|The objective of processing personal data|
Management of the Nannybag contact site.
Type of personal data processed
Categories of people concerned
Duration of processing
Nannybag only stores the data collected on its Members for the period during which they have an account on the Nannybag website.
|Location where the data is processed||European Union|
Nannybag is responsible for data processing and will comply with the obligations of the applicable regulations above, notably the obligation to inform the required persons, maintain a data-processing log, and in general adhere to the principles of the regulation.
The data supplied by Members to Nannybag for the purposes of service provision remain the property and responsibility of Members.
Nannybag operates exclusively as a personal data processor.Obligations of Nannybag to Members
Data processing :
Nannybag agrees to process data only with the objective of operating services and in compliance with the written instructions of the Member, including with regards to the transfer of data outside of the European Union. Nannybag agrees to inform the Member if, in its opinion, an instruction constitutes a violation of applicable regulations.
Security and confidentiality of data :
Nannybag commits to implementing appropriate technical and organisational measures to ensure the security and integrity of personal data, its backup and restoration if a physical or technical incident occurs. Consequently, Nannybag guarantees the Member against fraudulent or illegal use of their data, against destruction, partial loss, total loss or theft of their data. Nannybag ensures that persons authorised to work with their data are subject to the obligation to keep them confidential. Nannybag commits to not divulging or passing on personal data, whether for free or paid, directly or indirectly, and to not reproducing, copying, communicating, or making personal data accessible to any third-party in any form or by any means.
Nannybag commits to storing data inside the European Union.
Other data processors :
Nannybag agrees not to subcontract the processing of personal data to any other data processors without the prior, specific or general written agreement of the Member. Where the authorisation is general, Nannybag agrees to inform the Member of any expected change or addition of subcontractor and the Member has the right to object to such changes.
Supplier information :
Nannybag agrees to respond to any request for information made by the Member, whether exercising their right to request information, as part of an impact analysis, a request by data protection authorities or the mandated data protection representatives of the Member.
Notification of data breaches and complaints :
Nannybag agrees to notify the Member of any breaches of the security of personal data or of any complaints made by anyone about the data within 48 hours of being informed of such. Where the Member themselves declares a data breach to data-processing authorities, Nannybag agrees to provide the Member with all relevant information and contact details. In general, Nannybag agrees to inform the Member as soon as possible of any dereliction of their duty, by its employees, service providers or by third parties of which it may have knowledge, and inform the Member as soon as possible of any request concerning their (personal) data.
Cooperation with data protection authorities :
Nannybag agrees to cooperate with data protection authorities at the request of the Member, notably on information requests which may be made to either party as part of an inspection. If the Nannybag should receive a request from administrative or judicial authorities, then Nannybag agrees to inform the Member immediately
Data conservation :
Nannybag agrees to delete personal data six months after the expiry of the contract, no matter the reason for contract termination and not to retain a copy of the personal data. By extension, data may be deleted before this date on explicit request by the Member.
Register and documentation :
Nannybag maintains a register of data processes carried out on behalf of Members. The register contains information on data processes executed. Nannybag agrees to provide the Member, on request, with all information to demonstrate that it complies with its obligations.