We take your privacy seriously. This policy explains how KitaBlitz collects, uses, and protects your personal data.
This is a convenience translation. The German version of this privacy policy prevails in case of any discrepancy.
Thank you for your interest in our website and our service KitaBlitz. The protection of your personal data is of great importance to us. In this privacy policy, we inform you about the processing of your personal data when using our website and our service in accordance with applicable data protection law.
The data controller is:
Kitablitz
Rosenfelder Ring 160
10315 Berlin
Germany
Email: [email protected]
Under applicable data protection law, you have the following rights:
You have the right to obtain information about the personal data we process about you.
You have the right to request the correction of inaccurate data or the completion of incomplete data.
You have the right to request the deletion of your personal data, provided there are no statutory retention obligations. To delete your account and all associated data, please send an email to [email protected].
You have the right to request the restriction of the processing of your data.
You have the right to receive your data in a structured, commonly used, and machine-readable format.
You have the right to object to the processing of your data where such processing is based on legitimate interests. To exercise your right to object, please send an email to: [email protected]
Where processing is based on your consent, you may withdraw it at any time with effect for the future.
You have the right to lodge a complaint with the competent data protection supervisory authority regarding the processing of your data. The competent supervisory authority for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
Friedrichstr. 219
10969 Berlin
Germany
https://www.datenschutz-berlin.de
Each time you access our website, information is automatically collected in so-called server log files, which your browser automatically transmits to us. These include:
Legal basis: Legitimate interest. Our legitimate interest lies in ensuring the stability, security, and optimization of our website.
Retention period: Server log files are stored for a maximum of 30 days and then automatically deleted.
Hosting: Our website is hosted by Hetzner Online GmbH (Germany). The servers are located exclusively in Germany, so no data transfer to third countries takes place. For more information, please see Hetzner's Privacy Policy.
Our website offers a feature to search for kindergartens near you. For this purpose, your browser location may be queried via the Geolocation API.
Collection: Location data is only collected if you explicitly grant the corresponding browser permission. Without your consent, no location data is captured.
Use: Location data is used solely to calculate the distance to kindergartens and is only stored for the duration of your session. No permanent storage in our database takes place.
Legal basis: Your consent.
Withdrawal: You can revoke the location permission at any time in your browser settings.
When using our service, we collect and process the following personal data:
To provide our service — sending kindergarten applications on your behalf — we collect the following personal data about your child:
Legal basis: Performance of contract. Processing is necessary for the performance of the contract: you instruct us to send applications on behalf of your child, and we need this data to create personalised application emails.
Encryption: All child profile data is stored encrypted and transmitted over encrypted connections. No member of our team can view this data in plain text.
Deletion: You may request deletion of your child's data at any time — independently of the general right to erasure in Section 3.3. Please send an email to [email protected].
This data is stored encrypted:
For payments through our payment processor Stripe:
Complete payment information such as card numbers is processed exclusively by Stripe and is not stored on our servers.
This data is stored encrypted:
When using our contact form, we collect:
This data is not stored in our database but is exclusively forwarded to our support team via email. Processing is based on pre-contractual measures or our legitimate interest in answering inquiries.
We process your personal data for the following purposes:
Your data is processed on the following legal bases:
To provide our service, we use the following third-party providers:
Our website and database are hosted by Hetzner Online GmbH (Germany). Hetzner processes server log files and technical data as part of hosting. Since the servers are located in Germany, no data transfer to third countries takes place. A Data Processing Agreement (DPA) is in place with Hetzner. For more information, please see Hetzner's Privacy Policy.
For payment processing, we use Stripe, Inc. (USA). Stripe processes your payment data in compliance with the EU-US Data Privacy Framework. A Data Processing Agreement (DPA) is in place with Stripe. For more information, please see Stripe's Privacy Policy.
For sending emails and tracking delivery, we use SendGrid (Twilio Inc., USA). SendGrid processes email addresses, email content, and delivery events (processing, delivery, bounces, deferrals, drops) via webhooks. These events are used to track the status of your applications. SendGrid is certified under the EU-US Data Privacy Framework. A Data Processing Agreement (DPA) is in place with Twilio/SendGrid. For more information, please see Twilio's Privacy Policy.
For AI-powered features, we use the API of OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA. OpenAI is certified under the EU-US Data Privacy Framework. A Data Processing Agreement (DPA) is in place with OpenAI. OpenAI does not use API inputs to train its models and retains request data for a limited period in accordance with their data processing agreement. For more information, please see OpenAI's Privacy Policy.
