Please note that Care.com adopts a variety of measures to protect the personal data entrusted to us. By way of example, we use a differentiated system of access entitlements and technical protection measures, such as SSL/TLS encryption and cascading firewalls.1. Contact Information
If you have any questions regarding Care.com’s handling of your personal data, you can contact our Data Protection Officer at any time. The Data Protection Officer can be reached at the above postal address and by e-mail at firstname.lastname@example.org. Statutory requirements
In providing its services Care.com will comply with applicable data-protection laws, in particular Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR).3. Processing personal data
Whenever you use or interact with our Site (e.g. by completing and submitting information through our contact form, or by logging on to the Site with a username and password), your personal data is processed.
Personal data consists of information relating to an identified or identifiable natural person. It specifically includes all information that may make it possible to ascertain your identity, for instance your name, your telephone number, your address or e-mail address. A natural person is regarded as identifiable if she or he can be identified either directly or indirectly.
Statistical data that we collect – for example, information obtained when visiting the Site that cannot be associated directly with you personally – does not constitute personal data.3.1. Use for informational purposes
When you use the Site solely for informational purposes, i.e. if you do not log in, or are not otherwise transmitting information to us), we do not collect any personal data, except for the data which your browser transmits to make it possible for you to visit the Site. These elements are:
Users’ IP addresses are deleted or anonymised once use is over. In an anonymisation process, the IP addresses are altered so that individual items of information regarding personal or material matters can no longer be attributed to a particular or identifiable natural person, or can only be so attributed through a disproportionate expenditure of time, costs and labour. We evaluate the data in so-called log files in order to improve the Site further, to make it more user friendly, and to find and correct defects more rapidly. The information is also used to manage server capacities for purposes of meeting relevant volume requirements.
The data processing described in this Section is necessary for you, in the first instance, to access content on the Site. The legal basis is Art. 6, Paragraph 1 (f) of the GDPR, based on Care.com’s legitimate interest in making customers and potential customers aware of our free and paid offerings. The processing of relevant data is necessary to make the Site content available. Otherwise individuals would not be able to use the Site as desired.3.2. Users that log in to the Site
In relation to the delivery of services to users logged in to the Site, Care.com needs to process the personal data with which it has been entrusted in compliance with applicable data-protection legislation. This is only done if you consent to such processing by Care.com or its service providers, or if a legal justification for such processing already exists, e.g. insofar as it is necessary in anticipation of and for the fulfilment of a contract between you and Care.com.
When registering, we specifically ask you to provide your last name, first name, postcode and town or city, and your e-mail address.
If you are offering care services, we also ask you for your gender and date of birth. You will also have the ability to provide additional information, such as your child’s name and birthday, your telephone number, and a photograph. This data is input by you directly. You have the ability to view data specifically processed for the various care related services under “My jobs.”
We also ask commercial/business users to state the approximate size of their respective businesses, their trading names and trading addresses.
If you are a care seeker and create a job profile, additional data may be collected, such as the type of care requested (e.g. senior care tutors, etc.), job description, hourly rate, experience, specific qualifications (e.g. driving licence, languages), photograph and references (optional). This data is entered by you directly. You have the ability to view the data processed specifically for the various care related services under “My profiles.”
If you want to use a service for which there is a charge, payment data will also be collected to process the purchase.
To increase your chances of finding a job or an appropriate carer, other users may view parts of your profile. Specifically the following information is visible to other users of the Site: first name, photograph (if provided), age, and – for data-protection reasons – only the first letter of your surname. Reviews that you provide, or which have been made about you are likewise visible on the Site. These reviews may also be distributed through our Newsletter(s) (See Section 9 below), to increase your chances of finding a job or to recommend carers to care seekers.
The data processing described in this Section is necessary to conclude a contract between you and Care.com, i.e. in anticipation of and then to fulfill a contract. Thus, the legal basis is Art. 6, Paragraph 1 (b) of the GDPR. If you do not provide the data described in this Section, jobs cannot be posted or searched for on the Site.3.3. Care@Work Programme
Our “Care@Work Programme” (also known as “Workplace Solutions”) is directed at commercial businesses. These services allow employers to make it easier for their employees to better integrate their career and family lives. In relation to such services, users may be asked to provide data in form fields appearing on the Site or on the websites of participating employers. If you are an employee taking part in our Care@Work Programme, you may be asked to provide information about your children for whom you are seeking care, or about yourself as a parent. Data relating to your employer may also be recorded for purposes of billing. To ensure sufficient availability of care staff for employers, carers may be contacted when needed and, if they are retained to provide the services in question, relevant data will be passed on to them as well (e.g. first name, last name, contact details, number of children, specific care requirements, etc.).
