Privacy policy

1. Controller

The controller within the meaning of Article 4 (7) GDPR is:

No data protection officer has been appointed. The requirements of Article 37 GDPR in conjunction with § 38 of the German Federal Data Protection Act (BDSG) are not met, since as a rule fewer than 20 people are permanently engaged in the automated processing of personal data. For all data protection matters, please contact the address above directly.

2. Scope of this policy

This privacy policy applies solely to this website (haushelden-website.web.app) – that is, to the information and marketing pages you are reading right now.

The Haushelden web app itself is a separate service at its own address. There – unlike here – user accounts are created and data relating to children and young people is processed. The app’s own privacy policy applies to that, and you can read it before registering.

On this website we address parents and legal guardians. We deliberately collect no data from children here and require no registration. The “Get started”, “Log in” and “Try it free” buttons are plain links to the app; data processing in the context of a user account only begins there.

3. Your rights as a data subject

You have the following rights against us with regard to the personal data concerning you:

• Access to whether and which data we process, and to a copy of that data (Article 15 GDPR).
• Rectification of inaccurate data or completion of incomplete data (Article 16 GDPR).
• Erasure of the data concerning you (Article 17 GDPR), unless statutory retention obligations prevent this.
• Restriction of processing (Article 18 GDPR).
• Data portability – receipt of the data you have provided in a structured, commonly used, machine-readable format (Article 20 GDPR).
• Objection to processing based on a legitimate interest (Article 21 GDPR).
• Withdrawal of consent given, with effect for the future (Article 7 (3) GDPR). The lawfulness of processing carried out up to the point of withdrawal remains unaffected.
• Complaint to a supervisory authority (Article 77 GDPR).

The supervisory authority responsible for us is:

Independently of this, you may also contact the supervisory authority of your habitual residence or place of work.

4. Hosting and server log files

This website is operated on Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We have concluded a data processing agreement with Google pursuant to Article 28 GDPR.

When you access this website, your browser transmits technically necessary data which is recorded in server log files:

• IP address of the requesting device
• date and time of access
• page or file requested and the volume of data transferred
• notification of successful retrieval (HTTP status code)
• browser type and version, operating system, referrer URL

Further information: firebase.google.com/support/privacy

5. Google Fonts

To display fonts consistently, we embed the “Fredoka” and “Nunito” font families via Google Fonts, a service of Google Ireland Limited. When you access this website, your browser loads the font files from a Google server (fonts.googleapis.com and fonts.gstatic.com). Your IP address is transmitted to Google in the process; transmission to servers in the USA cannot be ruled out.

According to Google, Google Fonts sets no cookies and does not use the requests to build profiles. Further information: developers.google.com/fonts/faq/privacy and policies.google.com/privacy

6. Analytics with Google Analytics for Firebase

We want to understand which content on this website gets read, so that we can improve it. For that we use Google Analytics for Firebase, a service of Google Ireland Limited. The data processed includes in particular the pages accessed, time spent, approximate location at country/region level, device type, browser, operating system, referrer, and a pseudonymous identifier used to recognise returning visits. Your IP address is shortened by Google before it is used for analysis.

Only with your consent

The analytics code is loaded only after your express consent. As long as you have not clicked “Accept” in the consent banner, no Google Analytics script is executed, no cookie is set and no identifier is assigned. If you click “Decline”, the website remains fully usable.

Changing your decision

Note: this display requires JavaScript.

You can withdraw your consent at any time with effect for the future. The lawfulness of processing carried out up to that point remains unaffected.

Choose consent again

You can also prevent collection by Google using the browser add-on Google provides: tools.google.com/dlpage/gaoptout. Further information on data processing by Google: policies.google.com/privacy

7. Cookies and local storage

Without your consent, this website sets no cookies. The only thing stored is your decision from the consent banner – in your browser’s local storage under the key hh-consent. This storage requires no consent under § 25 (2) no. 2 TDDDG, because it is strictly necessary in order to act on your wishes and to avoid asking you again on every page view. It contains no identifier and allows no conclusions about you personally.

If you consent to analytics, Google Analytics additionally sets its own cookies – see section 6.

In particular, we do not use: Google Ads or conversion tracking, remarketing, Google Maps, Google reCAPTCHA, YouTube or Vimeo embeds, social media plug-ins from Facebook, Instagram, X/Twitter or LinkedIn, or newsletter tracking with tracking pixels.

8. Getting in touch by email

This website contains no contact form. If you contact us by email, we process the details you provide solely in order to deal with your enquiry.

To receive and send our email we use Brevo, a service of Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. When you write to us, your email address, the subject line, the content of your message, any attachments and technical transmission data are processed on Brevo’s servers. We have concluded a data processing agreement with Brevo pursuant to Article 28 GDPR; according to the provider, the processing takes place on servers within the European Union.

We do not send a newsletter. Brevo serves us purely as a mailbox and as the route by which our business correspondence is sent. We do not use tracking pixels or any measurement of opens and clicks.

Further information on data processing by Brevo: brevo.com/legal/privacypolicy

9. Transfers to third countries

The Google services we use are provided to users in the European Economic Area by Google Ireland Limited. However, processing by the parent company Google LLC in the USA cannot be ruled out.

Google LLC is certified under the EU-U.S. Data Privacy Framework. By adequacy decision of 10 July 2023, the European Commission determined that an adequate level of data protection exists in the USA for certified companies (Article 45 GDPR). In addition, Google has incorporated the European Commission’s standard contractual clauses pursuant to Article 46 (2) (c) GDPR.

According to the provider, our email service provider Brevo processes the data on servers within the European Union. No transfer to a third country takes place.

The former “EU-US Privacy Shield” has been invalid since the judgment of the European Court of Justice of 16 July 2020 (Case C-311/18, “Schrems II”) and is no longer a valid basis for data transfers.

10. Recipients and processors

We do not pass your data on for advertising purposes and we do not sell data. Only the following service providers are involved, acting for us on our instructions:

Beyond that, we only pass on data where we are legally obliged to do so or where you have expressly consented.

11. No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.

12. Currency of this policy

This privacy policy is dated 11 August 2026. As this website develops further, or if legal requirements change, an update may become necessary. You will always find the current version at this address.

You can reach us on all data protection matters at support@haushelden.io. We answer requests under Articles 15 to 21 GDPR without undue delay, and within one month at the latest.