis is Art. 6(1)(a) GDPR (the consent you gave in the form) and Art. 6(1)(b) GDPR to the extent your request relates to the initiation of a contract.

Meta additionally keeps your details in its own lead management for up to 90 days and deletes them afterwards. If you would like us to delete your enquiry, an informal message to us is enough; for deletion at Meta please also contact Meta directly.

5. Family Compass and email summary

The Family Compass is a voluntary self-assessment. Your answers are evaluated entirely within your browser and are not automatically transmitted to us.

Only if you voluntarily provide your email address at the end and consent to receiving it do we transmit your email address, optionally your first name, and your result category to us, so that we can send you your personal summary and occasional educational tips on saving for your child. The legal basis is GDPR Art. 6(1)(a) (consent). You may unsubscribe at any time with a single click, or send us an informal message; this withdraws your consent with future effect.

6. Fonts

This website uses fonts that are loaded locally from our own server. No connection is made to Google servers or any other third party for this purpose, and no personal data is transmitted to third parties in this context.

7. Cookies and web analytics (Google Analytics)

On your first visit we ask, via a notice banner, whether you consent to web analytics. Only if you click "Accept" will analytics cookies be set and the analytics tool loaded. If you decline or make no selection, no analytics cookies are set and no data is sent to Google. In that case no usage profiles are created; the only data processed is the server log files described above.

We store your choice locally in your browser (in so-called Local Storage) so we do not have to ask you on every page load. You can withdraw or change your consent at any time via the "Cookie settings" link in the page footer.

Google Analytics 4

Only with your consent do we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This helps us understand which content is read and how visitors find us, so we can improve the site.

After your consent, Google Analytics processes, among other things, a truncated IP address, information about your browser and device, the pages you visited, your time on site, and the source of your visit. IP anonymization is enabled, so your IP address is shortened. We do not combine this data with other data or attempt to identify you personally.

The legal basis is exclusively your consent under GDPR Art. 6(1)(a) in conjunction with § 25(1) TDDDG. You may withdraw your consent at any time with future effect via "Cookie settings" in the page footer.

Use of this service may result in data being transferred to Google LLC in the USA. This transfer is safeguarded by EU Standard Contractual Clauses; Google LLC is also certified under the EU-US Data Privacy Framework. For more information, see Google's privacy policy: policies.google.com/privacy. We delete collected analytics data after no more than 2 months.

Meta pixel

Only with your consent do we use the Meta pixel, a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. We use it to measure whether our ads on Facebook and Instagram actually lead to enquiries, and to avoid showing the same ad to the same people more often than necessary.

Once you consent, Meta processes your IP address, information about your browser and device, the page you visited and whether you submitted the enquiry form. Cookies are set in the process. If you are logged in to Facebook or Instagram, Meta can link this information to your account there. We ourselves only receive aggregated reports and cannot identify you in them.

For the collection of this data through the pixel and its transfer to Meta, we are joint controllers with Meta (Art. 26 GDPR). Meta makes the essence of that arrangement available at facebook.com/legal/controller_addendum. Meta is solely responsible for whatever it does with the data afterwards.

The legal basis is solely your consent under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw it at any time with effect for the future via “Cookie settings” in the footer.

This may involve a transfer of data to Meta Platforms, Inc. in the USA. Such transfers are covered by the EU standard contractual clauses; Meta Platforms, Inc. is also certified under the EU-US Data Privacy Framework. For details see Meta's privacy policy: facebook.com/privacy/policy.

8. Recipients of data

Your data is passed on to third parties only to the extent necessary to process your request or where we are legally required to do so. The processors we use are: STRATO AG, Berlin (website hosting and email mailbox), Atlassian (Trello, task management for handling your enquiry, processed in the USA), and Google Ireland Limited, Dublin (web analytics, only with your consent). All are contractually bound to comply with the GDPR. For measuring our ads via the Meta pixel we are joint controllers with Meta Platforms Ireland Limited, Dublin, likewise only with your consent; see section 7 for details. We do not sell your data.

9. Retention periods

We retain personal data only for as long as necessary for the purposes stated or as required by statutory retention obligations. Requests submitted via the contact form are kept until processing is complete and no further follow-up questions are expected, after which we delete them unless legal obligations require otherwise.

10. Your rights

With respect to the personal data we hold about you, you have the following rights:

To exercise any of your rights, simply send an informal message to info@kids-sparplan.de.

11. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority. The authority with jurisdiction over us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98, 24103 Kiel
www.datenschutzzentrum.de

12. Updates to this policy

This privacy policy is currently valid and reflects the version date stated above. As our website develops or legal requirements change, it may become necessary to update this policy.