If you are a carer participating in our Care@Work Programme, your contact details (first name, last name, contact details, etc.) may be passed on to interested families or private households as part of our services.
The data processing described in this Section will be used exclusively for its underlying purpose – namely to locate, implement, and bill for care related services. Related data will be deleted once the services have been completed and statutory or other legal justifications for retaining it no longer exist. The data processing is necessary in order to conclude a contract between employer clients and Care.com, i.e. in anticipation of and then to fulfil a contract. Thus the legal basis is Art. 6, Paragraph 1(b) of the GDPR.3.4. Mobile usage
If you access the Site by using the browser of a mobile device, or if you download and install our app from an app store (e.g. Google Play Store or Apple App Store), you will have the same general experience that you would have when accessing the relevant content through a non-mobile device. In other words, the same personal data is processed.
Please note that to download our app(s), you must first register for a user account with the relevant app store(s) and conclude a usage contract with them. Care.com has no influence over that process; in particular, we shall not be deemed to be a party to any such contract. When downloading and installing the app, the information provided by you will be transmitted to the app store in question, in particular your username, your e-mail address and the customer number of your account, the time of the download, and the individual identity code of your device. We have no influence over this data processing and have no responsibility or liability for it. We process this data when provided only insofar as this is necessary for the downloading and installation of the app on your mobile device (e.g. smartphone, tablet).4. Further transmission
Data collected by Care.com will only be transferred to third parties when necessary to fulfil a contract, to ensure the proper technical and other functionality of the Site, or if there is another legal justification for sharing such data.
Data made available to our service providers may only be used by those service providers in relation to the services for which they have been retained. They are carefully selected by Care.com and are bound by appropriate contracts with us. They are required to follow our processing instructions and are regularly reviewed. They are prohibited from using the data for any purposes other than those described herein.
Should you wish to obtain a detailed list of our service providers, please feel free to write to us, using the contact details referenced in Section 1 above (“Contact Information”).5. Storage and deletion
IP addresses (see Section 3.1 above ) are deleted or anonymised after seven days at the latest.
Portions of our services require the use of so-called cookies. A cookie is a text file that is saved on your hard disk either temporarily (“session cookie”) or permanently (“permanent cookie”). Cookies are not used to execute programs or to load viruses onto your computer. Rather, cookies mainly allow us to customize products or services for you, and to make use of the Site as efficient as possible. It is customary for most browsers to be so set that they accept cookies. However, you can also adjust your browser so that it rejects cookies or asks you to confirm them in advance. If you reject cookies, our Site and services may not function as intended.
We use “permanent” cookies to identify and store your language, and to automatically detect whether you have already taken part in a survey or have already seen information and/or advertisements placed on the Site. This allows us to refrain from sending you the same information on your next visit to the Site. Permanent cookies are automatically deleted after a prescribed period, which may vary, depending on the cookie.
Analysis and advertising processes run by Care.com (See Section 7 below) are also based on cookies.7. Analysis and advertising processes
To improve the Site, we use various technologies to analyze user behaviour and to evaluate the data associated therewith. We also market our services through online advertising. These processes are carried out anonymously, or using pseudonyms, and never related to any specific individual. They are described in more detail in the subsections below.
The legal basis for such processing is Art. 6, Paragraph 1 (f) of the GDPR, based on Care.com’s legitimate interest in marketing its services, and analyzing user behaviour to improve and further develop the Site.7.1. Google Analytics
Google uses the information gained through the cookies to evaluate your use of the Site, to generate reports on Site activities for us, and to provide additional services related to the use of the Site and the internet.
As explained above, you can configure your browser so that it rejects cookies, or you can prevent the capture of data created by cookies relating to your use of the Site (including your IP address), and prevent Google’s processing of data by downloading and installing the browser plugin.
As an alternative to the browser add-on, or within browsers on mobile devices, you can also set an opt-out cookie, to prevent the operation of Google Analytics on the Site in the future (the opt-out functions only in the browser and only for this domain). If you delete your cookies in your browser, you must click on this link again. Click the following link: https://www.care.com/en-gb/deactivate-google
You can find more detailed information on this topic in Google’s Privacy Statement.7.2. DoubleClick
You can prevent the storage of these cookies by adjusting your browser as described in Section 6 above. Please note, however, that by doing so, you may not be able to use all of the Site’s functionality. You can also prevent the capture of data through these cookies relating to your use of the Site, and prevent Google’s processing of such data, by downloading and installing the browser plugin for DoubleClick deactivation. As an alternative to the browser plugin, or within browsers on mobile devices, you can deactivate the “Personalised Advertising” button in Google’s Settings for advertising. If you do so, Google will only show you general advertisements that are not based on information captured about you.
