DATA PRIVACY

General Personal Data We process your general personal data. Personal data is any kind of information that relates to an identifiable natural person. A natural person is identifiable if conclusions about the person's identity can be drawn from the available information. For example: Your name, IP address, and home address are personal data. Data Provided by You You provide us with your personal data yourself. Whenever you enter your personal data and transmit it to us, it is considered to have been provided to us. The transmission of data to us is generally voluntary, but is partially mandatory in order to use our services. For example: You enter your data in a contact form or sign up for a newsletter. Collected Data When you use our services, we partially collect your data without requiring your active participation. This data typically consists of data about your device and data about user behavior. For example: We collect data about the operating system of the device with which you accessed our website. Data Collection on the Website: Forms and Inquiries: For inquiries (e.g., via contact form, email, or quote form), the user's information is forwarded for processing the contact request and its handling. Inquiries are only forwarded for processing and deleted immediately upon customer request. Cookies are small text files that your browser saves when accessing a website. Cookies serve, for example, to ensure that you do not have to log in again when repeatedly visiting a website or web application. Cookies are also used by web analytics services such as Google Analytics to mark the visitor. You can prevent the storage of cookies through an appropriate setting in your browser. In this case, you may not be able to fully use all functions of this website. Inquiry by Email or Phone: If you contact us by email or phone, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 lit. a GDPR) and/or our legitimate interests (Art. 6 Para. 1 lit. f GDPR), as we have a legitimate interest in effectively processing inquiries directed to us. The data you send to us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after completing the processing of your request). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

