Controller
The controller responsible for processing personal data on this website is Melanie Matl, Aupair Agentur Besondere Sterne. You will find the contact details in the Legal Notice. Please direct questions about data protection to .
Principle
We process personal data only to the extent necessary for operating this website and for our work as a placement agency (Vermittlungsagentur). You can inform yourself on this website without providing any details about yourself. Where we need information, we say beforehand what it is for.
Depending on the process, the legal bases are Article 6(1)(a) (consent), (b) (initiation and performance of a contract) and (f) (legitimate interest in the secure operation of the website) of the Datenschutz-Grundverordnung (DSGVO, GDPR).
Accessing this website
When you access this website, your browser transmits technically necessary data to the server: the address accessed, the time, the amount of data transferred, browser type and operating system, and the IP address. This data is required to deliver the page and to keep operation secure. It is not merged with other data.
This website does not set cookies for advertising purposes and does not embed advertising networks. There is no profiling and no automated decision-making within the meaning of Article 22 DSGVO.
Reach measurement and session recording
Draft — reflecting the current technical state, subject to legal review. This section describes the actual technical status of the services in use, as implemented on this website.
All services named here are loaded only after your consent. Without consent, no analytics service is initialised and no data is transmitted to these services. You give and change your choice via the "Cookie settings" button in the footer of every page.
Google Tag Manager
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Container ID GTM-N3N8ZVWX. The Tag Manager is a pure management tool: it does not itself set analytics cookies and does not evaluate usage data. It only loads the downstream services once corresponding consent has been given. This is implemented technically via Google Consent Mode v2: before your decision, the signals analytics_storage, ad_storage, ad_user_data and ad_personalization are set to "denied"; only your choice in the banner sets individual signals to "granted". When the Tag Manager is called, your IP address is technically transmitted to Google.
Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Measurement ID G-595HNPXWQQ, embedded via Google Tag Manager. The purpose is reach and usage analysis: we measure which pages are accessed, how visitors move through the site and which content is found. Among other things, this processes pages accessed, time spent, referrer, approximate location at country or regional level, device, browser and operating system, as well as a pseudonymous identifier stored in a cookie.
IP addresses are not stored. Google discards the IP address before storage; a separate IP anonymisation is therefore neither necessary nor configurable in Google Analytics 4. Google Signals (cross-device evaluation) and ad personalisation are deactivated in our property. The retention period for user and event data in Google Analytics is set to 2 months; after that, Google deletes the affected individual data. Aggregated report data is unaffected.
A transfer of data to Google LLC in the United States cannot be ruled out. The basis for such a transfer is the European Commission’s standard contractual clauses and Google LLC’s certification under the EU-US Data Privacy Framework. In the United States, there remains, despite these safeguards, a risk that authorities access data and that data subject rights are harder to enforce than in the European Union. By giving your consent, you also consent to this transfer (Article 49(1)(a) DSGVO).
PostHog — product analytics and session recording
Provider: PostHog, Inc. Processing takes place in PostHog’s EU region, hosted in Frankfurt am Main, Germany (endpoint eu.i.posthog.com). PostHog automatically captures interactions on this website ("Autocapture"): page views, clicks on buttons and links, scroll depth, and technical details about browser, device and screen size. A pseudonymous identifier is assigned and stored in the browser. Requests technically run via a path on our own domain (/ph) and are forwarded from there to PostHog’s EU servers; your browser does not contact PostHog directly. Without your consent, PostHog is neither loaded nor contacted.
In addition, session recording is active. This reconstructs your visit as a playable video: mouse movements, scrolling, clicks, displayed page content and keystrokes entered into form fields. The recording also captures the contents of form fields — including name, email address, telephone number and message text in the contact form, as well as any other details voluntarily entered there; these entries are readable in the recording. Password fields are excluded. The sole purpose is to understand usage and improve the usability of this website. There is no advertising evaluation and no disclosure to advertising networks.
Legal basis
The legal basis for setting and reading information on your device is § 25(1) TDDDG (Telekommunikation-Digitale-Dienste- Datenschutz-Gesetz), and for the subsequent processing of your data, your consent under Article 6(1)(a) DSGVO.