You can find more detailed information on this topic in Google‘s Privacy Statement.7.3. Bing Ads
You can prevent the storage of these cookies by adjusting your browser as described in Section 6 above. Please note, however, that by doing so you may not be able to use all of the Site’s functionality. You can also prevent the capture of data to Microsoft through these cookies relating to your use of the Site and prevent Microsoft’s processing of such data by deactivating the personalised advertisements on Microsoft’s opt-out page. Please note that by doing so and following the deletion of all cookies in your browser or the subsequent use of another browser and/or profile, you will need to opt-out again.
You can find more detailed information on this topic in Microsoft’s Privacy Statement.7.4. Sociomantic
You can prevent the storage of these cookies by adjusting your browser as described in Section 6 above. Please note, however, that by doing you may not be able to use all of the Site’s functionality. You can also prevent the capture of data to sociomantic through these cookies relating to your use of the Site and prevent sociomantic’s processing of such data by deactivating the personalised advertisements on sociomantic’s opt-out page. Please note that by doing so, and following deletion of all cookies in your browser or the subsequent use of another browser and/or profile, you will need to opt-out again.
You can find more detailed information on this topic in sociomantic’s Privacy Statement.7.5. Facebook Pixel
The Site uses remarketing tags (so-called “Facebook pixels”) of Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA (“Facebook”). When you visit our Site, a connection is established via the remarketing tags between your browser and a Facebook server.
In this fashion, Facebook has knowledge that our Site has been accessed using your IP address. With respect to transfers of personal data to the USA, if any, Facebook is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks.
Facebook uses the information gathered to provide us with statistical and anonymous data on the general usage of our Site and the efficacy of our Facebook advertising (“Facebook ads”). If you are a member of Facebook and, via your privacy settings there, have allowed it to do so, Facebook can use the information about your visit which we have captured and link it with your member account, using it for the targeted insertion of Facebook ads.
You can access and modify the privacy settings on your Facebook profile at any time. If you are not a Facebook member, you can block Facebook’s processing of this data by operating the deactivation button for “Facebook” on the TRUSTe website referenced in Section 7.8 below. You can also prevent this data processing by clicking the following link: https://www.care.com/en-gb/deactivate-facebook
You can find further information on this topic in Facebook’s Privacy Statement.7.6. Monetate
You can find more detailed information on this topic in Monetate‘s Privacy Statement.7.7. Tealium Tag Management
You can find more detailed information on this topic in Tealium’s Privacy Statement.7.8. Opt-out via TRUSTe
If you do not want to receive any interest-based advertising, in lieu of the opt-out solutions given above, you can opt out by entering settings to that effect on http://preferences-mgr.truste.com/, a site which provides bundled opt-out options for advertisers. The website operated by TRUSTe, Inc, 835 Market Street, San Francisco, CA 94103-1905, USA (“TRUSTe”) allows users to deactivate all advertisements via opt-out cookies, or alternatively to enter settings individually for each advertiser. Please note that, following the deletion of all cookies in your browser or the subsequent use of another browser and/or profile, you will need to set an opt-out cookie again.8. Use of Facebook Connect
The Site gives you the ability to log on using your existing Facebook credentials. For this purpose we use Facebook Connect, a service provided by Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA (“Facebook”). If you want to use this functionality, you will be routed first to Facebook. There you will be asked to log in with your Facebook username and password. We take no note of that registration information. If you are already logged on to Facebook, that step is skipped. Next your e-mail address and public profile information from Facebook (in particular, name, profile picture, date of birth, number of friends, gender, language and country) is transferred to us if you complete the process by clicking the “Log on with Facebook”) button. This process creates a permanent link between your account with us and your account with Facebook. With respect to transfers of personal data to the USA, if any, Facebook is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks. The legal basis for processing is Art. 6, Paragraph 1 (f) of the GDPR, based on Care.com’s legitimate interest in providing a simple and user-friendly log-in method for users. You can find more detailed information about Facebook Connect and possible settings for protecting your privacy in Facebook’s Privacy Statement.9. Newsletter
You can receive from Care.com information about our own services and special discounts (news about our services and offerings) and about products and services provided by our cooperation partners (partner products and services).
To send our newsletter we use Watson Campaign Automation, a service provided by International Business Machines Corp., New Orchard Road Armonk, New York 10504, USA (“IBM”). If, in an unusual situation, personal data is transmitted to the USA, IBM is certified under both the EU-US Privacy Shield and Swiss-US Privacy Shield frameworks. In addition, suitable guarantees for protecting data subjects have been implemented for transfers to the USA and other countries which, according to the European Commission, do not have an adequate level of data protection. We give you an opportunity to consent to the receipt of our Newsletter while registering on the Site, and within the settings of your user account. The legal basis is Art 6, Paragraph 1 (a) of the GDPR.
