Skip to main content

Privacy Policy

We, kitea Services GmbH, operate the website https://kitea-kids.de and collect certain data from you, insofar as this is necessary. The following privacy policy explains what we do with your data, so-called personal data, and why we do this. We also inform you how we protect your data, when the data is deleted, and what rights you have under data protection law.

Who can I contact?

The person responsible for this website is:

Children's Centers Kunterbunt gGmbH

Carl-Schwemmer-Straße 9

90427 Nuremberg / Germany

datenschutz@kinderzentren.de

and

Villa Luna Daycare Centers GmbH/Villa Luna gGmbH

Kastanienweg 15

D-52223 Stolberg

Email: info@villaluna.de

Villa Luna and Kinderzentren Kunterbunt – two educational providers of the Klett Group with more than 25 years of daycare experience – will kiteaWe will inform you when the merger has taken place and the resulting company becomes the data controller within the meaning of data protection law. If you have any questions, please contact us by email at: datenschutz@kitea-kids.de.

You can also reach our team via these contact details. Data Protection Officer (Fresh Compliance GmbH) or another data protection-relevant contactPlease feel free to contact us at any time if you have specific questions about your data, its deletion, or your rights.

What are my rights?

You can contact us at any time if you have questions about your data protection rights or wish to exercise your rights as follows:

  • Right to cancel
 Article 7 paragraph 3 GDPR (e.g. you can contact us if you wish to revoke previously given consent to a newsletter)
  • Right to information Article 15 GDPR (e.g. you can contact us if you would like to know what data we have stored about you)
  • Right to rectification Article 16 GDPR (e.g. you can contact us if your email address has changed and we should replace the old email address)
  • Erasure Article 17 GDPR (e.g. you can contact us if you would like us to delete certain data we have stored about you)
  • Right to demand processing restrictions Article 18 GDPR (e.g. you can contact us if you would like us to not delete your email address, but only use it to send absolutely necessary emails)
  • Right to data portability Article 20 GDPR (e.g. you can contact us to receive your data stored with us in a compressed format, e.g. because you want to provide the data to another website)
  • Contradiction Article 21 GDPR (e.g. you can contact us if you do not agree with any of the advertising or analysis methods listed here)
  • Right of appeal to the competent supervisory authority pursuant to Art. 77 para. 1 GDPR (e.g., you can also contact the data protection supervisory authority in your federal state directly with complaints: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html)

Deletion of data and storage period

Unless otherwise stated, we delete your data as soon as it is no longer needed, for example, your email address after you unsubscribe from our newsletter. Your data will also be blocked or deleted when a retention period expires. Certain data may need to be retained for longer periods for legal reasons. You can, of course, request information about the data we have stored at any time. Data protection inquiries and other legal matters may also be stored for a longer period in accordance with the legally relevant retention and limitation periods.

Visit the website

If you simply wish to browse our website, we do not collect any personal data, with the exception of the data that your browser transmits to enable the visit to the website, primarily:

  • IP address (e.g. 81.91.215.example or 2a02:8109:9440:1198:bdb1:551f:example)
  • Approximate location determination based on IP range (e.g. Berlin)
  • Internet providers (e.g. Vodafone or Deutsche Telekom)
  • Internet speed (e.g. 120 Mbit)
  • Date and time (e.g. 11:55 on 25.05.2023)
  • Last visited website (e.g. google.de)
  • Browser (e.g. Chrome or Safari)
  • Operating system (e.g. Mac OS)
  • Hardware (e.g., Intel processor)

As defense To protect your privacy, we delete or anonymize your IP address after you visit our website. This means that the other technical data can no longer be traced back to you and is used solely for anonymous statistical purposes to optimize our website. Purpose The temporary storage of this data is necessary for technical reasons, namely to establish a connection and to ensure the correct and error-free display of our website. The IP address and the aforementioned technical data are required to display the website, prevent display problems for visitors, and resolve error messages. Legal basis This is the so-called legitimate interest, which was examined within the framework of the aforementioned protective measures and in accordance with the European data protection requirements of Art. 6 para. 1 lit. f) GDPR.

