DATA PROTECTION

Statement

Version 23.12.2025
Website: https://www.createschools.de/

Data Protection at a Glance

General Information

Below you will find our privacy information in accordance with Section 5 of the German Digital Services Act (DDG) as well as Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR).

We inform you about the processing of your personal data on this website and about your rights and claims under data protection law. Personal data are all data with which you can be personally identified.

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Controller Responsible for Data Processing

The data processing on this website is carried out by the website operator:

CreatesSchools gGmbH
International Bilingual School in Bavaria
Ziegeleistrasse 12
82327 Tutzing
Germany
Phone: +49 (0)8158 9225566
Email: info@createschools.de

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

How Do We Collect Your Data?

Your data are collected in part by you providing them to us, for example when you enter data into a contact form.

Other data are collected automatically or after your consent when you visit the website through our IT systems. These are mainly technical data (e.g., internet browser, operating system, or time of page access). These data are collected automatically as soon as you enter this website.

What Do We Use Your Data For?

Some of the data are collected to ensure the error-free provision of the website. Other data may be used to analyze user behavior.

If contracts are concluded or initiated via the website, the transmitted data are also processed for contract offers, orders, or other inquiries.

What Rights Do You Have Regarding Your Data?

You have the right at any time to obtain free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction or deletion of these data.

If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data.

Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this or any other questions on data protection.

Analysis Tools and Third-Party Tools

When visiting this website, your browsing behavior may be statistically evaluated. This is mainly done using so-called analysis programs.

Detailed information on these analysis programs can be found in the following sections of this privacy policy.

Hosting

WIX

We host the content of our website with the following provider:

Wix.com Ltd.
40 Namal Tel Aviv St.
Tel Aviv 6350671
Israel

WIX is a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, regions of visitors, and visitor numbers. WIX stores cookies on your browser that are required to display the website and ensure security (necessary cookies).

The data collected via WIX may be stored on servers worldwide, including servers in the USA.

Details can be found in the WIX privacy policy:
https://de.wix.com/about/privacy

According to WIX, data transfers to the USA and other third countries are based on the EU Commission’s Standard Contractual Clauses or comparable safeguards pursuant to Art. 46 GDPR:
https://de.wix.com/about/privacy-dpa-users

The use of WIX is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in the reliable presentation of our website. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent can be revoked at any time.

WIX is certified under the EU–US Data Privacy Framework (DPF).

Google Cloud

When visiting this website, personal data are processed. Processed data categories include technical connection data of server access (IP address, date, time, accessed page, browser information).

Purpose: delivery and provision of the website
Legal basis: legitimate interest (Art. 6 (1) (f) GDPR)

Service provider:
Google Inc. (USA)
For Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Google processes data in the USA and participates in the EU–US Data Privacy Framework. Additionally, Google uses EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

More information:
https://policies.google.com/privacy

General Information and Mandatory Disclosures

Storage Duration

Unless a more specific storage period is stated in this privacy policy, your personal data remain with us until the purpose for processing no longer applies. If you request deletion or revoke consent, your data will be deleted unless statutory retention obligations apply.

Legal Bases for Data Processing

Depending on the situation, processing is based on:

Consent (Art. 6 (1) (a) GDPR, Art. 9 (2) (a) GDPR)
Contract performance or pre-contractual measures (Art. 6 (1) (b) GDPR)
Legal obligation (Art. 6 (1) (c) GDPR)
Legitimate interest (Art. 6 (1) (f) GDPR)
Section 25 (1) TDDDG (cookies / device access)

Recipients of Personal Data

We only pass on personal data to external parties if required for contract fulfillment, due to legal obligations, legitimate interest, or valid consent. Data processors receive data only based on valid data processing agreements.

Revocation of Consent

You may revoke consent at any time. The legality of data processing carried out before revocation remains unaffected.

Right to Object (Art. 21 GDPR)

If processing is based on Art. 6 (1) (e) or (f) GDPR, you may object at any time for reasons arising from your particular situation.

If your personal data are processed for direct marketing purposes, you have the right to object at any time. After objection, your data will no longer be used for direct marketing.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence, workplace, or the place of the alleged infringement.

Right to Data Portability

You have the right to receive data processed automatically on the basis of consent or a contract in a common, machine-readable format, or to request direct transfer where technically feasible.

Right of Access, Rectification, and Erasure

You have the right to free access to your stored personal data, their origin, recipients, and purpose of processing, as well as the right to correction or deletion.

Right to Restriction of Processing

You may request restriction of processing in cases such as disputed accuracy, unlawful processing, or pending balancing of interests after objection.

SSL / TLS Encryption

This site uses SSL/TLS encryption for security reasons. You can recognize an encrypted connection by “https://” and the lock symbol in your browser.

Data Collection on This Website

Server Log Files

The provider automatically collects:

Browser type and version
Operating system
Referrer URL
Hostname
Time of request
IP address

Legal basis: Art. 6 (1) (f) GDPR

Contact Form

Data submitted via contact forms are stored to process inquiries. Processing is based on Art. 6 (1) (b), (f), or (a) GDPR. Data are deleted once the purpose no longer applies.

Email or Phone Inquiries

Personal data submitted via email or phone are processed for handling your request under the same legal bases as contact forms.

Newsletter

Newsletter delivery requires your email address and consent (Art. 6 (1) (a) GDPR). You may unsubscribe at any time. After unsubscribing, your email may be stored in a blacklist to prevent future mailings.

This website uses cookies. Some cookies are necessary, others are used for analysis or marketing.

Necessary cookies are processed based on Art. 6 (1) (f) GDPR. Consent-based cookies are processed under Art. 6 (1) (a) GDPR and Section 25 TDDDG.

You can configure your browser to manage cookies. Disabling cookies may limit website functionality.

Own Services

Handling of Applicant Data

Applicant data are processed for recruitment purposes in accordance with § 26 BDSG and Art. 6 GDPR. Unsuccessful applications are stored for up to 6 months unless consent or legal obligations require longer retention.

Social Media

We operate social media pages (e.g., Instagram, Facebook). Data processing is jointly or separately carried out with the platform providers.

Instagram

Provider: Meta Platforms Ireland Limited
Legal basis: Legitimate interest (Art. 6 (1) (f) GDPR)
Privacy policy: https://privacycenter.instagram.com/policy/
Third-country transfer basis: Data Privacy Framework

Facebook

Joint responsibility with Meta Platforms Ireland Limited
Privacy policy: https://www.facebook.com/privacy/policy/
Third-country transfer basis: DPF, Standard Contractual Clauses

Social Bookmarks

Social bookmarks are integrated as links only. Data are transmitted to providers only after clicking.

Plugins and Tools

Third-party content (e.g., videos, maps) requires processing of IP addresses. Third parties may use cookies or pixel tags.

Google Maps

Used for location display.
Legal basis: Art. 6 (1) (f) GDPR or consent
Provider: Google Cloud EMEA Limited
Privacy policy: https://policies.google.com/privacy
Third-country transfer basis: DPF

Google Ads Remarketing

Used for interest-based advertising.
Legal basis: Consent (Art. 6 (1) (a) GDPR)
Opt-out: https://adssettings.google.com
Provider certified under the EU–US Data Privacy Framework

Google AdSense

Uses cookies and web beacons for advertising analysis. Data may be transferred to the USA. By using this website, you consent to this processing.

Changes and Updates

We regularly update this privacy policy. Please review it periodically. If changes require your action or consent, we will notify you accordingly.

Addresses and contact details may change over time; please verify before contacting.

Back to Home