PRIVACY POLICY

1. Data Controller and Processor

Data Controller:

The nursery or educational center with which you have formalized your child's enrollment (hereinafter, "the Center"), who determines the purposes and means of data processing.

Data Processor:

Andrea Bonillo Vizcaíno – CIF 46997595Q
C/Cinc, nº 14, 08130, Santa Perpétua de la Mogoda, Barcelona

Provider of the Kidsy application service, who processes personal data on behalf of the Center, in accordance with the data processing agreement signed between both parties.

2. Purpose of Processing

Data is used to:

• Facilitate communication between the Center and families.
• Allow parents/guardians to access the school agenda, information and activities of minors.
• Upload and view photographs and videos of the minor.
• Access live broadcasts showing only the user's child, preventing visualization of other minors through automatic pixelation.
• Administrative and organizational management of the service.

3. Legal Basis for Processing

The legal basis is:

• Execution of the service provision contract between the Center and families (art. 6.1.b GDPR).
• Express consent of parents/guardians for the processing of images and videos of the minor (art. 6.1.a GDPR and art. 7 LOPDGDD). Such consent is collected by the Center.

4. Personal Data Processed and Origin

Personal data processed includes identification data (name, surname, ID, telephone, email) and, where applicable, image and video data of the minor.

This data is provided by the user (father/mother/guardian) to the Center voluntarily.

Use of the application's features may require providing certain data; refusal to provide necessary information will prevent proper service delivery.

The user guarantees the truthfulness and accuracy of the data and commits to keeping it updated. If the data belongs to a third party, they guarantee that they have informed them of this policy and have their authorization.

5. Commercial Electronic Communications

In accordance with Law 34/2002 (LSSI), the Processor and Controller will not send unsolicited commercial communications. In case of a prior contractual relationship, communications about similar services may be sent. The user may object at any time.

6. Link Policy

The application may contain links to third-party sites (e.g., social networks). The Processor and Controller are not responsible for the content or privacy policy of such websites.

7. Personal Data Retention Periods

Data will be retained while the user is registered for the service or as long as necessary for compliance with legal obligations. In case of cancellation, it will be kept blocked during legally required periods.

8. Confidentiality, Protection and Security of Personal Data

The Processor will apply necessary technical and organizational measures to ensure data security and confidentiality, preventing unauthorized access, loss or destruction.

Data will be treated as confidential and this obligation extends to all personnel with access to it.

9. Transfers and Recipients of Personal Data

Data will only be communicated:

• To competent authorities when there is a legal obligation.
• To providers acting as sub-processors, with contracts ensuring GDPR compliance.

10. User Rights

Users may exercise their rights of access, rectification, deletion, limitation, opposition and portability before the Center (Data Controller), proving their identity.

They may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).