Data protection

In the following information we would like to give you an overview of how we are processing your personal data and your rights under data protection law. Which data are processed in detail and how they are used depends largely on the services requested or agreed to in each case. Therefore, not all sections of this information will apply to you.
Furthermore, this data protection information may be updated from time to time. You will always find the current version on this page.

The following data protection statement will inform you about the collection and processing of your data when using the LITTLE-BIRD website. This involves primarily the following domains:

portal.little-bird.de (LITTLE BIRD Elternportal)
www.little-bird.de (LITTLE BIRD Geschäftsseite)
little-bird.softgarden.io (LITTLE BIRD Bewerbermanagement)
https://kita.emmendingen.de/ (LITTLE BIRD Elternportal der Stadt Emmendingen)
https://kinderbetreuung.seelze.de/ (LITTLE BIRD Elternportal der Stadt Seelze)
https://kitas.langenhagen.de/ (LITTLE BIRD Elternportal der Stadt Langenhagen)
https://kita-portal.hanau.de/ (LITTLE BIRD Elternportal der Stadt Hanau)
https://little-bird.badkissingen.de/ (LITTLE BIRD Elternportal der Stadt Bad Kissingen)
https://betreuungsplatz-sachsen.de/ (LITTLE BIRD Elternportal für die Region Sachsen)

Controller

LITTLE BIRD is responsible for the data processing described in this data protection statement. Regarding the LITTLE BIRD parent portals, LITTLE BIRD's responsibility ends at the moment when your data has been transmitted via the parent portal at your request (reservation for a childcare place) to your council/district or a childcare place provider. From this point in time onwards, LITTLE BIRD will only process your data on the instructions of your council/district/childcare place provider. Included in this so-called order processing is the complete administration of your data by your council/district/childcare place provider, including the selection or allocation of a childcare place via the LITTLE BIRD parent portal.

LITTLE BIRD GmbH
Landsberger Allee 131a
10369 Berlin

Email: info@little-bird.de
Tel.: +49 (0)30 2359155 60

Data Protection Officer of LITTLE BIRD GmbH
Fux:Legal GbR
Krausnickstrasse 10
10115 Berlin

Tel.: (+49) 30 2 888 60 60
Email: datenschutz@little-bird.de

Data security

In order to protect the security of your data during transmission, we use state-of-the-art encryption processes on our websites.

Making contact

If you contact us by email or contact form, we will process the information you provided for the purpose of processing your inquiry. In the event that you wish to contact us via a form in the parent support, we need the following data from you for the subsequent processing: First name, last name, user name in the portal, registered email address, city/municipality. In the event that you would like to register as a software user for a webinar, we require the following data from you for the mandatory registration via online form: Council where you work, first name, last name, email address, role in the system.

The data entered into the contact form is processed on the basis of a legitimate interest in efficient communication (Article 6 (1) (f) GDPR).

We are providing this contact form so that we can make it possible for you to contact us in an uncomplicated way. Your information provided will be stored for the purpose of processing the inquiry and for possible follow-up questions.

Storage period: After your inquiry is processed, your data will be erased, provided that the pre-contractual phase ends and no contractual relationship is created. Legal retention periods and legitimate interests remain unaffected.

Provision prescribed or required: Provision of your personal data is voluntary. However, we can only process your inquiry to the extent that you disclose the necessary information to us.

Search for childcare places / Registration on the LITTLE BIRD portal

In order for us to be able to show you available childcare places that match your search in the area you are searching in the parent portals, we need the following data from you: Your child's date of birth, post code, city, desired start of care.

If you register on one of the LITTLE BIRD parent portals, to register for an available childcare place, we will need the following personal data for this: Title, last name, first name, username, email address, password. If information on the parents' employment status and religious affiliation is mandatory, this is a query that the respective municipality requires as necessary information.

The registration takes place as contract initiation pursuant to Article 6 (1) (b) GDPR.

Storage period: Your data will be stored as long as you remain registered. When de-registering from the service, the statutory retention periods apply. Legitimate interests remain unaffected.

