Processing of personal data of children
Permission to process personal data from a parent or child
If you request consent for a particular processing, it must be assessed every time whether it is the parent or the child itself that provides it.
A child's consent is always assessed according to their age and development. If a child is requested to consent, they must understand what they is agreeing to. All information and notices should therefore be in a clear and simple language that the child can easily understand.
Online, children over 13 years of age can consent to services themselves, but children under 13 years of age need parental or guardian approval.
Schools and other public bodies can generally not base consent on the basis of a voluntary service. Data protection laws allow such processing to take place only if it is necessary and based on legal authority.
Parental consent is not necessary in the case of preventive or advisory services offered directly to a child.
It should be pointed out that children can always withdraw and change their opinion. Even if a child has agreed to be shown pictures of themselves on the school website, the child can always change their opinion and ask to have them removed.
