Privacy and GDPR
Privacy and GDPR
Privacy Policy
1. General Information and Data Controller
Data Controller: Amelie Care, Suomi - Finland
Contact Person for Data Protection Matters: T Susa Rajala Email: info@ameliecare.com
Legal Basis for Data Processing: We process your personal data in accordance with the EU's General Data Protection Regulation (GDPR). The main basis for processing is the performance of a contract (providing the service to families and nannies/sitters) and compliance with legal obligations.
2. Personal Data Processed
This section answers the question: what data is collected.
In the Amelie Care placement service, we process data belonging to two main groups: family data and nanny/housekeeper data.
A. Family Data
Contact Information: Name, address, phone number, email address.
Service Details: Number of children, age, special needs, duration of service, description of need.
Billing Information: Payment details (not stored if an external payment service is used) and information related to invoicing.
B. Nanny or Housekeeper Data
Personal Information: Name, date of birth, address, phone number, email address.
Professional Information: CV, work experience, education, driver's license, references.
Criminal Record Extract: Required by law for those working with children.
Contractual Information: Data related to the employment contract and salary.
3. Purposes of Processing Personal Data
This section answers the question: how is the data used.
Personal data is used only for pre-defined purposes:
Service Provision and Implementation: The matching process between the nanny/housekeeper and the family, contract management, and execution of assignments.
Customer Relationship Management: Customer communication, newsletters, and collecting feedback to improve the service.
Legal Obligations: Fulfilling obligations related to accounting, taxation, and employer responsibilities.
Service Security: Checking the backgrounds of nannies/housekeepers (within the limits permitted by law) and ensuring the quality of the service.
4. Disclosure and Transfer of Data
This section answers the question: to whom is the data given.
Amelie Care does not sell or disclose personal data to third parties for marketing purposes.
Data is only disclosed for necessary purposes:
Service Implementation: After anonymous recruitment, the information of job applicants who proceed to the next stage is disclosed to client families, and the families' information is disclosed to selected nannies or housekeepers to enable the placement process.
Legal Obligations: Data is disclosed to authorities (e.g., the Finnish Tax Administration, Kela) when required by law.
Technical Service Providers: We use reliable, GDPR-compliant service providers (e.g., accounting, email, IT systems) who process data only on our behalf.
Data Transfer Outside the EU/EEA: We generally do not transfer personal data outside the EU/EEA. If a transfer is necessary (e.g., for certain technical cloud services), we comply with the standard contractual clauses approved by the EU Commission to ensure the lawfulness of the transfer.
5. Personal Data Retention Period
We retain personal data only for as long as necessary to fulfill the purposes mentioned above.
Customer relationship data (contracts, invoices) is retained for six (6) years in accordance with the requirements of the Accounting Act.
Data related to job applications or placements that did not result in an assignment will be deleted within a reasonable period (12 months) from the last contact, unless written consent for longer retention has been requested.
6. Rights of the Data Subject
This section is the core of the GDPR and answers the question: what rights does the user have.
You have the right to:
Access the Data: The right to request access to your own personal data.
Rectify the Data: The right to request the rectification of inaccurate or incomplete data.
Request Erasure ("Right to be Forgotten"): The right to request the erasure of your data to the extent that legal obligations or the contract do not prevent erasure.
Object to Processing: The right to object to processing that is based on legitimate interest.
Restrict Processing: The right to request the restriction of processing in certain situations.
Data Portability: The right to receive the data you have provided to us in a structured and commonly used format.
Withdraw Consent: If the processing is based on your consent, you have the right to withdraw consent at any time.
Exercising Your Rights: We ask you to send all requests concerning your rights to the data protection contact person mentioned above via email or postal mail.
7. Right to Lodge a Complaint with a Supervisory Authority
If you consider that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland.