Privacy

1. Controller

The controller responsible for data processing on this website, within the meaning of the GDPR, is:

Company

Rebernik UG (haftungsbeschränkt)

Address

Am Orangeriepark 5, 13156 Berlin, Germany

Email

info@voronda.org

Phone

+49 176 63489158

2. What this website collects

Nothing that identifies you is collected by the website itself. Specifically, and deliberately:

• No cookies are set. There is no consent banner because there is nothing to consent to.
• No analytics, tag manager, pixel, heatmap or session recording of any kind.
• No fonts, scripts, stylesheets, images or media are loaded from any third party. Every file on this site is delivered by our hosting provider (section 4). Fonts are self-hosted, which also means your IP address is never disclosed to a font provider.
• No contact form, and so no form processor. Contact is by email and telephone only.
• There are no social media embeds, maps, video players or chat widgets.

Your browser stores one item locally if you change the site language: a preference recording which language you chose. If you type your organisation’s name or the line at the end of the home or school page, your browser keeps that in this tab only, so the email on the contact page starts with it filled in; it is removed as soon as the contact page opens, and closing the tab removes it too. If you change the language while writing the email on the contact page, your browser also keeps what you have typed for that moment, so the email in the other language still has it; it is removed the same way. If you open the school pages, your browser also remembers that for this tab only, so the other pages keep showing Voronda School; going back to Voronda or closing the tab removes it. None of this is ever transmitted anywhere, and you can clear all of it at any time through your browser settings.

3. Server log files

Our hosting provider necessarily processes information your browser transmits to deliver the page to you. This typically includes the page requested, the date and time, the volume of data transferred, the referring page, your browser and operating system, and your IP address.

Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest is the technically secure and stable delivery of this website.

Retention

We do not keep server log files ourselves. Cloudflare processes this data only as long as it needs it to deliver the pages and to protect them against attacks. Its retention periods are set by Cloudflare and are not under our control.

4. Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the data described in section 3 on our behalf, under a data processing agreement in accordance with Art. 28 GDPR. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Transfers to the USA are based on the European Commission’s adequacy decision (Art. 45 GDPR).

5. Contacting us

If you write or call, we process what you send us to answer you. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps, and Art. 6(1)(f) GDPR otherwise. We keep correspondence for as long as needed to deal with your enquiry and to meet statutory retention obligations, then delete it.

Email is handled by Zoho Mail, operated by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, as our processor under Art. 28 GDPR. Messages are stored in Zoho’s EU data centre. Zoho may access data from India for technical support, under Standard Contractual Clauses.

6. Your rights

Under the GDPR you have the right to request access to your personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Write to the address above and we will answer.

You also have the right to lodge a complaint with a supervisory authority (Art. 77). For Berlin this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

7. Data protection officer

No data protection officer has been appointed, as there is no legal obligation to do so. Questions about data protection go to the controller named in section 1.

8. Changes

If this website changes in a way that affects what is processed, this page changes with it. Last updated: 6 November 2026.