Legal

Privacy policy

This notice describes the data this website actually processes and the rights you have.

Last updated: 2026-08-19 · Version 0.1 (draft)

Draft: operator details not yet verified

The structure and wording of this document are in place, but the legally required details of the operating person or company have not been supplied yet. This page is therefore not ready for publication and is excluded from search engines. Missing information:

  • Full legal operator name
  • Legal form (e.g. GmbH, gUG, e.V., sole trader)
  • Registered business address (no PO box)
  • Authorised representative
  • Public contact email
  • Direct contact method or telephone number
  • Registration court (if registered)
  • Registration number (if registered)
  • VAT identification number (if applicable)
  • Competent supervisory / licensing authority (if applicable)
  • Editorially responsible person
  • Data controller
  • Data protection contact
  • Data protection officer (if appointed)
  • Consumer dispute resolution position

1. Controller and data protection contact

  • Controller within the meaning of the GDPR: Pending: to be supplied by the operator before publication.
  • Address: Pending: to be supplied by the operator before publication.
  • Data protection contact: Pending: to be supplied by the operator before publication.
  • Data protection officer: Pending: to be supplied by the operator before publication.

Competent supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.

2. Principle

This notice describes only the processing that actually takes place on this website. We use no analytics, advertising, tracking, CAPTCHA or payment services and embed no videos or social media content.

Information about children is processed separately from the contact details of caregivers and shared only with people responsible for planning and operating the journey.

3. Hosting and server log files

The website is served on Lovable infrastructure (hosting via Cloudflare). When you open a page, technically necessary data is processed: IP address, date and time, the address requested, status code, volume of data transferred, referrer and browser identification.

The purpose is secure and stable operation and the prevention of abuse. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Retention follows the hosting provider's settings and is limited to what operational security requires.

4. Enquiry, family and Kita forms

Through the forms on this website you can register interest in the pilot, request a quote, register a Kita or ask about a partnership.

  • Contact data: name, email address, optionally telephone number and preferred way of being contacted.
  • Journey data: home postcode, Kita postcode and name, requested direction, weekdays and extent of use.
  • Needs data: number of children and age ranges, plus your free text message.
  • Kita and partner enquiries: organisation, contact person, role, district and the content of the enquiry.

The purpose is answering your enquiry, mapping demand, planning routes and contacting you about the launch. The legal basis is your consent (Art. 6(1)(a) GDPR) and pre-contractual steps at your request (Art. 6(1)(b) GDPR).

Providing the information is voluntary. Without contact details we cannot answer your enquiry. We keep enquiries for as long as needed to handle them and to plan the pilot, then delete them unless statutory retention obligations apply.

Please do not enter health, disability or allergy information in free text fields. We collect such information only when it is needed for a specific journey, separately and on the basis of explicit consent.

5. Database, storage and processors

Form submissions are stored in a Supabase database operated through Lovable Cloud. These providers process the data on our behalf and on our instructions as processors.

Other recipients are only people and bodies responsible for answering your enquiry or operating the journey, and public authorities where we are legally obliged to disclose.

6. Accounts and internal administration area

A protected internal area exists for authorised project members only. Signing in processes an email address and login data, and stores a session token locally in the browser. No such data arises for visitors of the public website.

7. Interactive map and web fonts

The interactive map loads map tiles from CARTO based on OpenStreetMap data. Tiles are loaded only after you allow this in the cookie settings. Loading transmits your IP address to the provider, which may involve a transfer to a third country.

The website's typefaces are loaded from Google Fonts, which transmits your IP address to Google. No cookies are set for this. The legal basis is our legitimate interest in a consistent presentation (Art. 6(1)(f) GDPR).

8. Cookies and similar technologies

We use no analytics or advertising cookies. Necessary storage covers your language choice, your cookie decision, the draft of a multi step form and the session token of the internal area.

The complete, audited inventory is available at any time through the “Cookie settings” button in the footer. There you can enable the optional map or withdraw your decision with effect for the future.

9. Transfers outside the EEA

Delivering the website, loading the fonts and, if you allow it, loading map tiles can transmit your IP address to providers outside the EEA. These providers rely on the EU Commission's standard contractual clauses together with additional safeguards.

10. Your rights

  • Access, rectification, erasure and restriction of processing.
  • Data portability.
  • Objection to processing based on a legitimate interest.
  • Withdrawal of consent with effect for the future.
  • Complaint to a supervisory authority, in particular the Berlin authority named above.

To exercise your rights, contact: Pending: to be supplied by the operator before publication.

11. Automated decision making

No automated decision making, including profiling, takes place. The route checker only compares postcodes with the planned corridors; decisions about participation are always made by people.

12. The future Kita Bus app

An app is planned and is not covered by this notice. When it becomes available we will publish a separate privacy notice for the data processed there, in particular journey notifications and handover confirmations.

13. Data security and changes

The website is delivered over an encrypted connection (HTTPS). Access to enquiry data is limited to authorised people.

We update this notice when processing changes. The version and date shown above apply.