Privacy Policy

Controller

The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

MAHALO gGmbH
Alex-Wedding-Straße 3
10178 Berlin

Phone: +49 (0)30 40042020
Email: info@mahalo.berlin kita.mahalo.berlin

Your Data Subject Rights

Under the specified contact details, you can exercise the following rights at any time pursuant to the EU GDPR:

  • Right of access to your stored data and their processing (Art. 15 GDPR)
  • Right to rectification of incorrect personal data (Art. 16 GDPR)
  • Right to erasure (“right to be forgotten”) of your stored personal data (Art. 17 GDPR)
  • Right to restriction of processing if we are legally unable to delete your data (Art. 18 GDPR)
  • Right to object to the processing of your data (Art. 21 GDPR)
  • Right to data portability, subject to consent or the existence of a contract (Art. 20 GDPR)

If you have given consent, you may withdraw it at any time with future effect. You may also file a complaint with a supervisory authority, for example, the one responsible in your place of residence or the authority overseeing us.

Processing Activities

Collection of General Information When Visiting Our Website

Nature and Purpose of Processing:
When you access our website without registering or sending any information, general technical data (server log files) are recorded automatically. This includes details such as browser type, operating system, ISPs domain name, IP address, etc.

  • These are collected to ensure system security and stability, especially to detect misuse.

Legal Basis & Legitimate Interest:
Processing is carried out under Art. 6(1)(f) GDPR (legitimate interest), aimed at improving website functionality and protecting systems.

Recipients:
Data may be shared with technical service providers who act as data processors for website operation and maintenance.

Storage Period:
Log files are retained for a maximum of 30 days, unless a security event (e.g., DDoS attack) necessitates longer retention until the incident is resolved.

Transfers to Third Countries:
Data may be transferred to Sweden and Denmark under EU Standard Contractual Clauses.

Mandatory or Voluntary Provision:
Providing IP address and access data is not legally required, but essential for proper website function. Without it, services could fail or be limited.

Right to Object:
You can object based on your specific circumstances under Art. 21 GDPR.

Contact

Nature & Purpose of Processing:
If you use our website’s contact form, or contact us via email or phone, we collect and store submitted data. This includes date/time, email address, sender/receiver server info, IP address, phone number, call duration, and message content. We use it to communicate personally with you.

Legal Basis:

  • Art. 6(1)(f) GDPR (legitimate interest) for uncomplicated contact
  • Additionally, if requesting a quote, Art. 6(1)(b) GDPR (contractual/pre-contractual measures) applies.

Recipients:
Technical service providers may process data on our behalf. kita.mahalo.berlin

Storage Period:
Data is deleted no later than six months after your inquiry unless a contract is formed, in which case statutory retention periods (typically 6–10 years) apply. 

Provision of Data & Objection:
Providing data is voluntary, but necessary for processing your request. You may object as described under Art. 21 GDPR. 

Cookies

Definition & Purpose:
Cookies are small data sets stored on your device by our website. They help facilitate easier navigation and maintain user state across pages. For details about specific cookies and their purpose, please refer to our cookie consent tool. 

Deleting Cookies:
You can delete cookies or block them via browser settings (instructions for Firefox, Edge, Chrome, Opera, Safari are provided). You can also block scripts to prevent tracking. 

Technically Necessary Cookies

These cookies are essential to identify your browser during page navigation and ensure website usability. Without them, some features may not function. Use of these cookies is based on our legitimate interest (Art. 6(1)(f) GDPR), including documenting consent (Art. 25(2) TDDDG). Details and storage duration are available in our cookie consent tool. 

Right to Object (Art. 21 GDPR)

Specific Objection:
You have the right to object at any time for reasons related to your particular situation against processing under Art. 6(1)(f) GDPR, including profiling. In case of objection, we will cease processing unless compelling legitimate grounds override your interests, or processing is needed to assert legal claims. 

Recipient of Objection:
MAHALO gGmbH
Alex-Wedding-Straße 3
10178 Berlin

Phone: +49 (0)30 40042020
Email: info@mahalo.berlin

Changes to This Privacy Policy

We reserve the right to update this privacy policy at any time to comply with legal requirements or service changes (e.g., introduction of new services). Updated policy applies to subsequent visits. 

Questions About Data Protection

For any questions regarding data protection, please email the controller listed above. 

Copyright information

This privacy policy was created with the help of activeMind AG and translated automatically.