Google Analytics We use the analytics tool Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website. Google Analytics serves to analyze the visiting behavior of our users. The data obtained thereby helps us to optimize our website, our content, and our advertising measures. 1. Type of Data Collected During your visit to our website, the following data, among others, is automatically collected and transmitted to Google: • the pages and subpages accessed, • behavior on the website (e.g., dwell time, clicks, scroll depth), • the source of your visit (e.g., which page or advertising medium you came to us from), • technical information such as browser type, operating system, screen resolution, device, and internet provider, • your approximate geographic area (country/city) as well as • possibly your Internet Protocol address (IP) or a version of this IP address automatically determined and shortened by Google Analytics. No personal data such as your name, address, or contact details are automatically collected via Google Analytics. 2. Purpose of Processing We use Google Analytics to better understand the visiting and usage behavior of our website. This allows us to improve our offering accordingly and tailor it to your needs, as well as optimize our website technically and economically. 3. Legal Basis The processing is based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR and, if applicable, on the basis of our legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR, as we want to improve the use of our website. 4. Data Processing Agreement We have concluded a data processing agreement with Google, in which Google commits to carry out data processing within the scope of Google Analytics according to our instructions and to ensure the security of the data. 5. Data Transfer to Third Countries Google operates data centers in the USA, among other locations. Therefore, data may also be transmitted to states outside the European Economic Area (EEA), for which there may not be a level of data protection equivalent to EU law. However, Google has certified itself under the EU-US Data Privacy Framework, etc., and has taken measures to ensure security. 6. Storage Duration The usage data collected by Google Analytics is deleted or anonymized after an individually determined storage period. By default, data can be deleted after 14 months, for example (depending on settings) – during this time, it is linked to a user ID. After that, only aggregated, non-user-related data remains. 7. Objection Option / Opt-out You can prevent the collection of your data by Google Analytics by installing the browser add-on to deactivate Google Analytics (e.g., at https://tools.google.com/dlpage/gaoptout?hl=de)() or by rejecting the use of analytics cookies via our cookie settings dialog (if available). 8. Further Information Further information about Google Analytics and data protection at Google can be found in Google Analytics Help. → https://support.google.com/analytics/answer/6004245?hl=de() Google Web Fonts Our website uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally on our server; there is no connection to Google servers and no transfer of personal data (e.g., IP address) to Google. The legal basis for use is our legitimate interest in an appealing and uniform presentation of our website pursuant to Art. 6 Para. 1 lit. f GDPR. Google Maps This website uses the map service Google Maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to visually display geographic information. When accessing a page on which Google Maps is embedded, your IP address and possibly further usage data (e.g., location data if you release it) are transmitted to Google servers and stored there. These servers can also be located in the USA. The use of Google Maps is in the interest of an appealing presentation of our online offering and easy location of the places we indicate pursuant to Art. 6 Para. 1 lit. f GDPR. If appropriate consent has been requested (e.g., via a cookie banner), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time. Further information on data processing by Google can be found at: https://policies.google.com/privacy?hl=de() Use of YouTube Components with Enhanced Privacy Mode Videos from the YouTube platform, which is operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), are embedded on our website. When accessing a page with an embedded YouTube video, a connection to YouTube servers is established. YouTube is thereby informed which of our pages you have visited. If you are logged into your YouTube account, YouTube can associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. We use YouTube in the so-called "enhanced privacy mode." According to YouTube, this mode means that no information about visitors is stored before a video is played. Only when you actively start the video is data transmitted to YouTube. The use of YouTube is in the interest of an appealing presentation of our online offerings pursuant to Art. 6 Para. 1 lit. f GDPR. If appropriate consent has been requested (e.g., via a cookie banner), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time. Further information on data processing by Google/YouTube can be found at: https://policies.google.com/privacy?hl=de() Facebook Components Components of the social network Facebook may be used on our website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you access a page that contains a Facebook component (e.g., the "Like" button or the Facebook pixel), a connection to Facebook servers is established. Facebook is thereby informed which page you have visited, and – if you are logged into Facebook – Facebook can associate the visit with your user account. Even if you do not have a Facebook account, Facebook can store your IP address and other usage data. The use of these functions is based on our legitimate interest in an appealing presentation and optimization of our online offering pursuant to Art. 6 Para. 1 lit. f GDPR. If you have consented via a cookie or consent banner, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time. Facebook (Meta) may transfer data to countries outside the EU, particularly to the USA. The data transfer is based on the Standard Contractual Clauses (SCCs) of the EU Commission. Further information on data processing by Facebook can be found at: 👉 https://www.facebook.com/about/privacy(https://www.facebook.com/about/privacy) Instagram Components Functions and content of the Instagram service may be embedded on our website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you access a page that contains an Instagram component (e.g., an embedded image, a button, or a feed), a direct connection to Instagram servers is established. Your IP address and possibly other usage data are transmitted to Instagram. If you are logged into your Instagram account, Instagram can associate the visit to our website with your account. The use of Instagram components is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in an appealing presentation of our online offerings and communication with customers). If you have consented via a cookie or consent banner, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time. Meta (Instagram) may transfer data to countries outside the EU, particularly to the USA. This transfer is based on the Standard Contractual Clauses (SCCs) of the EU Commission. Further information on data processing by Instagram can be found in Meta's privacy policy: 👉 https://privacycenter.instagram.com/policy/() Web Hosting Our website is operated via the website builder provider Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Wix provides us with the online platform through which we can present our website and provide our content. When you visit our website, the data that typically arises when visiting a website is collected by Wix servers. This includes in particular: • IP address, • browser information, • date and time of access, • referrer URL (the previously visited page), • device and operating system used, • possibly other technical data required for the operation and security of the website. Wix stores data on servers in various regions, including the European Union, Israel, and the USA. Israel is considered a country with an adequate level of data protection according to the EU Commission's adequacy decision. For data transfers to the USA, Wix relies on the Standard Contractual Clauses (SCCs) of the EU Commission. We have concluded a data processing agreement (DPA) with Wix pursuant to Art. 28 GDPR to ensure the protection of our website visitors' personal data. Processing is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in a secure, stable, and efficient provision of our website). If consent for data processing is obtained (e.g., via a cookie banner), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time. Further information can be found in Wix's privacy policy: 👉 https://de.wix.com/about/privacy() General By using the website, you agree to the processing of the data collected about you by the aforementioned service providers in the manner described above and for the purposes stated above.

We will keep your data secure and take all appropriate measures to protect your data from loss, access, misuse, or alteration. Our contractual partners and employees who have access to your data are obligated to comply with data protection regulations. In some cases, it will be necessary within the scope of order processing that we forward your inquiries to companies associated with us. In these cases, too, your data will be treated confidentially. Minors We are particularly committed to ensuring the protection of children's personal data. For this reason, we do not knowingly collect, process, or use data from minors unless their legal guardians have given their consent. As soon as we discover that minors have entered personal data themselves without appropriate consent, or that personal data about such individuals has been entered, we will delete this data immediately.

