Impressum - Legal Notice

Information about the Federal Data Protection Act (DSGVO)

Dear Families,

Protecting your personal data is important to us. In accordance with the EU General Data Protection Regulation (GDPR), we wish to inform you about how we collect, use, and protect your personal data.

1. Data Controller

The data controller responsible for processing your personal data is:

PEDALS Rebecca Silva von Heesen
An der Heide 37
61440 Oberursel
Germany
Email: info@pedals.de

2. What Data We Collect

PEDALS often collects the following types of data:

• Personal identification information (name, date of birth, contact details)
• Medical history information
• Socio-economic information
• Academic achievement information
• Information about emotional state

Additionally, when you use our website, we may collect:

• Appointment booking data via Bookly: name, email address, phone number, and any information you provide when scheduling an appointment.
• Contact form data: name, email address, phone number, and the content of your message.
• Technical data: IP address, browser type, device information, and pages visited (collected via cookies and analytics tools).

3. How We Collect Data

You as parents, and your child, directly provide us with most of the data we collect. Teachers or other school staff also provide us with data, after you have given your written consent by signing the "Information Sharing Approval" form.

When you use our website:

• Bookly collects appointment data when you schedule a session. This data is synchronized with Google Calendar to manage appointments efficiently.
• Contact forms collect the information you submit when you reach out to us.
• Cookies and similar technologies collect technical data to improve website functionality and user experience.

4. Purpose and Legal Basis for Processing

PEDALS collects your data so that we can:

• Contact you
• Match test results to the student who took the test
• Compile test results taken by one student to create a psycho-diagnostic report
• Track a student's progress
• Schedule and manage appointments (via Bookly and Google Calendar)
• Respond to inquiries submitted through contact forms
• Improve our website and services

The legal bases for processing your data are:

• Contractual necessity: Processing is necessary to fulfill our contract with you (e.g., providing assessment services).
• Consent: You have given explicit consent for specific processing activities (e.g., information sharing with teachers, use of cookies).
• Legitimate interest: Processing is necessary for our legitimate interests, such as improving our services and ensuring website security.
• Legal obligation: Processing is necessary to comply with legal requirements.

5. Data Storage and Retention

PEDALS stores your data:

• In a locked file cabinet in a lockable office and/or on a password-protected computer.
• Appointment data collected via Bookly is stored on our website's database hosted by our web host and synchronized with Google Calendar.
• Contact form submissions are stored in our email system and website database.

Your data will be stored for a duration of 10 years. Once this time period has expired, we will delete your data files from the computer and destroy the paper copies of all tests and notes.

6. Hosting and Third-Party Service Providers

We use the following third-party services and hosting provider that may process your data:

Web Hosting

Our website is hosted by Key-Systems GmbH (domaindiscount24), Kaiserstraße 172–174, 66386 St. Ingbert, Germany. The provider processes all data that is transmitted when you visit our website (e.g., IP address, browser information, and server log files) on our behalf. The legal basis for this processing is our legitimate interest in the secure and stable provision of our website (Art. 6 (1) (f) GDPR). A data processing agreement (DPA) has been concluded with the provider in accordance with Art. 28 GDPR.

Bookly

We use the Bookly appointment booking plugin on our website to manage appointment scheduling. The software is developed and owned by NOTA-INFO S.R.L., MD-2002, Bulevardul Decebal 6, Chișinău, Moldova. When you book an appointment, the data you provide (e.g., name, email address, phone number) is processed. Please note that in its default configuration, Bookly may activate the service IPinfo (operated by IDB LLC, 5616 49th AVE SW, Seattle, WA 98136, USA) to determine your country based on your IP address. This may involve a transfer of your data to the USA. For more information, please see Bookly's privacy notice at https://www.booking-wp-plugin.com/privacy/.

Google Calendar

Appointment data collected via Bookly is synchronized with Google Calendar to manage our schedule efficiently. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. However, data may also be transferred to the parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For data transfers to the USA, there is an adequacy decision by the EU Commission (EU-US Data Privacy Framework), and Google LLC is certified under this framework. For more information, please see Google's privacy policy at https://policies.google.com/privacy.

These providers are contractually obligated to protect your data and may only process it according to our instructions.

7. International Data Transfers

Some of our third-party service providers (e.g., Google, Bookly) may transfer data outside the European Economic Area (EEA). We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions by the EU Commission, to protect your data.

8. Cookies and Analytics

Our website uses cookies to enhance your browsing experience and analyze website traffic. You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect website functionality.

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

10. Your Data Protection Rights

We honor your data protection rights. You have the right to:

• Information: You have the right to information about how we process your data.
• Access: You have the right to request copies of your personal data.
• Rectification: You have the right to request that PEDALS correct any information you believe is inaccurate. You also have the right to request PEDALS to complete information you believe is incomplete.
• Erasure: You have the right to request that PEDALS erase your personal data, under certain conditions.
• Restrict processing: You have the right to request that PEDALS restrict the processing of your personal data, under certain conditions.
• Object to processing: You have the right to object to PEDALS' processing of your personal data, under certain conditions.
• Data portability: You have the right to request that PEDALS transfer the data we have collected to another organization, or directly to you, under certain conditions.
• Withdraw consent: Where processing is based on consent, you have the right to withdraw your consent at any time.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us via email or telephone.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes applicable data protection laws.

12. Changes to This Privacy Notice

We may update this privacy notice from time to time. The latest version will always be available on our website.

13. Contact Us

If you have any questions about this privacy notice or wish to exercise your data protection rights, please contact us:

PEDALS Rebecca Silva von Heesen

Email: info@pedals.de

We appreciate your trust!