Provision prescribed or required: Provision of your personal data is voluntary. Without your information, the service cannot be provided.

Map services

With OpenStreetMap (www.openstreetmap.de), we can show you which care providers there are in your area. OpenStreetMap is an open-source mapping tool.

Your IP address will be transmitted to OpenStreetMap to make it possible to display the map. You can see how OpenStreetMap stores your data on the OpenStreetMap data protection page here http://wiki.openstreetmap.org/wiki/DE:Datenschutz and here http://wiki.openstreetmap.org/wiki/DE:Legal_FAQ.

The legal basis for this processing is in each case your consent, Article 6 (1) (f) GDPR (EU General Data Protection Regulation).

Place search / LITTLE BIRD softgarden portal

If you are interested in employment at LITTLE BIRD, you have the opportunity to apply for a vacant position directly via the LITTLE-BIRD-softgarden-Portal or to get in touch with us, whether there is a vacant position or not. We will direct you to our softgarden portal, if you click on the link "Jobs - including online application" on the "Jobs" page.

If you would like to apply for an advertised position, we will need your first and last name as well as your email address. Beyond this, you can make further information about yourself, your education, your professional career, your other qualifications, your salary expectations and your application photo available to us. If necessary, we will also use information from freely available sources, specifically XING/LinkedIn.

softgarden E-Recruiting GmbH processes your data exclusively according to the instructions of LITTLE BIRD and is its contract processor. The data is stored exclusively within Germany. The data is processed exclusively for the purpose of handling the application process. If this does not result in our working together, your data will be automatically erased within six months after the application is declined, unless you have expressly consented to the longer storage period. The data you have provided during the application process for the purposes of softgarden will only be processed beyond this if you have expressly consented to this processing.

You can create a LITTLE BIRD softgarden account for your applications to LITTLE BIRD. For this we need the following data: Title, first name, last name, email address, user name, password.

The softgarden account makes it possible for you to see the current status of your application(s), if you would like to do so. You can also use the softgarden account to import the data stored there for future applications to LITTLE BIRD or other companies that use softgarden. softgarden, not LITTLE BIRD, is responsible for the account creation. Please find more information about softgarden's data processing in the softgarden data protection statement and the softgarden terms of use.

Finally, you have the opportunity to subscribe to job offers. For this we need information about your professional status (career entrant, experienced professional, etc.), your desired job category, your desired work location and your email address, if you would like to contact us by email.

Your application is processed as contract initiation for the employment relationship pursuant to Article 6 (1) (b) GDPR. The subscription to the job offers is based on your consent pursuant to Article 6 (1) (a) GDPR.

Provision prescribed or required: Provision of your personal data for the subscription is voluntary. Without your information, the contract cannot be initiated.

Data collection while using the LITTLE BIRD websites

Technically required data

When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the requested URL and the like. This hereby exclusively involves information that will not be used to draw conclusions about yourself. This information is technically necessary to correctly deliver the contents of web pages requested by you and is mandatory if you are using the Internet. Anonymous information is statistically evaluated by us in order to optimise our Internet presence and the technology behind it.

In addition, the parent portal uses Sentry to compile and evaluate error messages. The data compiled this way will be stored locally on a server of LITTLE BIRD GmbH. The following data is processed and stored for the purpose of compiling and evaluating error messages: Username, email address, master data and contact details for guardians and children.

The data is processed pursuant to Article 6 (1) (f) GDPR based on our legitimate interest in maintaining the stability and functionality of our website.

Storage period: The collected data will be erased after expiry 30 days at the latest.

Provision prescribed or required: The provision of the above-mentioned personal data is not prescribed either on a statutory or contractual basis. Without the IP address, however, we cannot guarantee the service and functionality of our website.

Cookies

Like many other websites, we use so-called "cookies". Cookies are small text files that are transferred from a web page server to your hard drive. This way we automatically receive specific data about your computer and your Internet connection, such as IP address, browser used and operating system used.

