We think your privacy and that of your child(ren) is very important. We ensure that the personal data you share with us is handled carefully and in accordance with applicable laws and regulations, including the General Data Protection Regulation (GDPR). In this privacy statement we would like to explain how we do this.
International Childcare Eindhoven is responsible for the processing of personal data as shown in this privacy statement. They are represented by Servicebureau Kinderopvang, located at Ringbaan-Oost 240, 5018 HC Tilburg. If you have any questions about this, we are happy to help you! You can reach us at firstname.lastname@example.org.
Data we process
We process your personal data because you use our services and/or because you provide this data to us yourself, for example by filling in a form on our website. Wherever we generally refer to 'your personal data', we mean your personal data as an (interested) parent/carer and/or that of your child(ren).
Below we indicate which data we process.
Filled in contact form
The following data will be processed as soon as the contact form on our website is filled in. This data is recorded in order to be able to contact you, and goes directly to the director of the childcare location that has been chosen:
- First and Last Name
- Question or comment
- Email address
- Telephone number (if filled in)
Completed Tour Application form
The following data will be processed as soon as an application form for a tour is completed on our website. This data is recorded in order to be able to contact you and goes directly to the director of the childcare location that has been chosen:
- First and Last Name
- Email address
- Phone number
- Comments (if completed)
When visiting our website, we process the following data of all visitors:
- Location data
- Information about your activities on our website
- Internet browser and device type
If you do not want this analytical data to be collected, please use the Google Analytics Opt-out Browser Add-on.
Completed childcare registration form
The following data will be processed as soon as a parent completes the childcare registration form. This data is recorded for the purpose of executing the agreement for care of the child(ren) of the parent(s) concerned, at one of our childcare locations.
- First and Last Name
- Date of Birth
- Social Security Number (BSN)
- Address details
- Telephone number
- E-mail address
- Relationship to the child
- Whether the parent/carer works, is following an education or integration course, another plan or does not work.
- Income data, as far as needed to determine the amount of parental contribution.
- First and Last Name
- Date of birth (or due date)
- Social Security number (BSN) unless:
- you are not entitled to a council subsidy and childcare allowance;
- you are entitled to council subsidy, but the subsidy scheme does not explicitly allow the processing of the child's BSN by the childcare organisation
- Type of childcare
- Requested days for childcare
- Whether the child needs additional (medical) care that affects the care
- Primary school child (only when registering after-school care)
- Requested contract start date
- Requested contract type
- Location of childcare
- Possible additional comments
We do not store this data longer than necessary to be able to carry out our work and comply with the law. We hereby take into account the legal regulations regarding retention periods of, among others, the Tax And Customs Administration and recommended retention periods by the Dutch Data Protection Authority (DAP).
As soon as a child is registered at one of our locations and parents actually agree to place their child, we process additional data in addition to the information provided by the parent(s) on the registration form. This concerns (at least) the following data:
- Bank account number of parents (only if parents order direct debit).
During the placement of the child, we keep a paper and/or digital file which, (in addition to the aforementioned personal data) contains, among other things, the following data:
- Medical data (if necessary)
- Data on the development of the child
The purpose behind the personal data we process
We only process personal data in order to carry out our tasks. The following reasons are the main purposes for which we process personal data. After each purpose we have stated which legal processing reason applies from the GDPR:
- to implement the placement agreement (necessary for the execution of an agreement);
- to be able to call, email or send you messages via the parent portal as necessary to perform our services (necessary for the execution of an agreement);
- to inform you about changes to our services and products (legitimate interest);
- to ensure that you receive relevant information about the (possible future) childcare of your child(ren) (necessary for the execution of an agreement);
- to ensure that the administrative processing of your child(ren)'s childcare is well organized (necessary for the execution of an agreement);
- handling your registration and/or payment (necessary for the execution of an agreement);
- sending a newsletter (legitimate interest and/or consent);
- we analyse your behaviour on the website in order to improve the website and to tailor the range of products and services to your preferences (legitimate interest);
- we use images for promotional purposes. If your child is visible on this footage, we will only use it with your consent (permission);
- we also process personal data if we are legally obliged to do so, such as data that we need for the Tax And Customs Administration (necessary for a legal obligation);
- to ensure adequate administration within the children's centre (necessary for a legal obligation);
- to be able to follow the development of your child (necessary for a legal obligation);
- where appropriate, we provide data to third parties for external audits, audits, business transactions (e.g. when entering into a partnership) and promoting security. Confidentiality is central to the implementation of this. The data is not sold to third parties, for example for marketing purposes.
We ask explicitly for permission from parents who are (future) customers with us for:
- processing special personal data of their child(ren);
- the use of images of their child(ren);
- the retention and analysis of personal data in order to gain more insight into relevant market information with which we can improve our services.
This is why we explain the purpose and use of this personal data. The parents are also reminded they may withdraw their consent to the processing of this information at any time.
