Privacy statement
Who is responsible?
Oppass.nl is responsible for processing personal data on this website. Send questions or requests to info@oppass.nl.
What data and why?
- Account: email address, name, encrypted password, role. Needed to manage your account (performance of contract).
- Babysitter profile: first name, age or date of birth, town, postcode, photo, description, availability, rate and self-reported skills. Needed to show your profile and make you findable (performance of contract). Publicly we only show your town. Your postcode, approximate location and date of birth are not public. We do not ask for your home address.
- Location: we use your postcode area to determine an approximate location. We only use it to find babysitters near a search. We do not show coordinates or distances and do not share live location.
- Contact requests: the parent's name, any requested date, message and status of the request. Needed to enable contact between parent and babysitter (performance of contract). Email addresses are only shared once both parties agree.
- Babysitting requests: town, rounded location, number of children, the children's age group, how often and when you need a babysitter, any rate and your own text. Needed to show your request to babysitters (performance of contract). The request is public on the site, without your name or email address. We only use your postcode to determine your town and do not store it. Only the town, number of children, age group and times can reach search engines; your own text is on a page excluded from them.
- Responses to babysitting requests: your profile, your message and the status. The parent sees these after logging in. If the parent chooses you, your email addresses are shared (performance of contract).
- Reminders for babysitters: if you do not finish your babysitter profile, we send at most three emails to prompt you. For this we use your email address, first name and which parts of your profile are missing (legitimate interest: helping babysitters finish their profile). You can unsubscribe through the link in each email. We do not send these emails to babysitters under 16.
- Automatic emails: we email you about your own contact requests, remind you of open requests, send babysitters new requests near them, ask two weeks after contact how it went and ask babysitters who have long been inactive whether they are still available. We keep a record of which email we sent, without your address, for 12 months (legitimate interest: running the platform and avoiding duplicate emails). Turn off automatic emails with the link at the bottom of the email.
- Alert about a new babysitter: if you ask for this, we keep your email address, the town, a rounded location and the distance until you unsubscribe, for at most 12 months. You only get email after confirming through a link (consent). We do not store a postcode.
- Activity: we remember when you last logged in. On a profile we only show "active this week" or "active this month" (legitimate interest: showing parents who is still available).
- Log in with Google: if you choose this, Google gives us your name and email address. We only exchange data with Google once you click the button (performance of contract).
- Acceptance records: which version of the terms you accepted and when (legitimate interest: being able to show this).
- Reviews: the writer's name, rating, text and email address, also if you write a review without an account. If you do not confirm such a review, we delete the data after 7 days. The email address is not public. We state whether parent and babysitter were in contact through Oppass.nl (legitimate interest: reliable reviews and preventing abuse).
- Reports: the reporter's name and email address, the report and how it was handled (legal obligation and legitimate interest: user safety).
- Technical data: server logs including IP address, for security and fixing faults (legitimate interest).
- Login attempts: to protect accounts against password guessing we record login attempts for 90 days: time, outcome, a shortened IP address and an encrypted code of the entered email address. Never the password (legitimate interest: security).
- Analytics cookies: through Google Tag Manager, only with your consent.
If you search by postcode or town, or enter your postcode as a babysitter, we only send the search term or the four postcode digits to the Dutch government's location service (PDOK) and do not link it to your account.
Data about children
Oppass.nl is not intended for collecting data about children. Do not post names, photos or other identifiable details of children in profiles, requests, reviews or messages. For a babysitting request we only ask for the number of children and an age group, no name or date of birth. You can sign up as a babysitter from age 16. Profiles and photos of users under 16 are not shown. If you find out this has happened anyway, report it so we can remove it.
Who do we share data with?
We do not sell your data. We only share it with service providers we need: DigitalOcean for hosting, Resend for sending emails, Trustpilot for collecting reviews and, if you consent, Google for analytics. The Trustpilot widget loads from Trustpilot's servers; Trustpilot receives your IP address among other things. If you write a review, Trustpilot's terms and privacy policy apply. These parties may also process data outside the European Economic Area. If the law requires it, we share data with competent authorities.
How long do we keep data?
- Account and profile: until you delete your account.
- Contact requests: at most 12 months.
- Babysitting requests: 30 days online, unless you extend the request. After that we keep the request and responses for 6 months, so you can look back at them. You can always delete a request sooner yourself.
- Handled reports and decisions: at most 24 months, or longer if needed for an ongoing case.
- Acceptance records: as long as your account exists.
- Server logs: a limited period, for security and fixing faults.
- Backups: only as long as needed to restore the site.
Your rights
You have the right to access, correction, deletion, restriction, portability and objection. You can change or delete your profile and account yourself in your dashboard. For other requests, email info@oppass.nl; we respond within a month and may ask you to prove your identity. If you gave consent, you can always withdraw it. If you are not satisfied, you can file a complaint with the Dutch Data Protection Authority.
Security
We take appropriate measures, such as an encrypted connection, encrypted stored passwords and limited access to admin functions. No system is completely secure. Suspect a security problem? Email info@oppass.nl.