Privacy

1. Data controller

Children's Academy - Verein für bilinguale Montessori Pädagogik
Ölzeltgasse 3/1/5
1030 Vienna, Austria

Privacy contact: BA Mary Röttig. You can also use these contact details to exercise rights relating to your child’s data.

2. Website hosting and security

This website is hosted using Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Visiting the website involves processing technical data such as your IP address, access time, requested URL, browser and device information, and connection and security data.

This is necessary to deliver the website, diagnose faults and prevent abuse. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in operating a secure, reliable website. Technical data is retained as needed for the relevant operational, diagnostic and security purposes and according to the hosting provider’s retention rules. Cloudflare privacy policy.

3. Enquiries, visits and enrolment

When you contact us by email, telephone or the form, we process your details to answer your enquiry, arrange a visit and prepare a possible enrolment. Surname, first name, the child’s date of birth, street address, city, postcode and email address are required in the form. Telephone number, first language, legal guardian, siblings, how you heard about us, possible start date and message are optional.

The legal basis is Article 6(1)(b) GDPR for steps taken at your request before entering a contract, and otherwise Article 6(1)(f) GDPR for handling and coordinating enquiries. The online form cannot be submitted without the required information; you can contact us directly instead. Please do not submit health information or other particularly sensitive details through this form.

We do not use profiling or make automated enrolment decisions. The automatic email only acknowledges receipt. Decisions about kindergarten places are made personally.

4. Microsoft Forms and email delivery

The embedded enquiry form uses Microsoft Forms. Loading the visit page connects to Microsoft and involves processing technical connection data. Submitted answers are stored in the kindergarten’s Microsoft 365 account. Power Automate forwards the enquiry through Microsoft 365 Outlook to [email protected] and sends an acknowledgement to the email address you provide, without including information about your child.

Microsoft 365 in the European Economic Area is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The services process data needed to operate, transmit and secure the form. The legal bases correspond to the enquiry-handling and necessary technical purposes described above. Further information: Microsoft privacy statement; Microsoft Data Protection Addendum.

5. Retention and deletion

If no childcare agreement is concluded, we delete the enquiry, including its form response and related email correspondence, no later than six months after the last contact. Longer retention is limited to specific legal obligations or the establishment, exercise or defence of legal claims. If a child enrols, the necessary contractual and care records are retained for the relevant contractual purposes and statutory retention periods.

6. Google Maps and external links

The location map is disabled initially. Google Maps is embedded only after you select “Load Google map”. Google then receives data such as your IP address and technical usage information, and may use cookies or similar storage depending on browser and account settings. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This optional integration is based on your consent under Article 6(1)(a) GDPR and, where applicable, Section 165(3) of the Austrian Telecommunications Act 2021.

Select “Disable map” to remove the map and stop further connections through this embed. Withdrawal does not affect processing that already took place. Google privacy policy.

7. Cookies, local files and international transfers

We do not integrate advertising or tracking services into this website. Font files and our photographs are served with the website. The website itself does not save form entries in your browser. The providers’ additional notices apply to embedded Microsoft services and the Google map when activated.

Cloudflare, Microsoft and Google use international infrastructure. Data may therefore also be processed outside the European Economic Area, particularly in the United States. The providers describe safeguards including adequacy decisions where applicable and standard contractual clauses. Details about recipients and safeguards are available in their linked notices and the Cloudflare standard contractual clauses.

8. Your rights

Subject to the applicable legal conditions, you can request access, rectification, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time for future processing. Contact [email protected].

You may also lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at, email: [email protected].

Last updated: 27 October 2026.