Cookies cannot be used to start programs or to transfer viruses to a computer. The information contained in cookies enables us to make navigation easier for you and to display our websites correctly.

Cookies that are required to perform the electronic communication process or to provide certain functions that you want, are stored based on the provisions of Article 6 (1) (f) GDPR. For example, a cookie is stored for the duration of your session in order to ensure a smooth login process. LITTLE BIRD has a legitimate interest in storing cookies to allow it to make its website available in an error-free and optimised way. Insofar as other cookies (such as cookies to analyse your surfing behaviour) are stored, these will be treated separately in this data protection statement.

Storage period: Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser on your next visit.

Provision prescribed or required: Providing the above-mentioned personal data is not prescribed either on a statutory or contractual basis. However, disabling cookies may limit the functionality of our websites.

Technical opt-out potential: You can set your browser in such a way that you will be informed about your cookie settings and only allow cookies in individual cases, allow cookies in certain cases or generally block them as well as activate automatic deletion of cookies when closing down your browser.

Analytics services

We use the following analytics services to track your behaviour on our websites and continuously improve our service. You may object to data processing as described in the following sections.

The analysis service Matomo

This website uses Matomo, an open-source software for the statistical evaluation of visitor access. Matomo uses so-called "cookies", text files that are stored on your computer and make it possible to analyse your use of the website. The information generated by the cookie about your use of the website is stored on a LITTLE BIRD server in Germany.

The IP address will be anonymised immediately after data is collected. You have the option to prevent the installation of cookies by changing the settings of your browser software. Alternatively, you can object to data processing and prevent data collection.

We would like to point out to you that, by making the relevant settings, it is possible that not all of the functions of these websites will be available any longer. You can decide whether a unique web analysis cookie may be stored in your browser, to enable the website operator to collect and analyse various statistical data. The provision of the above-mentioned personal data is not prescribed either on a statutory or contractual basis.

The legal basis for this processing is in each case your consent, Article 6 (1) (f) GDPR (EU General Data Protection Regulation).

Storage period: Cookies are stored on your device for up to one year. You can delete cookies at any time using your browser settings.

Profiling: With the help of Matomo, it is possible to evaluate the behaviour of visitors to the website and analyse their interests. To do this, we create a pseudonymous user profile.

Social media

This website uses Facebook, Twitter and LinkedIn links to allow you to visit our company pages. When you are redirected to corresponding social media sites, data about visitor use are collected, processed and used. You can find more detailed information about data processing by these providers in the following data protection information:

Link to Facebook Data Protection Declaration
Link to Linkedin Data Protection Declaration
Link to Twitter Data Protection Declaration

We would like to point out that we have no knowledge about data processing by social networks after you have clicked on the appropriate link.

Friendly Captcha

Purpose and Legal Basis

We use the service Friendly Captcha. A JavaScript element is embedded into the source code, which loads the software in the background. Your device calculates the solution to a cryptographic puzzle for the service, which helps determine whether the visitor is a human or if the usage is being abusively performed through automated, machine processing (e.g., bots).
To prevent fraudulent activities, the service is typically used in the following contexts: forms (inquiries, contact, password reset), orders, login pages. The service helps LITTLE BIRD prevent automated attacks, which could pose risks to the company’s infrastructure. Additionally, it protects our customers from potentially becoming victims of cybercrime.

Legal Basis

The legal basis for this processing is our legitimate interest according to Art. 6 (1) (f) GDPR, which is to prevent potentially fraudulent activities on our website.

Type of Data

• HTTP request header data
  especially user agent (browser, operating system), origin, and referrer (previous websites)
• Date/time of the request
• Version of the used Friendly Captcha service
• Customer account ID of the website operator (LITTLE BIRD GmbH)
• Hash value (one-way encryption) of the incoming IP address
  (the IP address is discarded, only the hash value is stored)
• Number of requests from the (hashed) IP address within a given timeframe
• Response to the computation task solved by the visitor’s device
• No cookies are used.

