Privacy Policy

With this Privacy Policy, Granny Aupair Michaela Hansen e.K. (hereinafter: "we" or "us") informs you about the processing of your personal data (hereinafter also only "data") when you visit our website (https://www.granny-aupair.com) and use our services.

You will also receive information about the rights you are entitled to. Data protection is of great importance to us and we naturally comply with the applicable data protection regulations, in particular the  European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Our website and our services are not directed at children under the age of 16.

If you have any questions about data protection, please do not hesitate to contact us (informally) using the contact details given below.

 

Responsible for data processing:

Granny Aupair Michaela Hansen e.K.

Osterstraße 58 (Haus der Zukunft ) )

20259 Hamburg, Germany

E-mail: info@granny-aupair.com

 

I. Data processing within the scope of your visit to our website

In connection with your visit to our website, we process your personal data. This is done for the purposes described below and to the extent described below. We will only pass on your data to third parties as described below.

 

1. Provision of our website and services

When you visit our website, we automatically collect and process data from you in order to provide our website and the services. For the provision of our websitewe collect and process the following data from you:

 

-          Date and time of your access

-          Your IP address

-          the address of the website from which you came to us

-          the websites you access via us

-          Information about your Internet browser (browser type and version)

-          the operating system of the device with which you access our website and services

-          your Internet service provider

 

For security reasons, this information is stored in log files and deleted after 14 days, but is then included in Host Europe's backups for another week. The data in the log files is stored separately from your other data. 

A longer storage is only necessary in individual cases (e.g. in case of suspicion of abuse or fraud). In these cases, the respective log files are stored until the facts of the case have been clarified and subsequent necessary measures have been completed.

In order to provide you with our website and the services provided with it, we use service providers who process your data stated in this data protection declaration exclusively on our behalf and in accordance with our instructions (so-called contract processors according to Article 28 GDPR) and who have taken the appropriate technical and organisational measures to protect your rights. These include:

For the hosting of the website including related services:

Host Europe GmbH, Hansestrasse 111

51149 Cologne 
Germany

The legal basis for processing your data to provide our website and services is a balancing of interests (Article 6(1)(1)(f)GDPR). We have a legitimate interest in processing your data so that we can offer you our website and the services it provides in a way which is technically flawless, secure and optimised for your needs. The data of the server  log files is stored separately from other data.

 

2. Use of cookies and similar technologies

When you visit our website, we also collect and use information from you to help you use our website and services more conveniently and to measure and improve the effectiveness of our marketing activities. We also use so-called cookies and cookie-like technologies such as pixel tags (i.e. small transparent graphics, also called web beacons). Cookies are small text files that are stored on your device via your Internet browser.

We also allow our partners to use these technologies on our website in order to make your surfing behaviour comprehensible. We always use the most data protection-friendly option, for example by pseudonymising or anonymising your data as early as possible. This data protection declaration explains how we use these technologies in detail. There you will also learn how you can object to such data use.

You can also generally deactivate the use of cookies in your browser settings. Without the use of cookies, however, some functions of this website may not function or may not function as comfortably for you as usual.

You can find out more about the use of cookies in this data protection declaration at the points referring to the use of cookies.

 

3. Use of our newsletter

On our website you can subscribe to a free newsletter with advertising information if you have expressly consented to its receipt. To prevent misuse, you will first receive an e-mail with a confirmation link which you must activate in order to receive the actual newsletter (so-called double opt-in procedure).

When you register for the newsletter, your e-mail address, your IP address and the date and  time of your registration will be transmitted to us and stored and processed by us. Your data will only be used to prove your consent to receive and the sending of the newsletter. Data will not be passed on to third parties.

The legal basis for the processing of your data is Article 6(1), first sentence, point (f) of theGDPR. We have a legitimate interest in processing your data so that we can inform you about interesting offers and information and prove your agreement to receive the newsletter.

For the dispatch of our newsletter we use the following service provider, who processes your data exclusively on our behalf and according to our instructions (so-called contract processor according to Article 28GDPR) and who has taken suitable technical and organisational measures to protect your rights.

This concerns CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. You can access its privacy policy here: https://www.cleverreach.com/de/datenschutz.

This service provider helps us to determine on a pseudonymized basis by integrating pixel tags into the newsletter how many recipients have opened our newsletter and which links contained therein were clicked. This is done on the basis of Article 6(1), first sentence, point (f) of the GDPR. We have a legitimate interest in analysing the opening behaviour of our newsletters in order to optimise our services and to operate our services economically. If you do not agree, then do not open our newsletter in HTML format and do not click on the links contained therein.