Contact

You can contact us via our contact form or through other means. You can provide us with the following information:

  • Name (optional)
  • Email address
  • Message

As defense Contacting us – just like visiting the rest of the website – is done via an encrypted connection. You can also choose other methods of contact. After successful contact and completion of your inquiry, your data will be deleted. Purpose The sole purpose of the requested data is to contact or communicate with you, and therefore the data will only be used for this purpose. Legal basis This is the so-called legitimate interest, which was examined for the purpose of pursuing the aforementioned protective measures and in accordance with the European data protection requirements of Art. 6 para. 1 lit. f) GDPR.

applications

If you apply to us online or otherwise respond to one of our job postings, we collect and process your personal application data for the purpose of processing your application. This processing is primarily carried out electronically. This is particularly the case if you submit your application documents electronically, for example, by email or via a web form on our website. If we conclude an employment contract, the submitted data will be stored for the purpose of managing the employment relationship in accordance with legal regulations. If we do not conclude an employment contract, the application documents will be deleted six months after notification of our rejection decision – this retention period is based on a potential obligation to provide evidence in proceedings under the German General Equal Treatment Act (AGG). If consent has been given, applications may be retained for longer than six months.

We also use recruiting and application management software provided by the service provider. Rexx Systems GmbH This software helps us to post job advertisements and manage applications centrally. Application data is entered via an input form provided by Rexx, which then transfers the information to our ERP system for further processing. We have concluded a data processing agreement with Rexx to ensure that the personal data of our applicants is processed only according to our instructions. Further information can be found in the service provider's privacy policy. https://www.rexx-systems.com/datenschutz/.

The legal basis for the processing is the decision on the establishment and implementation of an employment relationship pursuant to Art. 6 para. 1 lit. b), Art. 88 GDPR in conjunction with § 26 BDSG.

Social media presence

We use social plugins from Facebook, Instagram and Google on our website for our company presence there.

We process your personal data when you communicate with us via these channels. In particular, we process contact details (e.g., profiles, email addresses, or telephone numbers, if you provide them) and content data (e.g., comments, tags, links).

  • Facebook, operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Facebook application is a social media platform that allows users to connect with other people or businesses, share content (share buttons), join groups, and communicate via text, video, or voice call. Usage data can also be processed and transmitted to Meta for analysis and marketing purposes via integrated Facebook tags. The data is processed within the European Union. Further information can be found in the Privacy Policy by Meta.
  • Instagram, operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This is a social network that, when you click the Instagram button, links the content of our pages to your Instagram profile if you are logged into your Instagram account. This allows Instagram to associate your visit to our pages with your user account. Depending on your location, the data is stored either in the European Union or the USA. You can find more information about this in the Privacy Policy by Meta.
  • Google+These plugins are operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When these plugins are integrated, a direct connection can be established between your device and Google's servers. In particular, your IP address and usage data may be processed. Depending on your location, the data will be processed either within the European Union or in the USA. Further information can be found in Google's privacy policy.
  • YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube to embed videos. This informs the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. Depending on your location, the data is processed either within the European Union or in the USA. Further information can be found in the [link to privacy policy/data protection statement]. Privacy Policy from Google.

As joint controllers pursuant to Article 26 GDPR for these pages, we have entered into agreements with most platform operators whereby they assume the essential data protection obligations regarding informing and fulfilling data subject rights, data security, and reporting and informing in the event of data breaches. As providers of the social media platforms, they have direct access to the necessary information and can also take the necessary measures and provide information immediately. We only receive anonymized user statistics.

You can assert your data subject rights with any of the joint controllers. If you contact us, we will inform the platform providers accordingly. For further information, please refer to the privacy policies and data protection information of the respective network operators.

Giveaways

As part of our prize draws, we collect and process personal data necessary for conducting and administering the prize draw. We also offer you the option to additionally consent to receiving job offers. This consent is voluntary and not a requirement for participation in the prize draw. The aim is to be able to contact potential applicants with suitable job offers. The following data may be collected:

  • Contact detailsName (optional), email address or phone number
  • Participation information: Information you provide as part of the competition, such as answers to questions, content submissions or contributions
  • Winner dataShould you win, we may collect further data, such as your bank details (in the case of a cash prize), in order to transfer the prize to you.

The prize draws are usually offered at trade fairs (e.g., didacta – the education trade fair). Optionally, they may also be conducted or promoted via social media platforms (e.g., Facebook or Instagram). The terms and conditions of participation can be found directly with the respective prize draw. Data processing is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You have the right to withdraw your consent at any time with effect for the future. In this case, further participation in the prize draw is no longer possible.

Your data will only be stored for as long as necessary to process the competition or provide the job offers and will then be deleted, unless there are legal retention obligations. Your data will only be shared with third parties if this is necessary for conducting the competition (e.g., shipping providers) or to fulfill legal obligations.

Note regarding social media contests:

For competitions held on our social media platforms, please also note the privacy policies of the respective platform operators.