Service Provider

Friendly Captcha GmbH, Wörthsee, Germany
Further information on data protection at Friendly Captcha can be found here:
https://friendlycaptcha.com/de/legal/privacy-end-users/

Transfer of your data

Your data are only transferred to the extent that this is permissible or prescribed according to data protection rights. On the one hand, this is the case if you have expressly consented to the transfer of your data to one of our cooperation partners or if the transfer is necessary to execute the contract (for example, transfer to your council or a childcare place provider). The council or the childcare place provider determines the personal data to be collected before the transfer of your data. In case of church providers, the church affiliation can be retrieved in addition to your master data.

Regarding the LITTLE BIRD parent portals, LITTLE BIRD's responsibility ends at the moment when your data has been forwarded via the parent portal at your request (reservation for a childcare place) to your council/district or a childcare place provider. From this point in time, LITTLE BIRD will only process your data on the instructions of your council/district. Included in this so-called order processing is the complete administration of your data by your council/district, including the selection or allocation of a childcare place via the LITTLE BIRD parent portal.

Transfer is further permitted under data protection law if the enforcement of regulations of other laws (for example, criminal law regulations) requires the transfer and there is nothing standing in the way of this transfer from a data protection point of view. You can rest assured that LITTLE BIRD will have any extraordinary request for disclosure checked in advance by the LITTLE BIRD Data Protection Officer in accordance with data protection law.

Data of prospective business customers and customer base

Purpose and legal basis: As part of the initiation, implementation or termination of a customer relationship, we process various data such as, for example, contact information of contact persons or the services that are being utilised.
Such information can include:

• Your contact details (name, company/local council, address, telephone number, email address, etc.)
• Personal data (e.g., preferred form of contact, position, etc.)
• Information about the use of our products and services (customer preferences, etc.).

We only collect, process and use personal data insofar as they are required for the establishment, configuration of the content or amendment of the legal relationship. This is done on the basis of Article 6 (1) lit. f GDPR.
Storage period: The data collected will be deleted after the order is completed or the business relationship has ended. Statutory retention periods and legitimate interests remain unaffected.
Provision mandatory or required: The provision of your data is in principle voluntary. In order to fulfil an effective contract, to take pre-contractual measures and to terminate the contract, provision of the contact details and other identifying information is required.

Data subject rights, complaints and objection

Rights of data subjects

Every data subject has the right to information pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to objection pursuant to Article 21 GDPR and the right to data portability pursuant to Article 20 GDPR.

With regard to the right to information and the right to erase, the restrictions under Sections 34 and 35 German Federal Data Protection Act [Bundesdatenschutzgesetz (BDSG)] apply.

You can revoke the consent you have given to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us prior to the time the General Data Protection Regulation went into effect, that is, before 25 May 2018. Please take note that the revocation is only effective for the future. Processing that occurred before the revocation is not thereby affected.

Complaints

Furthermore, there is a right to file a complaint with a competent data protection supervisory authority (Article 77 GDPR in conjunction with section 19 German Federal Data Protection Act [Bundesdatenschutzgesetz (BDSG)]). You can find a list of regulatory authorities (non-public-sector) at:
http://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Case-specific right of objection (Right to object pursuant to Article 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data performed on the basis of Article 6 (1) (f) GDPR (data processing on the basis of a weighing of interests); this also applies to profiling based on this provision within the meaning of Article 4 (4) GDPR.

If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for the processing which are worthy of protection and which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

Recipient of an objection

The objection can be filed without using a form, with the subject "Objection" while also giving your name, your address and your date of birth and should be addressed to:

LITTLE BIRD GmbH
Landsberger Allee 131a
10365 Berlin

Email: info@little-bird.de
Tel.: +49 (0)30 2359155-60
Managing director: Anke Odrig

Changes to our data protection policy

We reserve the right to occasionally adapt this data protection declaration so that it always complies with the current legal requirements or in order to incorporate any changes to our services in the data protection declaration, for example, when introducing new services. Your new visit will then be subject to the new data protection declaration.