Your data will be stored for as long as we send you the newsletter regularly. In the event that we no longer send you a newsletter, we will delete your data no later than 2 months after the last newsletter was sent to you. Your IP address will be deleted 7 days after registration.

Please note that you can unsubscribe at any time by sending an email to redaktion@granny-aupair.com or by clicking the unsubscribe link included in each newsletter.

 

4. Registration and use of our Granny-Aupair Community

In order to use our service (Granny-Aupair Community), you have the possibility to create a user account with us, to create a profile and to use this.

Enrollment

As part of the free registration, you will be required to provide a user name, e-mail address and state the purpose for which you  are registering (as a granny, as a family or as a seeker of a particular service).

Creating a profile

After registering your user account, you can create a profile. You can be seen by other users of Granny-Aupair as well see other users. In this process , we collect and store various information from you. You can change your details in your user account at any time.

If you fill out a profile as a Granny, the requested data are in particular

  • name, address and contact data and personal details (gender, date of birth, country of origin, telephone number, foreign language skills, profession)
  • information on previous activities, marital status, experience with children, driving licence, smoking, health restrictions and information on  dietery restrictions  .
  • information about your desired stay (start and duration, family circumstances, expectations)
  • information on payment and type of membership

 

If you fill in a profile as a family, the requested data are in particular

  • name, address and contact data and personal details (gender, date of birth, country of origin, telephone number, foreign language skills, profession)
  • information about your family (number and age of children in the household, desire to have children, information about care for the children, marital status, information about type and severity of possible disabilities)
  • information about your and your family's everyday life (spoken languages, lifestyle, smoking, pets, domestic help, interests and hobbies, daily routine)
  • information about your home (country, city, housing situation)
  • information about what kind of Granny you are looking for (start and duration, expectations and offers to the Granny)
  • information on payment and type of membership

When you create a profile, you also have the option of uploading a profile picture of yourself and specifying whether or not it is visible to other users.

Visibility for other users

All information provided by you in your profile, with the exception of your contact details, is publicly visible to other registered users as soon and as long as you have activated your profile and have concluded a paid membership. Your contact details (address, telephone, e-mail) will only become visible to other users if you have separately confirmed a contact request from another user.

Usage data

In addition, we collect and store your IP address and your usage actions for a period of 14 days to prevent misuse and unauthorized use of your user account.

Purposes and legal bases of data processing

All data provided by you in connection with the registration and use of our Granny-Aupair Community will be used exclusively for the purpose of providing our agency services.

The legal basis for the processing of data we collect from you in the context of a mandatory field query is to fulfil the existing contract between us or to be able to carry out pre-contractual measures (Article 6 paragraph 1 sentence 1 letter b)GDPR).

The legal basis for processing any information you may provide on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, biometric data, health data or data on sex life or sexual orientation is based on your voluntary consent (Article 6(1)(1)(a)GDPR). This information is not required for the use of our Granny-Aupair Community.

The legal basis for the processing of all further data provided by you, in particular data that was not collected by a mandatory field as well as your usage data, is on the basis of a balance of interests (Article 6 paragraph 1 sentence 1 letter f)GDPR). We are interested in making your use of the Granny-Aupair Community as comfortable, informative and secure as possible.

Deletion of your data

You can delete your user account including your data at any time. Your data stored in connection with the registration and use of your user account will be deleted within 48 hours after you have informed us of your wish to delete your user account. This does not apply to data that must be retained for commercial or tax law reasons. We store this data on the basis of Article 6 paragraph 1 sentence 1 letter c) of the General Data Protection Regulation and delete it upon expiry of the legal retention period.

Cookie usage

During registration and profiling, we use session cookies to store your profile content and permanent cookies to store your login status.

 

5. Order processing for fee-based membership

If you decide to become a paid member, we will also process your data in order to process your order and payment. We process your name and your address and contact data as well as your contract and payment data (account data, PayPal data). The legal basis for this is the existing contract between us  respectively  in order to be able to carry out pre-contractual measures (Article 6 paragraph 1 sentence 1 letter b GDPR). The data is passed on to third parties for payment processing to financial service providers as well as to authorities and consultants within the scope of what is legally permissible.

The data will be deleted as soon as it is no longer required and the relevant commercial or  tax retention obligations (six or ten years) have been fulfilled. Until then, Article 6(1), first sentence, point (c) of the GDPR shall constitute the legal basis for its storage.

 

6. Integration of external content

We have included third party content in some places on our website. These include videos, map services, images and fonts. In connection with the integration of this content, it is technically necessary that the offering third parties are informed of your IP address so that the content can be displayed to you. We do not store your IP address for the integration of external content.

