Source: https://www.care.com/en-gb/privacy-policy
Timestamp: 2018-09-18 14:11:53
Document Index: 516157361

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art 6', 'Art. 6', 'Art. 6', 'Art. 6']

Care.com Privacy Policy - Data Protection Notice
Care.com Europe Ltd. (hereinafter called Care.com) is committed to protecting the privacy of your personal data. This Privacy Policy is designed to provide a clear understanding of the personal data Care.com collects and how we process it to provide users with a better experience. It applies to users of www.care.com/en-gb and any affiliated websites, web pages and mobile applications (the “Site”).
Please note that Care.com adopts a variety of measures to protect the personal data entrusted to us. By way of example, we use a differentiated system of access entitlements and technical protection measures, such as SSL/TLS encryption and cascading firewalls.
Care.com Europe Ltd,
In providing its services Care.com will comply with applicable data-protection laws, in particular Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR).
3.2. Users that log in to the Site
In relation to the delivery of services to users logged in to the Site, Care.com needs to process the personal data with which it has been entrusted in compliance with applicable data-protection legislation. This is only done if you consent to such processing by Care.com or its service providers, or if a legal justification for such processing already exists, e.g. insofar as it is necessary in anticipation of and for the fulfilment of a contract between you and Care.com.
When registering, we specifically ask you to provide your last name, first name, postcode and town or city, and your e-mail address.
If you are offering care services, we also ask you for your gender and date of birth. You will also have the ability to provide additional information, such as your child’s name and birthday, your telephone number, and a photograph. This data is input by you directly. You have the ability to view data specifically processed for the various care related services under “My jobs.”
We also ask commercial/business users to state the approximate size of their respective businesses, their trading names and trading addresses.
If you are a care seeker and create a job profile, additional data may be collected, such as the type of care requested (e.g. senior care tutors, etc.), job description, hourly rate, experience, specific qualifications (e.g. driving licence, languages), photograph and references (optional). This data is entered by you directly. You have the ability to view the data processed specifically for the various care related services under “My profiles.”
If you want to use a service for which there is a charge, payment data will also be collected to process the purchase.
To increase your chances of finding a job or an appropriate carer, other users may view parts of your profile. Specifically the following information is visible to other users of the Site: first name, photograph (if provided), age, and – for data-protection reasons – only the first letter of your surname. Reviews that you provide, or which have been made about you are likewise visible on the Site. These reviews may also be distributed through our Newsletter(s) (See Section 9 below), to increase your chances of finding a job or to recommend carers to care seekers.
In addition, the contents of the job profiles and job advertisements posted by you will be viewable on the relevant Site pages. Accordingly, you have a decisive influence on how much information about yourself you wish to disclose. Providing relevant and appropriate information increases your chances of finding the right job or carer for you. We reserve the right, for reasons of data protection, to delete sensitive information from the profiles and advertisements pursuant to Section 3 of our Terms of Use.
The data processing described in this Section is necessary to conclude a contract between you and Care.com, i.e. in anticipation of and then to fulfill a contract. Thus, the legal basis is Art. 6, Paragraph 1 (b) of the GDPR. If you do not provide the data described in this Section, jobs cannot be posted or searched for on the Site.
3.3. Care@Work Programme
Our “Care@Work Programme” (also known as “Workplace Solutions”) is directed at commercial businesses. These services allow employers to make it easier for their employees to better integrate their career and family lives. In relation to such services, users may be asked to provide data in form fields appearing on the Site or on the websites of participating employers. If you are an employee taking part in our Care@Work Programme, you may be asked to provide information about your children for whom you are seeking care, or about yourself as a parent. Data relating to your employer may also be recorded for purposes of billing. To ensure sufficient availability of care staff for employers, carers may be contacted when needed and, if they are retained to provide the services in question, relevant data will be passed on to them as well (e.g. first name, last name, contact details, number of children, specific care requirements, etc.).
If you are a carer participating in our Care@Work Programme, your contact details (first name, last name, contact details, etc.) may be passed on to interested families or private households as part of our services.
The data processing described in this Section will be used exclusively for its underlying purpose – namely to locate, implement, and bill for care related services. Related data will be deleted once the services have been completed and statutory or other legal justifications for retaining it no longer exist. The data processing is necessary in order to conclude a contract between employer clients and Care.com, i.e. in anticipation of and then to fulfil a contract. Thus the legal basis is Art. 6, Paragraph 1(b) of the GDPR.
3.4. Mobile usage
If you access the Site by using the browser of a mobile device, or if you download and install our app from an app store (e.g. Google Play Store or Apple App Store), you will have the same general experience that you would have when accessing the relevant content through a non-mobile device. In other words, the same personal data is processed.