Which data about you is processed? We primarily process personal data that you transmit to us or that we collect when operating our website. In some circumstances, we also receive personal data about you from third parties. These can include the following categories: • Personal master data (name, address, date of birth, etc.); • Contact data (mobile number, email address, etc.); • Financial data (e.g. account details); • Online identifiers (e.g. cookie ID, IP addresses); This data can come from the following sources: • Information from publicly accessible sources (e.g. media, internet); • Information from public registers (e.g. commercial register, debt enforcement register, land register); • Information in connection with official or court proceedings; • Information regarding your professional functions and activities (e.g. professional networks); • Information about you in correspondence and meetings with third parties; • Credit information (insofar as we conduct personal business with you); • Information about you provided to us by people in your circle so that we can conclude or process contracts with you; • Data in connection with the use of the website. Under what conditions is your data processed: We process your data in good faith and according to the purposes set out in this privacy policy. We ensure transparent and proportionate processing. Should we exceptionally not be able to comply with these principles, data processing may still be lawful because a justification exists. Justification may include: • Your consent; • the execution of a contract or pre-contractual measures; • the fulfillment of legal requirements; • our legitimate interests, provided your interests do not prevail. In some circumstances, you are required to disclose certain personal data to us so that we can establish business relationships with each other. Without such data, we are normally unable to execute a contract. The website also cannot normally be used if certain information to ensure data traffic, such as your IP address, is not disclosed. Further Development We strive to continuously improve our communication. For this purpose, we use your personal data for the development and improvement of our products and services. For example: We collect data on visitor behavior on the website to constantly improve user-friendliness. Right of Withdrawal If you have given us consent to process your personal data for specific purposes, we will process your data within the framework of this consent, provided we have no other justification or no other permission requirement is fulfilled. You can withdraw your consent for the future at any time by sending an email to the address stated in the imprint. Data processing that has already taken place is not affected by the withdrawal and retains its validity. Data Disclosure to Third Parties We may need to use the services of third parties or affiliated companies and commission them with processing your data (so-called processors). Categories of recipients include: • Accounting, fiduciary and auditing companies; • Consulting companies (legal advice, taxes, etc.); • IT service providers (web hosting, support, cloud services, website design, etc.); • Payment service providers (exclusively with your prior consent); • Providers of tracking, conversion and advertising services. We ensure that data is only disclosed with your express consent, provided this does not involve contract data processing. Furthermore, we ensure that these third parties and our affiliated companies comply with data protection requirements and treat your personal data confidentially. In some circumstances, we are also legally obliged to disclose your personal data to authorities. These companies decide for themselves how they use the data. This is usually done because it is necessary to comply with legal requirements, when an outstanding claim is transferred to a collection agency, or to detect fraudulent activities. We do not sell personal data of users for the purposes and intentions of the CCPA. Legal Basis We only disclose the data listed in this section to third parties if: • you have given express consent according to (Art. 6 Para. 1 S. 1 lit. a GDPR), • there is a legal obligation to disclose (Art. 6 Para. 1 lit. c GDPR), • the disclosure is necessary for asserting, exercising or defending legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data (Art. 6 Para. 1 S. 1 lit. f GDPR). • according to Art. 6 Para. 1 S. 1 lit. f) because it is necessary to protect the legitimate interests of the controller or a third party. Our legitimate interest according to Art. 6 Para. 1 S. 1 lit. f GDPR for collecting the data is based on the following purposes: ensuring smooth connection establishment and comfortable use of the website, evaluation of system security and stability, and for other administrative purposes. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. Data Retention We only store personal data for as long as is necessary to fulfill the individual purposes for which the data was collected. We store contract data longer because we are obliged to do so by legal regulations. In particular, we must retain business communications, concluded contracts and accounting documents for up to 10 years. To the extent that we no longer need such data from you to perform services, the data is restricted for further processing and we only use it for accounting and tax purposes.

If you have questions or concerns about the protection of your data by us, you can contact the management. info@montessori-seetal.ch (info@montessori-seetal.ch) The management provides information about: • Who is responsible for data processing; • What data is collected; • For what purpose this data is collected; • To whom we pass on this data; • How you can object to data processing; • What rights you have and how you can assert them. Right to information You can request information at any time about the data we have stored about you. We ask you to send your request for information together with credible proof of identity to info@montessori-seetal.ch.(info@montessori-seetal.ch) The information is provided in written or other form, possibly also electronically. If you request it, we can also provide the information orally, provided you prove your identity in another form. If you submit the request for information electronically, we will provide the information in a common electronic format, unless you specify otherwise. The information is generally free of charge. If copies are also requested, a reasonable fee may be charged. The right to obtain a copy of the processed data must not affect the rights and freedoms of other persons. In the case of manifestly unfounded or excessive requests for information, we reserve the right to refuse the information within the statutory limits or to charge a reasonable fee for it. The processing of your request is subject to the statutory deadline of 30 days. We may extend this deadline by a further two months due to the complexity and high number of requests, if necessary. You will be informed about the extension within one month of submitting the request for information. At the same time, you will be given the reasons for the extension. Deletion and correction You have the option at any time to request the deletion or correction or completion of your data, provided that no statutory retention obligations or a statutory authorization are in conflict. Please note that the exercise of your rights may be in conflict with contractual agreements and may have corresponding effects on the execution of the contract (e.g. early termination of contract or cost consequences).