Privacy Policy

Who we are

This website is operated by the Pupils’ Committee of the European School of Karlsruhe (ESK). The PC is a student representative body that organises projects, events, and communication for students.

Contact email: [email protected]

Scope of this policy

This Privacy Policy applies to all visitors of this website and to all data processed through:

• the website itself,
• contact or idea submission forms,
• login areas for authorised staff or PC members,
• technical logs and security measures.

What data we collect

Automatically collected data

When you visit this website, some technical information is automatically processed by the server. This may include:

• IP address (usually anonymised or shortened where possible),
• date and time of access,
• browser type and version,
• operating system,
• referrer URL.

This data is used only for technical operation, security, and troubleshooting. It is not used to identify you personally.

Data you provide voluntarily

You may voluntarily provide personal data when using certain features of the website, for example:

• submitting ideas or feedback,
• contacting the PC by email or form,
• logging into restricted areas.

Depending on the feature, this may include:

• name (optional in some forms),
• email address (optional in some forms),
• content of messages or ideas.

Anonymous and optional submissions

Some forms on this website allow anonymous submissions. If you choose not to provide your name or email, your submission will be processed without identifying information.

However, please avoid sharing sensitive personal data in free-text fields (e.g. health information, private addresses).

Purpose of data processing

We process personal data only for specific purposes:

• operating and maintaining the website,
• responding to messages and ideas,
• managing PC projects and communication,
• ensuring website security and preventing misuse,
• allowing authorised users to log in.

Legal basis (GDPR)

Data processing is based on the General Data Protection Regulation (GDPR), in particular:

• Art. 6(1)(a) GDPR – consent, when you voluntarily provide data,
• Art. 6(1)(f) GDPR – legitimate interest in operating a secure and functional website,
• Art. 6(1)(b) GDPR – performance of a service when responding to requests.

Storage and security

Data submitted through this website is stored securely using modern technical measures. Access is restricted to authorised PC members or administrators.

We take reasonable steps to protect data against loss, misuse, or unauthorised access. However, no online system can guarantee absolute security.

Use of third-party services

External links

This website may contain links to external websites (e.g. Instagram, school website). We are not responsible for the privacy practices of those websites.

Cookies and tracking

This website does not use tracking cookies for advertising purposes. If technical cookies are used (e.g. for login sessions), they are strictly necessary for functionality.

User accounts and login area

Certain areas of the website are restricted to authorised users. Login data is processed only for authentication and access control.

Passwords are not stored in plain text and are handled securely by the authentication system.

Data retention

We store personal data only as long as necessary for the purpose for which it was collected. Data may be deleted when it is no longer required, unless legal obligations require longer storage.

Your rights

Under the GDPR, you have the right to:

• access your personal data,
• request correction of inaccurate data,
• request deletion of your data,
• restrict processing of your data,
• object to processing,
• withdraw consent at any time.

To exercise these rights, contact us at [email protected].

Changes to this policy

This Privacy Policy may be updated to reflect changes in the website or legal requirements. The current version will always be published on this page.

Last update

Last updated: 2/20/2026