Privacy policy

How we process your personal data under GDPR.

1. Controller

Manuel Gollner
Tattenbachstraße 10
80538 München
Email for privacy requests: datenschutz@passt-auf.de

1a. Who receives your request

This page is a teenager's offering on the platform passt-auf.de. A request sent via the request form is forwarded to her so she can reply and arrange the childcare with you. She and her parents or guardians are known to us; we do not publish her contact details — you receive them with her reply.

2. General

We take data protection seriously and process as little data as possible. We use no tracking cookies, no advertising third-parties, no social media plugins.

3. Server logs

When you visit the website, your browser sends technical data to our server (Hetzner): IP address, date/time, browser type, page visited. The IP address is cryptographically hashed before storage and cannot be reversed.

  • Recipient: the teenager running this offering (see 1a)
  • Purpose: stability and security (rate-limiting, abuse detection)
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
  • Retention: 30 days, then automatic deletion

4. Booking request form

When you send a booking request, we process the data you enter: name (required), email (required), phone (optional), service type, preferred date, number of children, free message.

  • Purpose: handling your request and contract initiation
  • Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
  • Retention: until the request is processed; longer if a contract is concluded, as legally required

5. Family and children data (when bookings are confirmed)

For confirmed bookings, we additionally store contact details, address, names and ages of children, allergies, food preferences, sleep habits, emergency contacts, and notes from past sessions.

  • Purpose: safe, child-adapted care
  • Legal basis: Art. 6(1)(b) GDPR (contract fulfilment); for health information (allergies): Art. 9(2)(a) GDPR (consent — by sharing)
  • Retention: as long as the contractual relationship exists; immediate deletion on request

6. Email sending

Confirmation and reminder emails are sent via united-domains AG (Gautinger Straße 10, 82319 Starnberg, Germany). A data processing agreement is in place.

7. Hosting

The site runs on a server of Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany). All data is processed exclusively in Germany.

8. Analytics with Plausible

We use Plausible Analytics — a self-hosted, privacy-friendly analytics tool — to understand how many people visit the site and which pages are popular. Plausible runs on our own server (Hetzner, Germany); no data is shared with third parties.

Plausible is cookieless, uses no fingerprinting, and does not process personal data within the meaning of the GDPR. Only aggregated, anonymous data is collected:

  • Number of page views and visitors per day
  • Visited URLs (no personal paths)
  • Referrer (where the visit came from, e.g. Google)
  • Country (derived from the IP and then discarded)
  • Browser and operating system family

The IP address is not stored — Plausible briefly uses it to compute an anonymous hash that is deleted after 24 hours and is not reversible.

  • Purpose: understanding website usage, improving content
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly analytics)
  • Retention: aggregated stats indefinitely, raw data max 24 h
  • Details: plausible.io/data-policy

Since Plausible uses neither cookies nor personal data, no consent under § 25 TTDSG is required.

9. Cookies

We use only technically necessary cookies (a session cookie for the internal booking backend, used only by signed-in operators). Functional cookies do not require consent. No tracking cookies are set.

10. Flyer QR codes

We use QR codes on printed flyers and record scans internally to learn which locations work well. We only record:

  • Timestamp of the scan
  • Hashed IP address (not reversible)
  • Device type (mobile/desktop)

No personal identification possible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring marketing effectiveness).

11. Your rights

You have the right to:

  • Access your data (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Deletion (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent at any time (where applicable)

A short email to datenschutz@passt-auf.de is sufficient.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection authority. Competent for us:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany

As of May 2026. In legal disputes, the German version applies.