Privacy policy
1. Controller
Linn-Marie Gollnerc/o Manuel Gollner (legal representative)
Tattenbachstraße 10
80538 München, Germany
Email: hallo@linn-passt-auf.de
2. General
We take data protection seriously and process as little data as possible. We use no tracking cookies, no advertising third-parties, no social media plugins.
3. Server logs
When you visit the website, your browser sends technical data to our server (Hetzner): IP address, date/time, browser type, page visited. The IP address is cryptographically hashed before storage and cannot be reversed.
- Purpose: stability and security (rate-limiting, abuse detection)
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
- Retention: 30 days, then automatic deletion
4. Booking request form
When you send a booking request, we process the data you enter: name (required), email (required), phone (optional), service type, preferred date, number of children, free message.
- Purpose: handling your request and contract initiation
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
- Retention: until the request is processed; longer if a contract is concluded, as legally required
5. Family and children data (when bookings are confirmed)
For confirmed bookings, we additionally store contact details, address, names and ages of children, allergies, food preferences, sleep habits, emergency contacts, and notes from past sessions.
- Purpose: safe, child-adapted care
- Legal basis: Art. 6(1)(b) GDPR (contract fulfilment); for health information (allergies): Art. 9(2)(a) GDPR (consent — by sharing)
- Retention: as long as the contractual relationship exists; immediate deletion on request
6. Email sending
Confirmation and reminder emails are sent via united-domains AG (Gautinger Straße 10, 82319 Starnberg, Germany). A data processing agreement is in place.
7. Hosting
The site runs on a server of Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany). All data is processed exclusively in Germany.
8. Analytics with Plausible
We use Plausible Analytics — a self-hosted, privacy-friendly analytics tool — to understand how many people visit the site and which pages are popular. Plausible runs on our own server (Hetzner, Germany); no data is shared with third parties.
Plausible is cookieless, uses no fingerprinting, and does not process personal data within the meaning of the GDPR. Only aggregated, anonymous data is collected:
- Number of page views and visitors per day
- Visited URLs (no personal paths)
- Referrer (where the visit came from, e.g. Google)
- Country (derived from the IP and then discarded)
- Browser and operating system family
The IP address is not stored — Plausible briefly uses it to compute an anonymous hash that is deleted after 24 hours and is not reversible.
- Purpose: understanding website usage, improving content
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly analytics)
- Retention: aggregated stats indefinitely, raw data max 24 h
- Details: plausible.io/data-policy
Since Plausible uses neither cookies nor personal data, no consent under § 25 TTDSG is required.
9. Cookies
We use only technically necessary cookies (a session cookie for the internal booking backend used by Linn-Marie only). Functional cookies do not require consent. No tracking cookies are set.
10. Flyer QR codes
We use QR codes on printed flyers and record scans internally to learn which locations work well. We only record:
- Timestamp of the scan
- Hashed IP address (not reversible)
- Device type (mobile/desktop)
No personal identification possible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring marketing effectiveness).
11. Your rights
You have the right to:
- Access your data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Deletion (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time (where applicable)
A short email to hallo@linn-passt-auf.de is sufficient.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection authority. Competent for us:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)Promenade 18, 91522 Ansbach, Germany