Controller
The controller responsible for the processing of personal data on this website is:
Villa Grips Soziale und Bildungsdienste gGmbH
Schweitzerstraße 5
14169 Berlin, Germany
Email: latebirds@villagrips.de
General Information
The protection of your personal data is important to us. We process your data exclusively within the framework of the legal provisions, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Data Sovereignty and EU Providers
Data sovereignty is important to us. We are in the process of gradually migrating the services used for this website to providers that are based in and process data within the European Union, in order to further reduce or avoid data transfers to third countries (in particular the USA). This privacy policy will be updated accordingly as these changes are made.
Collection and Processing of Personal Data
Personal data is only collected on this website if you provide it to us voluntarily, for example by using the contact form or by contacting us via email.
Contact Form
If you contact us via the contact form, the data you provide will be processed exclusively to handle your inquiry.
Processing takes place on the basis of Art. 6 (1) (b) GDPR, insofar as your inquiry is aimed at initiating or performing a contractual relationship, as well as on the basis of Art. 6 (1) (f) GDPR due to our legitimate interest in processing your inquiry.
The data is stored only for as long as is necessary to process your request or as long as statutory retention obligations exist.
The data submitted via the contact form is stored in our backend service Supabase, with servers located in the EU (Frankfurt am Main). To notify our team of new inquiries, an email dispatch is additionally used (see the “Email Dispatch” section).
Registration and Course Booking
Through our registration and booking forms (e.g. contract registration, EC Camp, Summer Camps) we process the data you provide in order to handle your registration or booking and to carry out the care relationship. This includes in particular the child\u2019s name and, where applicable, the grade level, the name of the parent/guardian, the email address, the phone number, and any further details provided during registration.
As our offer is aimed at families with children, we also process personal data of children in this context. This data is used exclusively for the purpose of childcare and contract handling. The legal basis is Art. 6 (1) (b) GDPR (initiation and performance of the contract) and, where legal obligations apply, additionally Art. 6 (1) (c) GDPR.
For registration and booking we use a parent portal / registration system operated on the Lovable platform, provided at latebirds.savvean.com, parts of which are embedded directly into our website. The storage and processing of the registration and booking data submitted via the forms takes place via the backend service Supabase, with servers located in the EU (Frankfurt am Main). These providers act as processors on our behalf.
Email Dispatch
For sending confirmation and notification emails (e.g. after a registration) we use the service Resend (Resend, Inc., USA) as a processor. This involves processing the email address and the respective message content; any transfer to the USA is safeguarded by appropriate guarantees.
Server Log Files
When you visit this website, the hosting provider automatically collects information in so-called server log files. These include in particular:
- browser type and version
- operating system used
- referrer URL
- hostname of the accessing computer
- date and time of the server request
- IP address
Processing takes place on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in ensuring the security, stability and functionality of the website.
Hosting
This website is hosted by Netlify (Netlify, Inc., USA). When the website is accessed, the provider processes the technically necessary connection data (see Server Log Files). As this is a provider based in the USA, a transfer of personal data to the USA may take place. The legal basis is Art. 6 (1) (f) GDPR; the transfer is safeguarded by appropriate guarantees (EU Commission Standard Contractual Clauses and/or certification under the EU-US Data Privacy Framework). A data processing agreement is in place with the provider.
Cookies
This website does not use cookies and does not employ any tracking or analytics services. The embedded parent portal may set its own technically necessary cookies as part of its function; the portal’s privacy policy applies in that respect.
SSL / TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” in the address bar of your browser.
Storage Period
We store personal data only for as long as is necessary for the respective processing purposes or as long as statutory retention obligations exist.
Your Rights
You have the right:
- to information pursuant to Art. 15 GDPR,
- to rectification pursuant to Art. 16 GDPR,
- to erasure pursuant to Art. 17 GDPR,
- to restriction of processing pursuant to Art. 18 GDPR,
- to data portability pursuant to Art. 20 GDPR,
- to object to processing pursuant to Art. 21 GDPR,
- to withdraw consent given, with effect for the future.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent supervisory authority for Berlin is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
Changes to this Privacy Policy
We reserve the right to amend this privacy policy if this becomes necessary due to legal changes or technical developments.
Last updated: June 2026