Third-party providers may use your IP address, the use of cookies and other technologies (e.g. pixel tags, i.e. invisible graphics) to track your surfing behavior and, in addition to your IP address, process other technical information (including browser type/version, operating system used, the page you have previously visited, the host name of the accessing device and the time and other information about the use of our online offering).

The legal basis for the processing of your data by us is a balance of interests (Article 6 paragraph 1 sentence 1 letter f)GDPR). We have a legitimate interest in optimizing our website and improving our services to you.

A more detailed description of whose content is embedded and how your data is processed is given below in the respective description of the embedded content:

 

7. Use of web analysis services

When you visit our website, we automatically collect and process data in order to determine and evaluate the behaviour of visitors to our website. In this respect, the legal basis for the processing of your data is a balance of interests (Article 6(1), first sentence, letter f)GDPR). We have a legitimate interest in web analysis so that we can trace from which website a visitor came to us, which subpages were accessed and  for what period of time. . This helps us in particular to optimize our website and to determine whether the Internet advertising we place achieves the results we want.

Google Analytics (with anonymisation function)

For the analysis we use the web analysis service Google Analytics (with anonymization function) of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Google provides us as our contract processor pursuant to Article 28 GDPR with reports on a pseudonymised basis with which we can display and evaluate the activities on our Internet pages.

A Google Analytics cookie is stored on the device with which you visit our website. By accessing individual pages of this website, data is transmitted to Google for the purpose of online analysis. As part of this technical process, Google receives information about your personal data, in particular information about the browser type/version, operating system used, the page you have previously visited, the host name of the accessing device, IP address and the time of the request, which Google uses, among other things, to trace the origin of visitors and clicks. However, this data is not merged with any other data about you. In addition, we use the function whereby Google automatically shortens the IP address of your Internet connection and thus makes it anonymous when you access our website from a member state of the European Union or from another signatory state to the Agreement on the European Economic Area. If, in exceptional cases, personal data should be transferred to the USA, where there is no level of data protection that meets the European standard, this is done on the basis of the EU-US Privacy Shield. Google is registered under this. Further information can be found here: https://www.privacyshield.gov/EU-US-Framework.

You can object to the storage of cookies either by configuring your Internet browser so that cookies are generally not stored or by clicking on the following link. This sets an opt-out cookie that prevents future collection of your data when you visit this website: http://tools.google.com/dlpage/gaoptout?hl=en

The installation of the browser add-on is a contradiction. If your device is deleted, formatted, or reinstalled at a later time, you must reinstall the browser add-on.

The personal data available at Google Analytics will be deleted after a period of 26 months.

Further information and Google's current privacy policy can be found at https://policies.google.com/privacy and http://www.google.com/analytics/terms/de.html Google Analytics will be explained in more detail under this link: https://www.google.com/intl/de_en/analytics/

 

8. Use of social plugins

When you call up a page of our website that contains such a social plugin, a direct connection to the systems of the social plugin providers is established via your Internet browser. The content of the social plugin is transmitted directly to your Internet browser by the respective social plugin provider and integrated into our website. At the same time, the social plugins transmit to the respective social plugin providers the information that you have called up the corresponding page of our Internet presence. This applies regardless of whether you have created a profile with the social plugin provider, logged in with the social plugin provider or actively used a social plugin (e.g. by clicking the "I like" button or by making a comment).

With active use of a social plugin, the corresponding information is transmitted directly from your Internet browser to the respective social plugin provider and stored there. As soon as you are logged in at the same time at one of the social plugin providers, they can assign your visit to our website to your account created  there. We have no influence on the type and extent of the data collected and transmitted. Details on the scope and purpose of data collection, processing and use can be found in the data protection information of the social plugin providers. There you can also see your rights and setting options to protect your privacy.

If you do not agree that the social plugin providers may associate the data collected through your visit to our website with your account we ask you to log out of the social plugin providers before you visit our website.

a) Facebook

The social plugins of the social network Facebook are operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (www.facebook.com), and Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (www.facebook.de) ("Facebook"). An overview of Facebook's plug-ins can be found here: http://developers.facebook.com/docs/plugins; information on data protection on Facebook can be found here: www.facebook.com/policy.php

If data are processed outside the EEA, where no data protection level according to the European standard exists, this is done on the basis of the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC.