A recording may contain special categories of personal data within the meaning of Article 9 DSGVO — for example, information about a child’s health or disability. The basis for this is your explicit consent under Article 9(2)(a) DSGVO, which you give by agreeing to the "Statistics" category. Without this consent, no recording takes place.
Consent management and withdrawal
We obtain consent via our own consent banner, which operates without a third-party provider. There are two categories: Necessary (always active, no analytics) and Statistics (PostHog including session recording, switched off by default). "Accept" and "Reject" are presented equally side by side; rejecting requires the same effort as accepting.
Your choice is stored exclusively locally in your browser (localStorage entry bs_consent, with a timestamp and version number); it is not transmitted to us or to third parties. After 12 months the stored choice expires and we ask again. If you delete your browser data, we will also ask again.
You can withdraw your consent at any time via "Cookie settings" in the footer. Withdrawal takes effect for the future: collection stops immediately, any ongoing session recording is ended, and the identifiers stored by PostHog in the browser are deleted. The lawfulness of processing carried out before that remains unaffected. The banner cannot retroactively remove data already transmitted — write to us at , and we will arrange for deletion at the services named above.
Recipients, third countries and storage period of these services
- Google Ireland Limited as processor (Auftragsverarbeiter); possible transfer to Google LLC, USA, on the basis of the standard contractual clauses or the EU-US Data Privacy Framework. Retention of individual data in Google Analytics: 2 months.
- PostHog, Inc. as processor (Auftragsverarbeiter); processing and storage in the EU region (Frankfurt am Main). Session recordings and event data are deleted in accordance with the retention periods of PostHog’s EU offering; earlier at your request.
- The analytics and recording data is not passed on to any other third parties. There is no automated decision-making in individual cases under Article 22 DSGVO.
Your rights to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to complain to a supervisory authority, also apply to this processing — see the sections Your rights and Right to complain. The relevant contact address is .
Getting in touch
If you call or write to us, we process your details in order to answer your enquiry. This includes your name, contact details and the content of your message. The basis is the initiation of a contractual relationship or our legitimate interest in answering enquiries.
Enquiries from families and au pairs
For a placement, we process the information you provide us in the questionnaire and in conversation: information about the family, daily life, living space and the tasks an au pair is to take on. From applicants, we process personal details, information about their education and their previous experience.
Information about a child’s disability
So that an au pair suits your everyday life, we learn things about your child. Such information belongs to the specially protected categories of data. We process it only if you have expressly consented, and only to the extent the placement requires.
What an au pair learns before getting to know you, we agree with you beforehand. You can withdraw your consent at any time for the future. The lawfulness of processing carried out before that remains unaffected.
Recipients and third countries
We pass on your details only to the extent necessary for the placement: to the applicant you get to know, and to bodies involved in the process. Because au pairs come from India, Indonesia and several African countries, data may in the process reach countries outside the European Union.
To send the messages submitted via the contact form, we use the service Resend. Processing takes place in the Ireland (EU) region. The details you enter are transmitted: name, email address, telephone number and message text. The purpose is the delivery and handling of your enquiry.
On several pages you will find a "WhatsApp" button. It is a plain link. As long as you do not click it, nothing is transmitted to WhatsApp. By clicking it, you leave our website; the provider’s terms and privacy notices then apply. If you write to us via WhatsApp, we process your message and the phone number transmitted with it in order to answer your enquiry.
Storage period
We store personal data for as long as we need it for the respective purpose, and beyond that for as long as statutory retention obligations apply. After that, we delete it.
Your rights
You have the right at any time to
- access to the data stored about you (Article 15),
- rectification of inaccurate data (Article 16),
- erasure (Article 17),
- restriction of processing (Article 18),
- data portability (Article 20),
- object to processing (Article 21),
- withdraw a consent given, with effect for the future.
An informal message to is sufficient.
Right to complain
You can complain to a data protection supervisory authority if you believe that we are not processing your data lawfully. The competent authority is the supervisory authority of the federal state (Bundesland) in which we have our registered seat.