Privacy policy

Please note: this is a courtesy translation. Only the German version is legally binding.

Protecting your personal data matters to us. Below we explain which data we process when you visit this website and use our services, why we do so, and what rights you have.

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Schwimmschule NAT & Stars
Owner: Natalie Ceremnov
[BITTE ERGÄNZEN: full postal address of the swim school, as in the imprint]
Phone: 0176 32 74 09 87
Email: info@nat-and-stars.com

We have not appointed a data protection officer, as the legal requirements for doing so do not apply. [BITTE ERGÄNZEN: if a data protection officer is appointed after all, add their name and contact details]

2. Legal bases

We only process personal data where there is a legal basis for doing so:

• Art. 6(1)(a) GDPR – your consent, for example when loading external content (maps, booking system).
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual steps, for example a course booking or enquiry.
• Art. 6(1)(c) GDPR – compliance with legal obligations, for example tax retention periods.
• Art. 6(1)(f) GDPR – our legitimate interest in a secure, functioning website.

3. Hosting and server log files

This website is hosted by an external provider: [BITTE ERGÄNZEN: name and address of the hosting provider, e.g. Hostinger International Ltd., 61 Lordou Vironos, 6023 Larnaca, Cyprus]. The provider processes the data arising when the website is accessed on our behalf. A data processing agreement under Art. 28 GDPR is in place.

Each time a page is accessed, the server automatically records so-called server log files:

• shortened IP address of the requesting device
• date and time of access
• name and URL of the file retrieved
• volume of data transferred and whether retrieval was successful
• browser, operating system and, where applicable, the previously visited page

This data is used solely for secure operation and error analysis (Art. 6(1)(f) GDPR). It is not combined with other data sources. Log files are deleted after [BITTE ERGÄNZEN: retention period for log files, e.g. 7 or 30 days – ask the host] at the latest.

4. Contact by email, phone and form

When you contact us we process the data you provide – such as name, email address, phone number and the content of your message – in order to deal with your enquiry.

The contact and application forms on this website send your entries to us via your device's email program; the data is not stored on this website.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract, otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We delete the data as soon as it is no longer required and no statutory retention periods apply.

5. Job applications

If you apply as an instructor or lifeguard, we process the application data submitted in order to carry out the application procedure (Art. 6(1)(b) GDPR in conjunction with § 26(1) BDSG). If no employment relationship results, we delete the documents no later than six months after the procedure ends. If you would like us to keep your application on file for longer, please let us know.

6. Course booking via kurs.software

We use the course management system kurs.software to display our course dates and handle bookings, embedded via schwimmschule-nat-stars-wiesbaden-mainz.kurs.software.

The booking window is only loaded once you have consented to external content (Art. 6(1)(a) GDPR). When it loads, your IP address is transmitted to the provider; for the booking itself the provider processes the data you enter (e.g. name, address, contact details, details about your child, payment data) on our behalf in order to perform the contract (Art. 6(1)(b) GDPR). [BITTE ERGÄNZEN: name the kurs.software provider with company name and address and confirm that a data processing agreement exists]

7. Google Maps

On the „Locations“ page we embed map material from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Maps are only loaded after your explicit consent (Art. 6(1)(a) GDPR). When loading, your IP address and information about your browser are transmitted to Google; this may involve a transfer to the USA. Google is certified under the EU-US Data Privacy Framework. Without your consent we display only a notice and the address instead of the map.

Further information: policies.google.com/privacy

8. Google Fonts

This website uses fonts from Google Fonts. When a page is accessed, your browser loads the required fonts from a Google server, transmitting your IP address to Google. The legal basis is our legitimate interest in a consistent presentation (Art. 6(1)(f) GDPR). [BITTE ERGÄNZEN: if fonts are self-hosted in future, adjust this section accordingly]

9. Images via an external content delivery network

Some images on this website are delivered via Jimdo's content delivery network (image.jimcdn.com). When the images load, your IP address is transmitted to the provider. The legal basis is our legitimate interest in fast delivery of content (Art. 6(1)(f) GDPR).

10. Social media

We link to our Instagram profile. These are plain links – data is only transmitted to the provider (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland) when you click them. We do not use social media plug-ins that transmit data as soon as the page loads.

11. Cookies and local storage

This website does not set any tracking or advertising cookies of its own. We only store your decision about loading external content so that we do not have to ask again on every page. Details are in our cookie policy.

12. Your rights

You have the following rights regarding your personal data:

• Access to the data we process (Art. 15 GDPR)
• Rectification of inaccurate or incomplete data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to info@nat-and-stars.com is enough.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Usually this is the authority for your place of residence or for our registered office: [BITTE ERGÄNZEN: competent supervisory authority for the school's registered office, e.g. the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate]

13. Retention

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations – in particular commercial and tax law periods of six and ten years.

14. Security of transmission

This website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser's address bar. With unencrypted communication – such as ordinary email – complete protection cannot be guaranteed.

15. Updates to this policy

We adapt this privacy policy when our services or the legal requirements change. The version published here applies.

Last updated: July 2026