If you would like to object to the data collection by Facebook for the future, you can do so here: https://www.facebook.com/settings?tab=ads

b) Google+

Plugins of the social network Google+: are operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). An overview of Google+ plugins can be found here: https://developers.google.com/+/plugins; information on data protection at Google+ can be found here: www.google.com/intl/de/+/policy/+1button.html

If data are processed outside the EEA, where no data protection level according to the European standard exists, this is done on the basis of the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AA

If you wish to object to the future collection of data by Google, you can do so here: http://www.google.com/ads/preferences

c) Twitter

Twitter's social plug-ins are operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). An overview of Twitter plugins can be found here: https://twitter.com/about/resources/buttons; information on data protection on Twitter can be found here: twitter.com/privacy.

If data are processed outside the EEA, where no data protection level according to the European standard exists, this is done on the basis of the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO

If you would like to object to the data collection by Twitter for the future, you can set a so-called opt-out cookie here: https://twitter.com/personalization

 

II. Data processing in the context of our online presences on Facebook, Google +, Twitter

In addition to the website, we are also represented on online platforms and social networks. If you visit these websites and communicate with us via these, the terms and conditions and data protection guidelines (see below) as well as this data protection declaration apply. In this respect, we may be jointly responsible with the provider under data protection law.

Your data can be processed for analysis and advertising purposes. This is done, for example, by creating usage profiles based on your usage behavior and the resulting interests. Cookies are usually used to store the user profiles, which make it possible to analyze your usage behavior and your interests. As a rule, the user profiles serve to enable advertisements to be placed with the respective provider or elsewhere on the Internet that correspond to your interests. Additionally, other data may be stored in addition to the user profiles, especially if you are a registered user of the platform of the respective provider and are logged into this. For a detailed description of the processing process of the respective providers and the possibilities of objection (opt-out), we refer to the information of the providers linked below.

When visiting our online presence and communicating via these online presences, the data processing takes place on the basis of your consent (Article 6 paragraph 1 sentence 1 letter a) GDPR) if you have granted this. Otherwise, data processing, in particular communication with us, is based on legitimate interests (Article 6 paragraph 1 sentence 1 letter f) GDPR. In this respect, we are interested in providing you with the most informative, customized and pleasing online presence possible.

We will delete your data (in particular the contents of our communication) as soon as they are no longer required for the respective purpose and as far as we are able to do so. You have the rights listed under "Your rights" (see below) with respect to us and the provider. Since access to your data is partly only possible for the respective provider, you should in any case also assert your rights against him.

Facebook

Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (www.facebook.com) and Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (www.facebook.de)) enables us to receive your anonymized data on so-called fan pages using the Facebook Insight function, which is provided Eas a non-modifiable part of the user relationship. This data is collected using cookies, each of which contains a unique user code. The user code can be linked to your Facebook login information if you are registered on Facebook and is collected and processed when you visit the fan page.

Information on data protection on Facebook can be found here https://www.facebook.com/about/privacy/

If you would like to object to the data collection by Facebook for the future, you can do so here: https://www.facebook.com/settings?tab=ads

If data are processed outside the EEA-region, where no data protection level according to the European standard exists, this is done on the basis of the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC.

Google

Information on data protection at Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) can be found here: https://policies.google.com/privacy

If you wish to object to the future collection of data by Google, you can do so here: http://www.google.com/ads/preferences

If data are processed outside the EEA-region, where no data protection level according to the European standard exists, this is done on the basis of the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AA

Twitter

Information on data protection regarding Twitter (Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA) can be found here: twitter.com/privacy. If you wish to object to the collection of data via Twitter in the future, you can set an opt-out cookie here: https://twitter.com/personalization

If data are processed outside the EEA-region, where no data protection level according to the European standard exists, this is done on the basis of the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO

 

III. Routine deletion and blocking of data

We store your data only for the period of time necessary to achieve the storage purpose or if this is specified by the European Regulators or other legistators legislator in laws or regulations to which we are subject. In this respect, Germany is subject in particular to an obligation to retain data for six years in accordance with Section 257 (1) of the German Commercial Code (in particular commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents) and for ten years in accordance with Section 147 (1) of the German Fiscal Code (in particular books, records, management reports, accounting documents, commercial and business letters, documents relevant to taxation). If the storage purpose no longer applies or if a legally prescribed storage period expires, your personal data will be blocked or deleted routinely and in accordance with legal regulations. Please also note the specific information on individual storage and deletion periods in this data protection declaration.

IV. Your rights

As a data subject (Art. 4 No. 1GDPR) you have numerous rights related to us, about which we would like to inform you below. Details can also be found in Articles 15 to 21 of the GDPR and Sections 32 to 37 Federal Data Protection Act (in the version applicable from 25 May 2018).

