1. General information
The protection of your personal data is very important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.
This policy informs you about the type, scope and purpose of the collection and use of personal data on our website www.perfect-aupair.com , a service provided by it-soft GmbH.
2. Controller
Responsible for data processing:
it-soft GmbH
Wendl-Dietrich-Str. 22
80634 Munich
Germany
Phone: +49 89 189 55 15 00
Email:
3. Collection and processing of personal data
a) When visiting the website
When you visit our website, we automatically collect the following data:
This data is used exclusively to ensure trouble-free operation and to improve our services in accordance with Art. 6(1)(f) GDPR.
b) Registration & use of the portal
When you register on Perfect-Aupair.com, we process personal data such as:
- First name and surname
- Email address
- Date of birth
- Address (optional)
- Profile information such as language skills, interests or profile pictures
This data is processed to provide our service and to facilitate contact between registered users (Art. 6(1)(b) GDPR).
c) Contacting us
If you contact us via contact form or email, we store your details to process your enquiry and any follow-up questions.
4. Cookies
Our website uses cookies. These are small text files stored on your device.
Necessary cookies are used to ensure the technical functionality of the website (Art. 6(1)(f) GDPR).
We only use analytics or tracking cookies with your explicit consent in accordance with Art. 6(1)(a) GDPR. When you first visit the website, you will be informed accordingly via a cookie banner.
5. Web analytics & tracking
We currently do not use external web analytics or tracking services such as Google Analytics or Matomo. Technically necessary server logs are processed as described in section 3. If an optional analytics service is introduced in future, we will update this policy beforehand and activate it only after obtaining any consent required through the privacy settings.
6. Disclosure to third parties
We do not disclose your personal data to third parties without your explicit consent, unless this is legally required or necessary for contract fulfilment, for example payment service providers.
7. Storage period
We store personal data only for as long as necessary to fulfil the stated purposes or as long as statutory retention periods apply.
8. Your rights
You have the following rights at any time:
Please contact us at:
9. Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
Germany
www.lda.bayern.de
10. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy where necessary. The current version is always available on our website.
Payment, contract and invoice data
We process order, payment and invoice data to perform the contract (Article 6(1)(b) GDPR) and comply with commercial and tax obligations (Article 6(1)(c) GDPR). Only data required to process payment is shared with payment providers. Our system stores the payment reference, status, currency, amount and a technical checksum, not the complete PayPal notification payload. Consent evidence contains only a cryptographic hash of the IP address. Invoices are generally retained for eight years; other accounting records may be subject to longer statutory periods. Statutory retention duties may prevent earlier deletion.
11. Mobile app, profiles, messages and offers
When the website or app is used, we process account, profile and matching data such as first and last name, email address, country of residence, voluntary contact details, profile image, languages, search criteria, messages, interests and job offers to perform the contract (Art. 6(1)(b) GDPR). Required fields are marked.
The app uses the device language and region locally to suggest a language and country. The camera or media library opens only after operating-system permission; a file is uploaded as a profile image only after selection and confirmation. Login and session tokens are stored securely on the device.
12. Visibility, security and decisions
Approved profile and offer data may be visible to other users or publicly, according to visibility settings, and may therefore be accessed worldwide. Internal messages are intended for participants; our team accesses them only where necessary for support, abuse review or legal duties.
We use manual checks and may use technical risk signals to prevent fake accounts, fraud and abuse (Art. 6(1)(f) GDPR). A block or approval with legal or similarly significant effect is not made solely by automated means. Affected persons may request human review.
13. Evidence, newsletter, recipients and data location
Consent and acknowledgement records include the account, time, text version, country and technical evidence in which the IP address is stored only as a cryptographic hash. The newsletter is voluntary, sent only after double opt-in and can be unsubscribed at any time.
Primary platform and profile data is hosted on it-soft GmbH infrastructure in Germany. PayPal receives the data required to process payments. We do not store full payment credentials. Statutory retention periods for invoices and payment records remain applicable.