Privacy Policy
Notice under Articles 13 and 14 of EU Regulation 2016/679
1. Data controller
Valentina Gadaldi · [email protected]
2. What data we process
| Category | Examples | Legal basis |
|---|---|---|
| Registration data | name, email, phone, town, valley | performance of the contract |
| Profile content | experience, qualifications, rate, description, photo | performance of the contract |
| Verification outcomes | document type, last four digits, verification date, outcome of contacting references | legitimate interest in the safety of the service |
| Reference data | name, role, contact details | legitimate interest; the user states they have informed them |
| Parent or guardian (sitter applicants aged 16-17) | name and contact details, given by the minor at sign-up, used to contact them and confirm consent before the profile is published | obligation to verify consent from whoever holds parental responsibility |
| Payment data | managed by the payment provider, not stored by us | performance of the contract |
| Reports | content of the report and actions taken | legal obligation and legitimate interest |
| Child's profile | allergies or intolerances, use of any auto-injector or life-saving medication, any special needs freely indicated by the parent (for example a disability, a chronic condition or ongoing treatment, if the parent chooses to note them), meal and bedtime routines, paediatrician and emergency contacts — entered by the parent or guardian | explicit consent (health data, Article 9 of the Regulation) |
| Pet's profile | species, size, temperament, allergies or intolerances, any special needs freely indicated by the owner (for example a disability or a chronic condition), routine, vet contacts — entered by the owner | performance of the contract; not personal data of a natural person |
| Messages between family and sitter | content of messages exchanged on the platform between the two parties of an already-started conversation | performance of the contract |
| Real-time location | voluntarily shared by the sitter during an engagement, only while they keep the Messages page open on screen | explicit consent, revocable at any time by pressing "Stop" |
| Requests from the "Contact us" form | name, email, message sent by whoever writes through the public support form, even without an account | pre-contractual measures requested by the data subject |
3. Data we do not process
We do not request, receive or retain:
- criminal record certificates, pending charges, or any data on criminal convictions and offences, including statements about the absence of convictions (Article 10 of the Regulation and Article 2-octies of the Italian Data Protection Code);
- health data of sitters, facility owners or adults in general: medical certificates, diagnoses, treatments, medical records. The sole exception is the profile a parent or guardian voluntarily fills in for their child (allergies, use of any auto-injector or life-saving medication, any special needs freely described — see point 2): data processed only with explicit consent collected at the time of saving, never used for diagnostic or medical purposes, shared only with the sitters the parent themselves chooses case by case within their own conversation, and deletable at any time by the parent from the Children and pets profiles page;
- data revealing religious or philosophical beliefs, political opinions, trade-union membership, ethnic origin, sex life or sexual orientation.
Copies of identity documents used for verification are not retained: only the outcome of the check is recorded once it is complete.
4. Minors
The service is open from age 16 upwards. Anyone aged 16 or 17 gives, at sign-up, the name and a contact detail of whoever holds parental responsibility for them: before publishing the profile, we contact that person directly to confirm their consent. The profile stays under review, not visible to families, until that consent is confirmed. Publishing data or images of the minors sitters care for is forbidden; content of this kind is removed.
5. Recipients
Data published on a profile is visible to Platform users; contact details are accessible only to users with an active subscription or Pass. The following may process data on our behalf, as processors: the hosting provider Cloudflare Pages, Supabase (database, accounts, messages and contact requests received through the "Contact us" form, servers within the European Union), and the email service Google (Gmail).
6. Transfers outside the European Economic Area
Some providers may process data outside the EEA, on the basis of adequacy decisions or standard contractual clauses. Switzerland is covered by an adequacy decision.
7. Retention
Profile data: for the duration of the sign-up and twelve months after cancellation. Verification outcomes: twenty-four months. Reports and related actions: five years, for defence purposes. Accounting data: ten years, as required by law.
8. Your rights
You can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest, by writing to [email protected]. You can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or, if you reside in Switzerland, with the Federal Data Protection and Information Commissioner.
9. Updates
Substantial changes are communicated by email to registered users.