Please note that to download our app(s), you must first register for a user account with the relevant app store(s) and conclude a usage contract with them. Care.com has no influence over that process; in particular, we shall not be deemed to be a party to any such contract. When downloading and installing the app, the information provided by you will be transmitted to the app store in question, in particular your username, your e-mail address and the customer number of your account, the time of the download, and the individual identity code of your device. We have no influence over this data processing and have no responsibility or liability for it. We process this data when provided only insofar as this is necessary for the downloading and installation of the app on your mobile device (e.g. smartphone, tablet).
Data collected by Care.com will only be transferred to third parties when necessary to fulfil a contract, to ensure the proper technical and other functionality of the Site, or if there is another legal justification for sharing such data.
Data made available to our service providers may only be used by those service providers in relation to the services for which they have been retained. They are carefully selected by Care.com and are bound by appropriate contracts with us. They are required to follow our processing instructions and are regularly reviewed. They are prohibited from using the data for any purposes other than those described herein.
Care.com uses service providers as described in this Privacy Policy. With respect to our paid service offerings, payment data is submitted and passed on to the payment-services provider selected by the user. To provide our services, we also use external hosting and infrastructure providers, development environments, survey providers and care-service providers. If you apply as an au pair abroad or wish to invite an au pair to your home, relevant data may be shared with other platforms within theCare.com group of companies. You can view a list of these platforms and group companies at any time. To carry out and optimise our services we also share your user data (See Section 3.2 above) with our parent company, Care.com, Inc., 77 Fourth Avenue, 5th Floor, Waltham, MA 02451, USA. Suitable measures have been implemented with Care.com, Inc. to protect data subjects in the form of EU Model Clauses. Your personal data is not otherwise made available by us to third parties, unless you have given us your prior consent, or there is another legal justification for us to do so.
Should you wish to obtain a detailed list of our service providers, please feel free to write to us, using the contact details referenced in Section 1 above (“Contact Information”).
IP addresses (see Section 3.1 above ) are deleted or anonymised after seven days at the latest.
User accounts (see Section 3.2 above) are used to store information to facilitate the posting of jobs and the provision of care related services. Data collected in relation to user accounts will be deleted by us no later than one year after your account is terminated in accordance with our Terms of Use, or earlier if you contact us with a request for deletion. In some cases, data may be retained for longer periods if there is a contractual reason or other legal justification or requirement for doing so (e.g. for tax or other legal reasons).
Analysis and advertising processes run by Care.com (See Section 7 below) are also based on cookies.
To improve the Site, we use various technologies to analyze user behaviour and to evaluate the data associated therewith. We also market our services through online advertising. These processes are carried out anonymously, or using pseudonyms, and never related to any specific individual. They are described in more detail in the subsections below.
The legal basis for such processing is Art. 6, Paragraph 1 (f) of the GDPR, based on Care.com’s legitimate interest in marketing its services, and analyzing user behaviour to improve and further develop the Site.
The Site uses Google Analytics, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies to analyze the Site in relation to your patterns of use. The information created through these cookies about the use of Site is transmitted to a Google server in the USA and stored there. With respect to transfers of personal data to the USA, if any, Google is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks. Note, however, that your IP address is truncated prior to the evaluation of usage data, so that it is not possible to make a determinations about your identity. For this purpose, we’ve implemented“anonymizeIP” code in relation to Google Analytics on the Site to ensure that IP addresses are captured in an anonymous fashion.
As an alternative to the browser add-on, or within browsers on mobile devices, you can also set an opt-out cookie, to prevent the operation of Google Analytics on the Site in the future (the opt-out functions only in the browser and only for this domain). If you delete your cookies in your browser, you must click on this link again. Click the following link: https://www.care.com/en-gb/deactivate-google
This Site uses DoubleClick by Google, a service provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. DoubleClick by Google uses cookies to display relevant advertisements to you. To accomplish this, your browser is allocated a pseudonymised identification number (ID), to determine which advertisements have been placed and/or called upon through your browser. The use of DoubleClick cookies thereby enables Google and its partner websites to display advertisements on the basis of previous visits to the Site or other websites on the internet. The information created by these cookies is transmitted by Google for evaluation to a server in the USA and stored there. With respect to transfers of personal data to the USA, if any, Google is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks.