We use statistics to analyze certain usage patterns of our Newsletter. We do this through the use of small graphics which are embedded in the messages (so-called pixels). This data is collected solely on a pseudonymised basis, i.e. the IDs are not linked with your other personal data, and it is not possible to tie this information back to a specific individual. If you do not want your user data to be analysed in this fashion, you can cancel your access to the Newsletter (see below) or deactivate graphics as a standard feature in your e-mail program. You can find more detailed information in the instructions for using Microsoft Outlook and Mozilla Thunderbird. The legal basis for processing is Art. 6, Paragraph 1(f) of the GDPR, based on Care.com’s legitimate interest in analysing user patterns to improve and further develop the Newsletter.
You can cancel our Newsletter at any time; you can find a link for this purpose in each Newsletter. Once you are logged on to the Site, you can also cancel the Newsletter through your privacy settings and preferences under Settings / Messaging and security. Alternatively, you can contact us as set forth in Section 1 above.
The only information required by us for you to receive the Newsletter is your e-mail address. Providing data in relation to “News about Products and Services” and “Partner Services and Events” is voluntary and not necessary for using the Site.10. Publication on search engines and on websites of third parties
You can increase your chances of finding a caregiver or job by sharing selected information contained in your job postings and carer profiles with search engines, and displaying such information on third-party websites. Your express consent is necessary for these purposes. If you consent, your photograph, first name, first letter of surname, age, town or city, state, description of job or carer, publication date, category, hourly rate and the URL to your profile will be shared with companies with whom we have established a business relationship. Private contact details, like telephone numbers, postal addresses or e-mail addresses, are not passed on. You can find a list of the companies with whom information can be shared at https://www.care.com/en-gb/third-party. If personal data is transferred to the USA, these companies have either certified under the EU-US Privacy Shield, or other suitable safeguards to protect data subjects have been agreed to in the form of standard data-protection clauses. For other countries which, according to the European Commission, do not have an adequate level of data protection, suitable safeguards for the protection of data subjects have been agreed in the form of standard data-protection clauses.
If you provide consent, your information from job postings or carer profiles can be found through search engines (e.g. Google, Bing). This means that technically we make your profile publicly “visible”. In that regard, we have no influence over which search engines are called upon to retrieve information. The legal basis for processing is Article 6, Paragraph 1 (a) of the GDPR. These functions are not necessary for the use of the Site.
You can withdraw your consent at any time through your privacy settings and preferences on the Site under Settings / Messaging and security.11. Verification checks
We allow users that register with us to verify their personal data. To do so and to obtain a “Verified” badge on our Site, registered users can have their e-mail addresses and telephone numbers validated. For this purpose user telephone numbers are transferred to the following service provider: Nexmo Inc., 217 Second Street, 4th Floor, San Francisco, California 94105, USA (“Nexmo”). If personal data is transmitted to the USA and to other countries which, according to the European Commission, do not have an adequate level of data protection, suitable safeguards for the protection of data subjects have been implemented in the form of standard data-protection clauses. The legal basis is Art. 6, Paragraph 1 (f) of the GDPR, based on the Care.com’s legitimate interest in creating a platform that is trusted. You can obtain further details about the purpose and nature of this data processing including information about your rights and settings options in relation to protecting your privacy in Nexmo’s Privacy Statement.
Identity checks can likewise be carried out via the Facebook Connect Function of the social network Facebook. You can find further information about this matter in Section 8 above.12. Protection against misuse
Our Site uses Google reCaptcha, a service provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. reCAPTCHA prevents automated software (so-called bots) from misusing the Site, i.e. an inquiry is made to ascertain whether inputs to the Site actually come from an actual person. To make this determination, the following data is processed:
You can find more detailed information on this topic in Google’s Privacy Statement13. Surveys and competitions
If you take part in one of our surveys, we use the data provided by you for market and opinion research. We generally use such data in an anonymised form for internal purposes. If, in certain cases, surveys are not conducted anonymously, we will only collect your personal data with your consent.
When we conduct sweepstakes we use your data to determine and notify a winner. More detailed information about any particular incentive can be found in the terms and conditions for the promotion in question. You can prevent the use of data for surveys and sweepstakes at any time, either wholly or for particular campaigns, without incurring any costs other than transmission costs under the basic tariff(s). A written message sent by you to us as set forth in Section 1 above (e.g. e-mail or letter) suffices. Please note that the GDPR does not apply to anonymous surveys. If, in certain cases, personal data is actually processed, the legal basis for such processing is user consent under Art. 6, Paragraph 1 (a) of the GDPR. Providing data as part of surveys or sweepstakes is voluntary and not necessary for the use of the Site.14. Your rights
You can also make certain corrections to your personal data directly via the Site under Data and settings.