Cookie policy

Our website uses cookies in some areas. Cookies are small text files that are usually stored in a folder in your browser. Cookies contain information about your current or last visit to the website:

  • Website name
  • Cookie expiry date
  • Any value

Unless cookies contain a specific expiration date, they are only temporarily stored and automatically deleted when you close your browser or restart your device. Cookies with an expiration date remain stored even after you close your browser or restart your device. These cookies are only removed on the specified date or when you delete them manually.

We use the following three types of cookies on our website:

  • Required cookies (we need these, for example, to display the website correctly for you and to temporarily store certain settings)
  • Functional and performance-related cookies (these help us, for example, to evaluate technical data about your visit and thus avoid error messages)
  • Advertising and analytics cookies (these ensure, for example, that advertisements for shoes are displayed if you have previously searched for shoes)

You can configure, block, and delete cookies in your browser settings. If you delete all cookies from our website, some website functions may not display correctly. Helpful information and instructions for common browsers are provided by the Federal Office for Information Security (BSI): https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html

Recipients of data

In accordance with the descriptions and purposes stated above, we share your data with the following recipients, who are essential for providing our services and communicating with you:

  • KIGA-WEB, Operated by Value Dimensions Management Services GmbH (VDMS), Neubaugasse 36, 1070 Vienna, Austria. This childcare software is used by us for communication between facilities and clients (parents). Relevant information, planned events, and messages can be viewed and sent here. The data is processed within the European Union. Further information can be found in the [link to privacy policy/data protection statement]. Privacy Policy from VDMS.
  • KigaRoo (iframe integration), operated by Speicherhafen GmbH & Co. KG, Shanghaiallee 9, 20457 Hamburg. KigaRoo is an external service providing information and registration functions for childcare. The service is integrated into our website via an iframe. When you access the embedded content, a direct connection is established between your device and KigaRoo's servers. In this process, your IP address, technical connection data, and potentially other interaction data may be processed. The data is processed within the European Union. Further information can be found in the [link to privacy policy/data protection statement]. Privacy Policy from KigaRoo.
  • Little Bird, Operated by Little Bird GmbH, Landsberger Straße 155, 80687 Munich, Germany. Little Bird is an online portal for managing and coordinating childcare requests. The provider is [Name of provider missing in original text]. If Little Bird content or functions are integrated into our website, a connection to the provider's servers is established. In this process, IP addresses, technical connection data, and personal data entered during use may be processed. The data is processed within the European Union. Further information can be found in [Privacy Policy/Data Protection Statement missing in original text]. Privacy Policy by Little Bird.
  • Perspective, Operated by Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg. This service is used to provide our online services and to manage contact, inquiry, and application forms. Both technical access data (e.g., IP address, browser and device information, date and time of access, referrer) and the data you enter into forms (e.g., contact or application data, message content, and any uploaded files) are processed to enable communication with you and to process your inquiries. This processing primarily takes place on servers within the European Union. Further information can be found in the [Privacy Policy/Data Protection Statement - context needed]. Privacy Policy from Perspective.
  • LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is a social network that can be used in particular for company presentation, communication, and the publication of job postings. If LinkedIn content or functions are integrated into our website (e.g., company profile, posts, "Follow" button, or job advertisements), a connection to the provider's servers is established. In this process, IP address, technical connection data, and interaction data (e.g., clicks on embedded content) may be processed. If you are logged into LinkedIn, LinkedIn can associate your visit to our website with your LinkedIn account. The data is processed within the European Union. Further information can be found in the [link to LinkedIn privacy policy]. Privacy Policy from LinkedIn.
  • Indeed, operated by Indeed Ireland Operations Limited, 124 St. Stephen's Green, Dublin 2, Ireland. Indeed is a platform for job postings and recruiting. If content or functions from Indeed are integrated into our website (e.g., job postings, widgets, or links to our company profile), a connection is established to the provider's servers. In this process, IP addresses, technical connection data, and usage and interaction data (e.g., viewing an ad, clicks, search or filter settings within the integrated job posting) may be processed. If an application or contact is initiated via Indeed, the data you enter during the application process (e.g., contact details, resume/application data, and other information provided) will be processed by Indeed. Depending on your location, the data will be processed either within the European Union or in the USA. Further information can be found in the [Privacy Policy/Data Protection Statement - depending on the context]. Privacy Policy from Indeed.
  • kununu, operated by Kununu GmbH, Arabellastraße 23, 81925 Munich, Germany. Kununu is a rating portal for employers and working conditions. If content or functions from Kununu are integrated into our website (e.g., ratings, seals/widgets, or links to our profile), a connection is established to the provider's servers. In this process, the IP address, device and browser information, as well as usage and interaction data (e.g., clicks on the integrated profile/widget) may be processed. When you interact with Kununu (e.g., access, submit, or comment on a rating), Kununu also processes the content data you provide. The data is processed within the European Union. Further information can be found in the [link to Kununu privacy policy]. Privacy Policy from kununu.