You can prevent the storage of these cookies by adjusting your browser as described in Section 6 above. Please note, however, that by doing so, you may not be able to use all of the Site’s functionality. You can also prevent the capture of data through these cookies relating to your use of the Site, and prevent Google’s processing of such data, by downloading and installing the browser plugin for DoubleClick deactivation. As an alternative to the browser plugin, or within browsers on mobile devices, you can deactivate the “Personalised Advertising” button in Google’s Settings for advertising. If you do so, Google will only show you general advertisements that are not based on information captured about you.
You can find more detailed information on this topic in Google‘s Privacy Statement.
This website uses Bing Ads, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). Microsoft uses cookies to display advertisements which are relevant to you. The advertisements are presented within the so-called Bing Network including websites from Microsoft, Yahoo and AOL. The use of cookies enables Microsoft and its partner websites to place advertisements on the basis of previous visits to our Site or other websites on the internet. The information created by the cookies is transmitted by Microsoft to a server in the USA for analysis and stored there. With respect to transfers of personal data to the USA, if any, Microsoft is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks.
You can prevent the storage of these cookies by adjusting your browser as described in Section 6 above. Please note, however, that by doing so you may not be able to use all of the Site’s functionality. You can also prevent the capture of data to Microsoft through these cookies relating to your use of the Site and prevent Microsoft’s processing of such data by deactivating the personalised advertisements on Microsoft’s opt-out page. Please note that by doing so and following the deletion of all cookies in your browser or the subsequent use of another browser and/or profile, you will need to opt-out again.
You can find more detailed information on this topic in Microsoft’s Privacy Statement.
This website uses dunnhumby, a service provided by dunnhumby Germany GmbH, Paul-Lincke-Ufer 39-40, 10999 Berlin (“dunnhumby”). Dunnhumby uses cookies to direct relevant advertisements to you. To accomplish this, pseudonymised identification numbers (IDs) are allocated to your browser, to determine which advertisements have been placed and/or called upon through your browser. The use of cookies thereby enables dunnhumby and its partner websites to display advertisements on the basis of previous visits to our Site or other websites on the internet.
You can prevent the storage of these cookies by adjusting your browser as described in Section 6 above. Please note, however, that by doing you may not be able to use all of the Site’s functionality. You can also prevent the capture of data to dunnhumby through these cookies relating to your use of the Site and prevent dunnhumby’s processing of such data by deactivating the personalised advertisements on dunnhumby’s opt-out page. Please note that by doing so, and following deletion of all cookies in your browser or the subsequent use of another browser and/or profile, you will need to opt-out again.
You can find more detailed information on this topic in dunnhumby’s Privacy Statement.
The Site uses remarketing tags (so-called “Facebook pixels”) of Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA (“Facebook”). When you visit our Site, a connection is established via the remarketing tags between your browser and a Facebook server.
In this fashion, Facebook has knowledge that our Site has been accessed using your IP address. With respect to transfers of personal data to the USA, if any, Facebook is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks.
Facebook uses the information gathered to provide us with statistical and anonymous data on the general usage of our Site and the efficacy of our Facebook advertising (“Facebook ads”). If you are a member of Facebook and, via your privacy settings there, have allowed it to do so, Facebook can use the information about your visit which we have captured and link it with your member account, using it for the targeted insertion of Facebook ads.
You can access and modify the privacy settings on your Facebook profile at any time. If you are not a Facebook member, you can block Facebook’s processing of this data by operating the deactivation button for “Facebook” on the TRUSTe website referenced in Section 7.8 below. You can also prevent this data processing by clicking the following link: https://www.care.com/en-gb/deactivate-facebook
You can find further information on this topic in Facebook’s Privacy Statement.
This website uses Monetate, an analysis and personalisation service provided by Monetate Inc., 311 W 43rd St., New York, NY 10036, USA. Monetate uses cookies stored on your computer that enable us to analyse your usage of the Site and to deliver content relevant to you based on such usage. The information created by cookies about your use of the Site is transmitted to a server of Monetate in the USA or the European Union and stored and processed there. With respect to transfers of personal data to the USA, if any, Monetate is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks. In addition, suitable safeguards for protecting data subjects have been implemented for transfers to the USA and to other countries which, according to the European Commission, do not offer an adequate level of data protection. Note that prior to additional processing, your IP address is anonymised and replaced by a generic, i.e. no longer allocable, one. Therefore, any direct reference to a specific individual is impossible. You can prevent the storage of these cookies by adjusting your browser settings. Please note, however, that by doing so, you may not be able to use all of the Site’s functionality. You can further prevent the capture of data to Monetate through these cookies relating to your use of the Site (including your IP address) and Monetate’s processing of such data by clicking here.
You can find more detailed information on this topic in Monetate‘s Privacy Statement.
