Privacy

Privacy notice

This privacy notice explains, in accordance with Article 13 of the General Data Protection Regulation (GDPR), how personal data is processed when you visit this website.

I. Name and address of the controller

Grundschule Kronsberg
Ortskamp 8
30539 Hannover

Telephone: 0511 168 42 024
Email: gskronsberg@hannover-stadt.de

II. Data protection officer

Data protection officer: Ms Steffani Schulz
Email: datenschutz@gs-kronsberg.de

III. Provision of the website and server logs

When you access this website, your browser sends technically necessary data to the web server. This may include your IP address, access date and time, requested address, amount of data transferred, referrer URL, browser type and version, and operating system.

Processing is necessary to provide a secure and functional website, defend against attacks and investigate technical faults. The legal basis is Article 6(1)(e) GDPR in connection with the performance of our public duties. Log data is stored only as long as required for operation and security and is then deleted, unless a legal retention obligation or security-related incident requires otherwise.

IV. Content from the school CMS

Editorial content is maintained in the school’s WordPress system and provided through this website. When images, videos or documents are loaded, your browser may connect directly to the school’s media server. The technical connection data described in Section III is processed in this case.

V. Cookies, audience measurement and external fonts

The public website uses no analytics or marketing cookies and no corresponding tracking services. Fonts are loaded from our own web server. Language selection uses the page address without a language cookie. The form protection described below also operates without cookies.

The separate WordPress editorial system uses technically necessary test and authentication cookies for authorised staff to sign in. These are not needed to use the public website. Storage of or access to information on a device that is strictly necessary for a service expressly requested by the user is based on section 25(2), point 2, TDDDG.

VI. Contact, online absence notifications and form protection

Contacting us

When you contact us by email, telephone or contact form, we process your information to handle your enquiry. The contact form requires your name, email address, subject and message; a telephone number is optional. The legal basis is Article 6(1)(e) GDPR in conjunction with section 31(1) NSchG where processing is necessary for our school duties. Article 6(1)(b) GDPR may apply to contract-related enquiries.

The work contact details published on the team page allow you to contact the relevant staff directly.

Online sickness absence notifications

We collect the reporting person's name and email address, the child's name and class, and the first and expected last day of absence. The additional message is optional. Please do not provide diagnoses, medical reports or other medical details. Use of the online form is voluntary; you can also report your child's absence by telephone.

We use these details to process the notification, record the absence and make necessary follow-up enquiries. The legal basis is Article 6(1)(e) GDPR in conjunction with section 31(1) NSchG. Where necessary health data are processed to establish compliance with compulsory school attendance, Article 9(2)(g) GDPR in conjunction with section 31(10), point 1, NSchG also applies.

Recipients, transmission and retention

The website runs on a server hosted by IONOS. Form messages are sent through IONOS SE's SMTP service to the school mailbox gskronsberg@hannover-stadt.de. Connections to the website use HTTPS and our server's connection to the SMTP service uses TLS. This does not provide end-to-end encryption of email contents.

Recipients are the school staff responsible for your request and the technical hosting and email service providers. Neither the website application nor WordPress maintains an additional database of received form messages. Messages are processed in the school mailbox and, where necessary, school records. They are deleted when handling is complete and no school-law or other statutory retention obligations remain. Messages incorporated into school records subject to retention requirements are retained under the applicable rules.

Spam protection with ALTCHA

We run ALTCHA software on our own server. When the form is checked, your browser solves a computational challenge; our server verifies the signed solution, its validity period and possible reuse. No connection to an external CAPTCHA provider is required. The optional collection of pointer, scroll, touch and focus events for a “Human Interaction Signature” is disabled.

We also use a check field hidden from regular visitors and request-rate limits. These process IP addresses or derived check values and technical verification identifiers. Application counters use one-minute or 15-minute windows; challenges remain valid for at most 20 minutes. Bounded verification lists are kept in server memory and displaced by new entries or a restart. They are used solely to prevent abuse, not for audience measurement or advertising.

Form protection supports the secure performance of our school duties. The legal basis for necessary processing of personal data is Article 6(1)(e) GDPR in conjunction with section 31(1) NSchG. Strictly necessary device access is based on section 25(2), point 2, TDDDG. The required form checkbox acknowledges these notices; it is not consent to tracking.

VII. External links

This website contains links to external services, such as route planning with OpenStreetMap. Data is transferred to the respective provider only when you open such a link. The provider’s privacy rules then apply.

VIII. Your rights

Subject to the statutory requirements, you have in particular the rights of access under Article 15 GDPR, rectification under Article 16, erasure under Article 17, restriction of processing under Article 18 and objection under Article 21. To exercise your rights, use the contact details above.

IX. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

Lower Saxony Commissioner for Data Protection
Prinzenstraße 5
30159 Hannover
Telephone: 0511 120 4500
Email: poststelle@lfd.niedersachsen.de

Last updated: 07.09.2026