  • Facebook Pixel, operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook Pixel allows us to track user behavior after they have been redirected to our website by clicking on a Facebook ad. This process is used to evaluate the effectiveness of advertising campaigns for statistical and market research purposes and can help optimize future advertising efforts. The data collected is anonymous to us, meaning we cannot draw any conclusions about the identity of individual users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile and enabling Facebook to use the data for its own advertising purposes. Depending on your location, the data is processed either within the European Union or in the USA. Further information can be found in the [link to privacy policy/data protection statement]. Privacy Policy by Meta.
  • Google Tag Manager, Google Ads, Google Conversion Tracking, Google Analytics, and Google Analytics Remarketing, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is used to manage and deploy website tags. Google Analytics is used with the anonymization function (anonymizeIP) enabled to analyze user behavior on our website. Google Conversion Tracking is used to measure the success of our advertising campaigns by tracking whether users perform a defined action (e.g., inquiry, registration, purchase) after clicking on an ad. Google Ads and Google Analytics Remarketing are used to target visitors to our website with personalized or interest-based advertising. For this purpose, usage and interaction data are processed and combined with other data from Google to create target groups and display ads. Depending on your location, the data is processed either within the European Union or in the USA. Further information can be found in the Privacy Policy from Google.
  • Google Web Fonts and Google Maps, Operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is used to provide interactive map content (e.g., to display locations and for route planning). Google Web Fonts is used to ensure an attractive and consistent display of fonts on our website. For this purpose, when the respective content is accessed, technically necessary information (e.g., IP address, browser/device information, and the page accessed) is transmitted to Google to deliver the content. Depending on your location, the data is processed either within the European Union or in the USA. Further information can be found in the [link to privacy policy/data protection statement]. Privacy Policy from Google.
  • reCAPTCHA, Operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service distinguishes between input from a human and input from automated, potentially malicious, input. It processes IP addresses, device and browser information, and user behavior. Depending on your location, the data is processed either within the European Union or in the USA. Further information can be found in the [link to privacy policy/data protection statement]. Privacy Policy from Google.
  • Microsoft Forms, Operated by Microsoft Ireland Operations Limited, headquartered at One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We use this form for internal and external surveys and queries, for example, to evaluate implemented measures or to register for company events. During the survey process, the data you provide is collected. Additionally, metadata such as browser identification, operating system used, language settings, and the survey completion time are stored. Depending on your location, the data is processed either within the European Union or in the USA. Further information can be found in the [Privacy Policy/Data Protection Statement - context needed]. Privacy Policy from Microsoft.
  • Microsoft Teams, operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft Teams is a communication platform that we use primarily for video conferences (e.g., online job fairs), online meetings, and chat. Depending on usage, the following data is processed: name and contact details, meeting metadata (e.g., time, duration, participants), communication content (e.g., chat, shared files, screen sharing), and technical connection data (e.g., IP address, device/app information); for audio/video participation, image and sound data are also processed. Depending on your location, the data is processed either within the European Union or in the USA. Further information can be found in the Privacy Policy from Microsoft.
  • WordPress Stats, operated by Aut O'Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl Dublin, D02 AY86 Ireland. This analytics service is used to generate statistical reports on website usage and to optimize the website's technical and content-related aspects. In particular, IP addresses, device and browser information, and usage data are processed. Depending on your location, the data is processed either within the European Union or in the USA. Further information can be found in the Privacy Policy from Automattic.

We only share data that is necessary for the performance of the mutual contract, or if you have given us your consent, for example, in connection with our newsletter or the cookie banner. If no contract yet exists, we share data in certain cases based on legitimate interests. This is the case, for example, if you simply want to visit our website or contact us. When you visit our website, it is in both our interests to provide access to our services and to communicate with each other.

We have also concluded data processing agreements with all external recipients to comply with European legal requirements. Depending on your location, some of the service providers mentioned above will also transfer your data to the United States, where indicated. Currently, there is an adequacy decision between the EU and the US. This confirms that the US provides an adequate level of protection for personal data for organizations certified under the EU-US Data Privacy Framework. Additional data processing agreements, known as standard contractual clauses, are also in place. Furthermore, we review each service provider together with our data protection officer and ensure that additional security measures are in place, such as strong data encryption.

Privacy policy as of: February 2026