This website uses Tealium Tag Management, a service for managing website tags, provided by Tealium Inc., 11095 Torreyana Road, San Diego, CA 92121, USA. A tag is a piece of code used by service providers referenced in this Privacy Policy, to perform analysis, advertising, chat functionality, or other tasks. This enables us to implement, manage and maintain Site functionality. With respect to transfers of personal data to the USA, if any, Tealium is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks. Tealium Tag Management processes timestamps for website visits, the ID of the website call-up, the visitor’s ID and the ID of a session. In addition, it can trigger other tags which in turn may capture data; Tealium Tag Management does not access such data.
You can find more detailed information on this topic in Tealium’s Privacy Statement.
7.8. Opt-out via TRUSTe
Care.com engages in the above referenced marketing activities to make users aware of its products and services. In doing so, we implement search-engine marketing, partner programmes (Affiliate Marketing) and remarketing campaigns. To manage and optimise these campaigns we use cookies and various tracking technologies. In particular, remarketing allows us to target users who have expressed an interest in our services with interest led advertising on websites within our partner networks. Such advertising relies on a cookie-based analysis of previous usage patterns.
If you do not want to receive any interest-based advertising, in lieu of the opt-out solutions given above, you can opt out by entering settings to that effect on http://preferences-mgr.truste.com/, a site which provides bundled opt-out options for advertisers. The website operated by TRUSTe, Inc, 835 Market Street, San Francisco, CA 94103-1905, USA (“TRUSTe”) allows users to deactivate all advertisements via opt-out cookies, or alternatively to enter settings individually for each advertiser. Please note that, following the deletion of all cookies in your browser or the subsequent use of another browser and/or profile, you will need to set an opt-out cookie again.
8. Use of Facebook Connect
The Site gives you the ability to log on using your existing Facebook credentials. For this purpose we use Facebook Connect, a service provided by Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA (“Facebook”). If you want to use this functionality, you will be routed first to Facebook. There you will be asked to log in with your Facebook username and password. We take no note of that registration information. If you are already logged on to Facebook, that step is skipped. Next your e-mail address and public profile information from Facebook (in particular, name, profile picture, date of birth, number of friends, gender, language and country) is transferred to us if you complete the process by clicking the “Log on with Facebook”) button. This process creates a permanent link between your account with us and your account with Facebook. With respect to transfers of personal data to the USA, if any, Facebook is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks. The legal basis for processing is Art. 6, Paragraph 1 (f) of the GDPR, based on Care.com’s legitimate interest in providing a simple and user-friendly log-in method for users. You can find more detailed information about Facebook Connect and possible settings for protecting your privacy in Facebook’s Privacy Statement.
You can receive from Care.com information about our own services and special discounts (news about our services and offerings) and about products and services provided by our cooperation partners (partner products and services).
To send our newsletter we use Watson Campaign Automation, a service provided by International Business Machines Corp., New Orchard Road Armonk, New York 10504, USA (“IBM”). If, in an unusual situation, personal data is transmitted to the USA, IBM is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks. In addition, suitable guarantees for protecting data subjects have been implemented for transfers to the USA and other countries which, according to the European Commission, do not have an adequate level of data protection. We give you an opportunity to consent to the receipt of our Newsletter while registering on the Site, and within the settings of your user account. The legal basis is Art 6, Paragraph 1 (a) of the GDPR.
We use statistics to analyze certain usage patterns of our Newsletter. We do this through the use of small graphics which are embedded in the messages (so-called pixels). This data is collected solely on a pseudonymised basis, i.e. the IDs are not linked with your other personal data, and it is not possible to tie this information back to a specific individual. If you do not want your user data to be analysed in this fashion, you can cancel your access to the Newsletter (see below) or deactivate graphics as a standard feature in your e-mail program. You can find more detailed information in the instructions for using Microsoft Outlook and Mozilla Thunderbird. The legal basis for processing is Art. 6, Paragraph 1(f) of the GDPR, based on Care.com’s legitimate interest in analysing user patterns to improve and further develop the Newsletter.
You can cancel our Newsletter at any time; you can find a link for this purpose in each Newsletter. Once you are logged on to the Site, you can also cancel the Newsletter through your privacy settings and preferences under Settings / Messaging and security. Alternatively, you can contact us as set forth in Section 1 above.
The only information required by us for you to receive the Newsletter is your e-mail address. Providing data in relation to “News about Products and Services” and “Partner Services and Events” is voluntary and not necessary for using the Site.