Sharing personal data with third parties
We offer a familiar and safe environment for your child and think it is important that development is stimulated. There is regular consultation on this. We do not sell your data to third parties. We share personal data with various third parties if this is necessary for the performance of our tasks and to comply with any legal obligation. Along the lines of, for example, of the Tax And Customs Administration, GGD, Child Services Agency, the council, schools, etc.
Personal data may be provided to third parties without permission to the extent that:
- there is a legal requirement (e.g. in the context of the childcare allowance or to the council for the subsidy received for early childhood education);
- if this is permitted in view of the purpose for which the data is collected and the subject of the data can reasonably know that provisions can be put in place;
- for an urgent and important reason, insofar as this does not disproportionately harm the privacy of the registered(s).
In some other cases we also provide your personal data to third parties, but we only do this after we have explicit permission for this.
The suppliers we work with also care about your privacy. We complete a processing agreement with companies that process your data on our behalf, to ensure the same level of security and confidentiality of your data. Think, for example, of our child plan program (including parent app and group app) the website builder or a photographer who takes photos at the location.
We have also entered into a processing agreement with Google. We use Google Analytics to analyse your behaviour on the website in order to improve the website and to tailor the range of products and services to your preferences. The data we collect in Google Analytics is anonymised and encrypted. The so-called 'sharing of data' with Google is off. Finally, we do not use the Analytics cookies in combination with other Google services. If you do not want this analytical data to be collected, please use the Google Analytics Opt-out Browser Add-on.
How long we keep personal data
We do not store your personal data for longer than is strictly necessary. The retention period depends on the purpose for which we received or collected the data and on any legal obligations to retain data. For example, administrative (personal) data generally has a retention period of seven years. If you have any questions about this, you can contact us via email@example.com.
How we secure personal data
We take the protection of your data and that of your child(ren) seriously. We take appropriate measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised alteration. The (personal) data that you enter and share with us via our website is encrypted and is not accessible to unauthorized persons. If you feel that your data is not properly secured or there are indications of abuse, please contact us via firstname.lastname@example.org.
Your rights under the GDPR
You have several rights under the GDPR:
- the right to see what personal data we process about you or your child;
- the right to have incorrect personal data processed by us corrected;
- the right to have certain personal data deleted in specific cases, such as if processing is based on consent or if the processing is unlawful;
- the right to restriction of processing operations. For example, if the accuracy of the processing is disputed;
- the right to data portability. This means that you may submit a request to us to send the personal data that we have collected about you, to you or another organisation mentioned by you;
- the right to object to processing based on a legitimate interest. The processing operations based on a legitimate interest are included in this privacy statement under the heading 'For what purpose we process personal data';
- the right to withdraw consent if the processing is based on consent.
You can send a request for access, correction, deletion, data transfer of your personal data or request for withdrawal of your consent or offer an objection to the processing of your personal data to email@example.com.. Service Bureau Kinderopvang assumes that the parent will agree with any requests arising from this privacy statement with the other parent (other than contract parent). The non-contract parent may, if desired, make use of the rights as described in these privacy regulations when this is done in coordination with the contract parent.
To ensure that the request for access has been made by you, we ask you to include a copy of your identification document with the request. On your copy please black out your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Social Security Number (BSN). This is to protect your privacy. We will respond to your request as soon as possible, but no later than within four weeks.
Please note that any change in your name or address details must be passed on to your location director.
We would also like to point out that you have the possibility to file a complaint with the national supervisory authority, the Dutch Data Protection Authority.
Based on automated processing, we do not make decisions about matters that can have (significant) consequences for people. These are decisions that are made by computer programs or systems, without a human being (for example, an employee of ours) being involved.
Cookies, or similar techniques, that we use
We use different types of cookies.
Firstly, the necessary cookies with a purely technical functionality. These ensure that the website works properly. This includes the cookies that collect anonymised data about the use of our website and help us improve the site. If you do not want this analytical data to be collected, please use the Google Analytics Opt-out Browser Add-on. Preference cookies help remember your preferred settings (such as preferred language, or cookie preferences). And statistics cookies also collect anonymised data about our website. This is never privacy sensitive. Finally, we place marketing cookies, which track your surfing behaviour. Cookies from embedded content from social media sites such as YouTube, Facebook and LinkedIn are also included in this category. Through marketing cookies we can also show you advertisements that apply to you (remarketing), for example on social media. Do you want to see our locations on a Google Maps map or see a 360 degree tour of our locations? Even then, you have to accept the marketing cookies. Through the Hotjar tool we analyse (anonymously) the use of our website so that we can improve the site. Please note that the website experience may not be optimal if you do not accept all cookies.
On your first visit to our website, we informed you about these cookies and asked your permission to place them.
You can also opt out of cookies from all websites by setting your internet browser so that it no longer stores cookies (Chrome, Internet Explorer, Firefox and Safari). In addition, you can delete all information previously stored via the settings of your browser. If you disable these cookies in your browser, you can no longer use all the functionalities of our website and embedded content can no longer be displayed. As a result, the experience of the site may be disappointing.
Below you will find an overview of all cookies used on our website. The website works optimally when all the boxes are ticked. You can always change your preferences.