Data Controller

Tiny Care Agency
Represented by: [First Last]
Address: [Full address]
Email: contact@tinycare.com
Data Protection Officer: [First Last — or state that no DPO has been designated pursuant to Article 37 of the GDPR given the size of the organization]

Data We Collect

Nanny Candidates

• Identity data: name, age, postal address, email, phone number
• Emergency contact: name, phone number, relationship to applicant
• Professional data: childcare experience, driver’s license, first aid certificate, languages spoken, personal description
• Documents: résumé, profile photo

Host Families

• Parent identity data: name, email, phone, profession
• Children’s data: name, gender, date of birth, health and behavioral information (special category data under Article 9 GDPR)
• Home address
• Practical information: pets, allergies, childcare schedule, extracurricular activities

Purposes and Legal Bases

International Data Transfers

Data from French candidates is shared with families located in the United States. This transfer outside the European Union is governed by the following safeguards:

[Specify the applicable mechanism: Standard Contractual Clauses (SCCs) approved by the European Commission / EU-US Data Privacy Framework / Explicit consent of the candidate after being informed of the risks (Art. 49.1.a GDPR)]

In all cases, a candidate’s data is only shared with a family after her explicit consent has been collected, as indicated in the application form.

Data Retention

Recipients of Data

Personal data is shared exclusively with:

• Tiny Care Agency staff involved in selection and follow-up
• The relevant host family, after the candidate’s explicit consent
• Technical service providers: [hosting provider, CRM tool, emailing tool — list with applicable GDPR safeguards]

Personal data is never sold, rented or transferred to third parties for commercial purposes.

Protection of Minors’ Data

Tiny Care Agency collects personal data relating to minor children through the family registration form. This data is collected with the explicit consent of parents or legal guardians and is used solely to facilitate the matching process. It is accessible only to authorized Tiny Care Agency staff and the family’s selected nanny.

Data Security

Tiny Care Agency implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure, including: [SSL encryption, restricted access, password policy, regular backups — to be completed based on technical reality].

Your Rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right of rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data
• Right to restriction: suspend processing of your data
• Right to portability: receive your data in a structured format
• Right to object: object to processing based on legitimate interest
• Withdrawal of consent: withdraw your consent at any time

To exercise these rights: contact@tinycare.com

If your request is not satisfactorily addressed, you may lodge a complaint with the CNIL (France): www.cnil.fr.

Policy Updates

Tiny Care Agency reserves the right to update this policy at any time. Changes take effect upon publication. Users will be notified by email in the event of any material change.