10. Publication on search engines and on websites of third parties
You can increase your chances of finding a caregiver or job by sharing selected information contained in your job postings and carer profiles with search engines, and displaying such information on third-party websites. Your express consent is necessary for these purposes. If you consent, your photograph, first name, first letter of surname, age, town or city, state, description of job or carer, publication date, category, hourly rate and the URL to your profile will be shared with companies with whom we have established a business relationship. Private contact details, like telephone numbers, postal addresses or e-mail addresses, are not passed on. You can find a list of the companies with whom information can be shared at https://www.care.com/en-gb/third-party. If personal data is transferred to the USA, these companies have either certified under the EU-US Privacy Shield, or other suitable safeguards to protect data subjects have been agreed to in the form of standard data-protection clauses. For other countries which, according to the European Commission, do not have an adequate level of data protection, suitable safeguards for the protection of data subjects have been agreed in the form of standard data-protection clauses.
If you provide consent, your information from job postings or carer profiles can be found through search engines (e.g. Google, Bing). This means that technically we make your profile publicly “visible”. In that regard, we have no influence over which search engines are called upon to retrieve information. The legal basis for processing is Article 6, Paragraph 1 (a) of the GDPR. These functions are not necessary for the use of the Site.
You can withdraw your consent at any time through your privacy settings and preferences on the Site under Settings / Messaging and security.
11. Verification checks
We allow users that register with us to verify their personal data. To do so and to obtain a “Verified” badge on our Site, registered users can have their e-mail addresses and telephone numbers validated. For this purpose user telephone numbers are transferred to the following service provider: Nexmo Inc., 217 Second Street, 4th Floor, San Francisco, California 94105, USA (“Nexmo”). If personal data is transmitted to the USA and to other countries which, according to the European Commission, do not have an adequate level of data protection, suitable safeguards for the protection of data subjects have been implemented in the form of standard data-protection clauses. The legal basis is Art. 6, Paragraph 1 (f) of the GDPR, based on the Care.com’s legitimate interest in creating a platform that is trusted. You can obtain further details about the purpose and nature of this data processing including information about your rights and settings options in relation to protecting your privacy in Nexmo’s Privacy Statement.
Identity checks can likewise be carried out via the Facebook Connect Function of the social network Facebook. You can find further information about this matter in Section 8 above.
12. Protection against misuse
Our Site uses Google reCaptcha, a service provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. reCAPTCHA prevents automated software (so-called bots) from misusing the Site, i.e. an inquiry is made to ascertain whether inputs to the Site actually come from an actual person. To make this determination, the following data is processed:
Referrer (address of the page on which Captcha is used), IP address, cookies placed by Google, user’s input pattern (e.g. answer to reCAPTCHA question, speed of input in form fields, sequence in which input fields are selected by the user), browser type, browser plugins, browser size and resolution, date, language setting, display instructions (CSS) and scripts (Javascript). That data is sent to Google in encrypted form. With respect to transfers of personal data to the USA, if any, Google is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks. You can find more detailed information on this topic in Google’s Privacy Statement.
You can find more detailed information on this topic in Google’s Privacy Statement
13. Surveys and competitions
If you take part in one of our surveys, we use the data provided by you for market and opinion research. We generally use such data in an anonymised form for internal purposes. If, in certain cases, surveys are not conducted anonymously, we will only collect your personal data with your consent.
When we conduct sweepstakes we use your data to determine and notify a winner. More detailed information about any particular incentive can be found in the terms and conditions for the promotion in question. You can prevent the use of data for surveys and sweepstakes at any time, either wholly or for particular campaigns, without incurring any costs other than transmission costs under the basic tariff(s). A written message sent by you to us as set forth in Section 1 above (e.g. e-mail or letter) suffices. Please note that the GDPR does not apply to anonymous surveys. If, in certain cases, personal data is actually processed, the legal basis for such processing is user consent under Art. 6, Paragraph 1 (a) of the GDPR. Providing data as part of surveys or sweepstakes is voluntary and not necessary for the use of the Site.
You can also make certain corrections to your personal data directly via the Site under Data and settings.
Finally you have the right to complain to the regulatory authority responsible for data protection if you believe that your personal data is being processed in violation of applicable data-protection legislation. You can exercise this right at the regulatory authority in the member country of your place of residence, your place of work, or the place in which the violation allegedly took place. In the United Kingdom, where the registered office of Care.com is located, the contact information of the relevant regulatory authority can be found here: https://ico.org.uk/global/contact-us/postal-addresses/
We reserve the right to amend this Privacy Policy at any time. The current version can be accessed at any time at https://www.care.com/en-gb/privacy-policy.
Care.com Europe Limited