To assert your rights, please contact (also informally) the following office:

Granny Aupair Michaela Hansen e.K.

Osterstraße 58 (Haus der Zukunft)

20259 Hamburg

E-Mail: info@granny-aupair.com

 

1. Right to information

You have the right to obtain information from us as to whether and which data we process about you. This also includes information on how long and for what purpose we process the data, where where they orginate from and to which recipients or categories of recipients we pass them on. In addition, we can provide you with a copy of this data.

2. Right to correction

You have the right that we immediately correct any information about you that is incorrect or no longer applicable. You may also request that your incomplete personal data be completed. If this is required by law, we will also inform third parties about this correction if we have passed on your data to them.

3. Right to deletion  ("right to be forgotten")

You have the right to ask us to delete your personal data immediately if one of the following reasons applies:

  • Your data are no longer necessary for the purposes for which they were collected or otherwise processed, or the purpose has been achieved;
  • You revoke your consent and there is no other legal basis for the processing;
  • You object to the processing and there are no overriding legitimate reasons for the processing; in the case of the use of personal data for direct marketing, a sole objection on your part to the processing is sufficient;
  • Your personal data have been processed unlawfully;
  • the deletion of your personal data is necessary to fulfil a legal obligation under European Union law or the law of the Member States to which we are subject.

Please note that your right to deletion may be restricted by law. These include in particular the restrictions listed in Art. 17 GDPR and § 35 Bundesdatenschutzgesetz  (Federal Data Protection Act ) (in the version applicable from 25 May 2018).

4. Right to limitation of processing (blocking)

You have the right to request us to restrict the processing of your personal data if one of the following conditions is met:

  • You deny the accuracy of your personal data for a period of time that enables us to verify the accuracy of the personal data;
  • the processing is unlawful and you refuse to delete the personal data and  instead request that the use of your personal data be restricted;
  • we no longer need your personal data for the purposes of processing, but you do need it to assert, exercise or defend legal claims, or
  • You have filed an objection against the processing as long as it is not yet clear whether our legitimate reasons outweigh yours.

If you have obtained a restriction on processing as set out above, we will notify you before the restriction is lifted.

5. Right of revocation of consent

You can revoke your consent given to us at any time with effect for the future. This revocation can take place in the form of an informal message to the above-mentioned contact addresses. This also applies to consents that you have given us before the validity of the GDPR (i.e. before 25 May 2018). If you revoke your consent, the legality of the data processing carried out up to then will not be affected. As a rule, the consequence of a revocation is that you can no longer use our service, in the context of which we have asked you for your consent, or can no longer use it in full.

6. Right to data portability You have the right to receive personal data that concerns you and that you have provided to us in a structured, standard and machine-readable format and to transmit this data to others. Details and restrictions can be found in Art. 20GDPR Exercising this right does not affect your right to deletion

7. The right of appeal to the supervisory authority

If you believe that the processing of your data by us violates applicable data protection law, you have the right of complaint to one of the competent supervisory authorities, i.e. in particular the Hamburg Representative for Data Protection and Freedom of Information or the respective supervisory authority in the member state of your place of residence, your workplace or the place of presumed data protection violation.

 

8. Right of objection according to Art. 21 GDPR

In particular, Article 21 GDPR gives you the right to object to the processing of your data at any time for reasons arising from your particular situation, if we base this processing on a balance of interests pursuant to Article 6(1), first sentence, point (f)GDPR . If you object, we will no longer process your personal data, except in two cases:

  • we may prove compelling grounds for processing that outweigh your interests, rights and freedoms, or
  • the processing serves to assert, exercise or defend legal claims.

In particular, even if we process your personal data for direct advertising (e.g. in the context of our newsletter), you have the right to object at any time to the processing of your data for the purpose of such advertising. If you object to the processing of your data for direct marketing purposes, we will no longer use your personal data for this purpose.

 

V. Security

We use technical and organizational security measures to protect your personal data against misuse, loss, destruction or against access by unauthorized persons. Our security measures meet the current state of technology.

 

VI. Validity and changes to the data protection declaration

This Privacy Policy is currently valid and dated May 24, 2018 and  may need to be amended as our website evolves or new technologies are implemented. We reserve the right to make appropriate changes at any time.

 

VII. Your questions about data protection

If you have any questions about this privacy statement or your rights, please contact us:

Granny Aupair Michaela Hansen  e.K.

Osterstraße 58 (Haus der Zukunft)

20259 Hamburg

E-Mail: info@granny-aupair.com