For four of the five AI features, personal identifiers such as names, contact details, and financial information are automatically replaced with typed placeholders on our servers before the data is transmitted to OpenAI. For example, your child is referred to as [CHILD_NAME]. The real name is substituted back only after the AI response is returned, on our servers. In these cases, OpenAI never receives the actual personal data.
Email Generation: When generating application emails to kindergartens, the Kita name, the child's gender category, and the Kita voucher status are transmitted. The child's name and age are transmitted only as placeholders [CHILD_NAME] and [CHILD_AGE] — never as real values. Legal basis: Performance of contract.
Reply Email Generation: When generating reply emails to kindergarten responses, the Kita name (public directory data) and the incoming email text are transmitted, with personal identifiers replaced by placeholders as described above. Legal basis: Performance of contract.
Reply Analysis: For the automatic classification of kindergarten replies (e.g., acceptance, rejection, waiting list), the incoming email text is transmitted, with personal identifiers replaced by placeholders as described above. Legal basis: Performance of contract and automated decision-making for contract performance.
Follow-Up Email Generation: When generating follow-up emails for applications without a response, the Kita name, the child's age, and the number of previous follow-ups are transmitted. The child's name and the parent's name are transmitted only as placeholders [CHILD_NAME] and [PARENT_NAME]. If you enter a personal note, personal identifiers in it are replaced by placeholders as described above before transmission. Legal basis: Performance of contract.
Content Moderation: Text you enter (such as personal notes or reply messages) is transmitted in full to the OpenAI Moderation API. No personal data stripping is applied for this feature, because removing personal identifiers would reduce the effectiveness of the moderation check. Legal basis: Performance of contract and legitimate interest.
Our website kitablitz.com uses Cloudflare, Inc. (USA) for Content Delivery Network (CDN), DNS services, and security features (DDoS protection). When you access our website, technical data such as your IP address is routed through Cloudflare servers. Cloudflare is certified under the EU-US Data Privacy Framework. A Data Processing Agreement (DPA) is in place with Cloudflare. For more information, please see Cloudflare's Privacy Policy.
This website uses the typefaces "Fredoka" and "Nunito" (originally from Google Fonts). The fonts are hosted locally on our own server and served directly from our website. No connection is made to servers of Google or any other third party. Your IP address is not transmitted to Google.
We use Plausible Analytics, a privacy-friendly, open-source web analytics tool operated by Plausible Insights OÜ (Estonia, EU). Plausible does not use cookies, does not collect personal data, and does not track users across websites. No IP addresses are stored or processed. All data is aggregated and anonymous. Since Plausible's servers are located in the EU, no data transfer to third countries takes place. For more information, please see Plausible's Privacy Policy and their Data Policy.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR). We have a legitimate interest in understanding how our website is used in order to improve it. Plausible's privacy-first approach ensures that this interest does not override your rights and freedoms, as no personal data is processed.
We inform you about automated decision-making that we carry out as part of our service.
KitaBlitz automatically analyses incoming emails from kindergartens using AI to detect the application status. The system classifies the status into the following categories:
Logic: Classification is performed by an AI language model (OpenAI GPT) that analyses the text of the incoming Kita email and assigns the most likely status. The decision is based solely on the content of the email.
Effect: The classification result is displayed as the application status in your account and influences which actions and notifications are presented to you (e.g., follow-up reminders, status display on the dashboard).
Legal basis: The automated processing is necessary for the performance of the contract, as automatic status detection is a core feature of the service.
Your right to review: The automatically detected classification is not a binding decision. You can manually adjust the application status in your account at any time if you disagree with the automatic assessment. For questions or objections, please contact: [email protected]
We do not carry out profiling that produces legal effects or similarly significantly affects you.
We employ technical and organizational measures to protect your data:
We store your personal data only for as long as necessary for the respective purposes:
Our website uses cookies to enable certain features:
These cookies are required for the operation of the website. They enable basic functions such as login and navigation. Without these cookies, the website cannot function properly.
Legal basis: Legitimate interest. These cookies are technically necessary for the operation of the website.
For website analytics, we use Plausible Analytics, which does not use cookies and does not collect any personal data (see Section 9.7). No tracking cookies are set that track your behavior beyond our website. We do not use any cookies for analytics or advertising purposes.
You can manage and delete cookies in your browser. Please note that disabling cookies may limit the functionality of our website. Here you can find instructions for the most common browsers:
We reserve the right to update this privacy policy as necessary to adapt it to changes in the legal landscape or changes to our service. The current version is always available on our website. We will inform you by email of any material changes.
If you have questions about the processing of your personal data or wish to exercise your rights, you can contact us at any time:
Email: [email protected]
Kitablitz
Rosenfelder Ring 160
10315 Berlin
Germany