Privacy Policy Kroost Nannies
Kroost Nannies attaches great importance to the protection of your personal data. In this privacy policy, we aim to provide clear and transparent information about how we handle personal data. We do everything we can to safeguard your privacy and therefore treat personal data with care. Kroost Nannies complies at all times with applicable laws and regulations, including the General Data Protection Regulation (GDPR). This means that we will in any case:
● process your personal data in accordance with the purpose for which it was provided; these purposes and the types of data are described in this privacy policy;
● limit the processing of your personal data to only those data that are minimally required for the purposes for which they are processed;
● ask for your explicit consent if we need it to process your personal data;
● take appropriate technical and/or organisational measures to ensure the security of your personal data;
● not pass on any personal data to third parties unless necessary for the purposes for which they were provided;
● be aware of your rights regarding your personal data, inform you of these rights, and respect them.
Kroost Nannies is responsible for the processing of your personal data. If, after reading our privacy policy, you have questions or wish to contact us, you can do so using the contact details below:
Kroost Nannies
Data Protection Officer / Contact Person:
Carlien Langelaan
info@kroostnannies.nl
Your personal data is processed by Kroost Nannies for the following purposes:
● Entering into agreements, providing and supporting home-based childminder services—a form of childcare that may entitle you to childcare allowance;
● Sending newsletters and mailings in which we provide necessary information about childcare, childminder care, and Kroost Nannies in particular;
● Entering into agreements under the “Regeling Dienstverlening aan Huis” or employment contracts.
For these purposes, we process the following types of personal data:
For mediation agreements with parents and nannies:
– Name, initials, any middle name
– Address, postal code, city, country
– Phone number, email address
– Gender, date of birth
– Bank account number
– Medical information relevant to the childcare
– Citizen Service Number (BSN)
– Copy of ID
For newsletters and mailings:
– Name, initials, any middle name
– Email address
For agreements under the “Regeling Dienstverlening aan Huis” / employment contracts:
– Name, initials, any middle name
– Address, postal code, city, country
– Phone number, email address
– Gender, date and place of birth
– Marital status
– Employer / place of employment
– Bank account number
– Salary information
– Login details for payroll administration
– BSN
We may provide the data you give to us to third parties if this is necessary for the execution of the purposes mentioned above.
For example, we use third parties for payroll processing and for the administration and invoicing of childcare services. We never share personal data with parties with whom we have not entered into a processing agreement. With these processors, we make clear agreements to ensure the protection of your personal data.
We do not provide personal data to other parties unless legally required to do so. Examples include requests from the Public Health Service (GGD) in the context of childcare supervision or data exchange with the Dutch Tax Authority (Toeslagen). In such cases, we are obliged to provide this information.
We may also share personal data with third parties if you have given us written permission to do so.
We use Google for email and file storage and Mailchimp for newsletters. Both companies are based in the United States. Although the US is not designated as a country with an adequate level of protection, Google and Mailchimp are certified under the EU–US Data Privacy Framework, which enables us to share personal data with them in compliance with GDPR rules.
We only process personal data of minors (persons under 18 years of age) if written consent has been given by a parent, guardian, or legal representative. This consent is obtained when you register your child with us.
Kroost Nannies does not retain personal data longer than necessary for the purpose for which it was provided or as required by law. The statutory retention period for tax records is 7 years.
Seven years after the termination of an agreement, all data we hold about you will be deleted.
If your registration or application does not result in an agreement, we will not retain your data for longer than one year.
We have taken appropriate technical and organisational measures to protect personal data against unlawful processing. These measures include:
● Personal data is always stored behind the protection of at least a username and password, and where possible, two-factor authentication;
● Our computers and servers use security software with automatic updates for both software and operating systems;
● All personal data is secured through backups;
● Only the payroll administrator and employer(s) have access to personnel and payroll data;
● Childcare coordinators and administrative staff have access to KidsAdmin, where personal data of parents and nannies are recorded. Confidential information is not stored in this system but in Google Drive, to which only relevant staff members have access.
You have the right to:
● access your personal data;
● request correction (rectification) of your data;
● request deletion of your data;
● object to the processing of your personal data;
● transfer your data to yourself or another party (data portability).
We may ask you to verify your identity before we can comply with such requests.
If you have a complaint about the processing of your personal data, we ask that you contact us directly. If we cannot resolve the issue together, you have the right to submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
If you have any questions regarding this privacy policy, please contact our Data Protection Officer:
Carlien Langelaan
06-42113334
info@kroostnannies.nl