← Back to home · Deutsch

Privacy policy (Datenschutzerklärung)

Last updated: 3 November 2026. This is an English courtesy version; the German Datenschutzerklärung is the binding one.

1. Controller

The controller under Art. 4(7) GDPR is:

No data protection officer is appointed; the conditions of § 38 BDSG are not met.

2. What this covers

KinderCanvas is not available yet. This website introduces the planned product and offers a waitlist. There are no user accounts and no payments, and no photos are uploaded or processed. The waitlist is for parents, not children.

3. Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, on our behalf under a data processing agreement (Art. 28 GDPR, vercel.com/legal/dpa).

When you open this website, your browser's data is recorded in server logs: IP address, date and time, page requested, amount of data transferred, referrer URL, and browser and operating system details. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is running the website reliably and securely.

Vercel is a US company, so a transfer of personal data to the USA cannot be ruled out. The basis is Standard Contractual Clauses (Art. 46(2)(c) GDPR). US authorities may be able to access this data under certain conditions.

Retention: Logs are deleted once they are no longer needed for operation and security. They are kept longer only if a specific security incident requires analysis.

4. Waitlist

When you join the waitlist, we process your email address, the language of the page you joined on, and the time and proof of your confirmation. We use them to email you when KinderCanvas opens.

We use double opt-in: after you submit the form, you get an email with a confirmation link. Your address joins the waitlist only after you click that link. After that, we send you one email when KinderCanvas opens.

Legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, through the unsubscribe link in our emails or by emailing datenschutz@igel-labs.com. Giving your email address is voluntary; without it you cannot join.

Recipients: For sending and list management we use Brevo, a service of Brevo SAS, 17 rue Salneuve, 75017 Paris, France, as a processor under Art. 28 GDPR. Your entry passes through our website at Vercel (section 3) to Brevo.

Retention: We keep your address until KinderCanvas has opened and the launch email has been sent, or until you withdraw consent. We keep the proof of your consent for as long as we need it to defend against possible claims (Art. 6(1)(f), Art. 17(3)(e) GDPR).

5. Audience measurement with PostHog (no cookies)

We use PostHog, a service of PostHog, Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA, to measure use of this website. It runs on our behalf under Art. 28 GDPR (posthog.com/dpa) on the PostHog EU Cloud. Measurement data goes through a proxy on our own domain (/ingest).

PostHog is set up so that no identifier is stored on your device (persistence: memory). There is no recognition beyond a single page view, no user profiles and no session recordings. If your browser sends a Do Not Track signal, measurement does not run.

We process: page viewed, referrer, clicks on page elements, submitting and confirming the waitlist (without your email address), approximate country, browser, device and operating system details, the time, and, for technical reasons, your IP address.

Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is measuring and improving this website. Because nothing is stored on or read from your device, no consent is needed under § 25(1) TDDDG.

PostHog, Inc. is a US company, so access from a third country, for example for support or maintenance, cannot be ruled out. The basis is Standard Contractual Clauses (Art. 46(2)(c) GDPR). US authorities may be able to access this data under certain conditions.

Retention: Measurement data is kept only as long as needed for statistics and then deleted.

Objection: You can object to this processing at any time under Art. 21 GDPR by emailing datenschutz@igel-labs.com.

6. Language choice

If you switch language at the top of the page, we store your choice for twelve months in a cookie called lang. The cookie is needed for this function you asked for (§ 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR). It holds only the value "de" or "en". We set no other cookies.

7. Fonts

Fonts are served from our own web space. There is no connection to Google Fonts or any other external font service.

8. Contact by email

If you email us, we process your details only to handle your request. The legal basis is Art. 6(1)(f) GDPR. We delete your message once it is no longer needed and no statutory retention duty applies.

9. Your rights

You have these rights towards the controller:

• Access to your data (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to datenschutz@igel-labs.com is enough.

10. Right to complain

You have the right to complain to a supervisory authority (Art. 77 GDPR). Ours is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany, www.lda.bayern.de.

11. No automated decisions

No automated decision-making, including profiling under Art. 22 GDPR, takes place.

12. Changes

We update this policy when the law or the services we use change. The version published here applies.