Privacy Policy
1. Privacy Policy Content
At OH NANNY BLUE, we recognise that your privacy is important to us. This Privacy Policy explains how we collect, use, process, and manage your personal data.
Your “personal data” refers to any information relating to an identified or identifiable natural person, directly or indirectly, through identifiers such as identification details, location data, or other elements specific to your physical, physiological, genetic, psychological, economic, cultural, or social identity.
This Personal Data Protection Policy describes the privacy and data protection practices of OH NANNY BLUE, in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), as well as applicable Greek data protection legislation.
This Policy explains what information we collect about you when you visit our website and/or cooperate with us in any capacity, including as suppliers, producers, commercial representatives, exporters, traders, employees, or when you communicate with us or purchase our services as clients.
It also describes how we process your information to ensure that your rights are always respected, in accordance with the principles of the GDPR.
2. Who We Are
Oh Nanny Blue is a Nanny Agency and platform created from the need to offer children something more than basic care. We believe that every child deserves an environment filled with love, dedication, genuine connection, and meaningful guidance.
For us, childhood is not merely a developmental stage, but the foundation upon which a well-rounded individual is built. Meaningful upbringing is not a checklist of tasks, nor is it limited to expensive toys, amenities, or time-filling activities. It is a responsibility, an honour, and the greatest investment in the future.
3. Registered Address
Velo, Corinthia, Kaidasi, Greece
4. Contact Details
You may contact us by post at the above address, by email at ohnannyblue@gmail.com, or by telephone at +30 697 3780 483 and +30 693 2466 203.
5. Personal Data We Collect
When you work with us, carry out transactions, or communicate with us, we may request certain personal data, including but not limited to: full name, identity card or passport number, postal and email address, medical certificates, credit card details, vehicle information, landline or mobile phone numbers, registration details, purchase orders, and other identifying information.
6. Data of Minors
We do not transact with or collect personal data of minors beyond what is strictly necessary for the conclusion of contracts with our clients (e.g. number of children, ages, interests, etc.).Our website is not intended for children under the age of 15, nor do we conduct marketing activities directed at minor consumers.
7. Legal Basis for Data Processing
We process your personal data lawfully, in accordance with the principles of the GDPR 2016/679 (lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability), for one or more of the following reasons:
• When you have provided explicit consent (opt-in) for promotional or advertising activities outside the scope of our primary contractual relationship
• When processing is necessary for the performance of a contract or for compliance with our legal obligations as Data Controller towards regulatory or judicial authorities
• When processing is necessary to fulfil our legal, tax, labour, health, and social security obligations
• When processing is necessary to serve our legitimate business interests (and those of third parties), provided that your fundamental rights and freedoms are respected, including for example:
-
- To provide effective service and support
- To optimise our services and operational processes
- To respond to requests or enquiries
- To enhance the security and usability of our website and services
- To conduct customer satisfaction surveys
- To inform you, where you have given explicit consent, about new products, services, and offers
8. Data Sharing
In fulfilling our contractual and legal obligations, your personal data may be shared with selected service providers and suppliers. These parties are bound by Data Processing Agreements and are required to ensure confidentiality and data protection in accordance with applicable regulations. Such parties may include:
•External legal, tax, and accounting advisors
• IT support companies and cloud service providers
• Financial and business consultants
• Marketing, security, and facilities management companies
• Courts, prosecutors, police, or other public authorities
• Third parties to whom you have consented for data disclosure
• Payment service providers
9. Transfers Outside the European Economic Area (EEA)
Your personal data is primarily stored in Greece and within the European Economic Area (EEA).
In exceptional cases, data may be transferred to third countries outside the EEA, in compliance with GDPR requirements, such as adequacy decisions, standard contractual clauses, binding corporate rules, approved codes of conduct, or based on your explicit consent. All recipients outside the EEA are required to comply with EU data protection standards and to provide appropriate safeguards.
10. Data Storage and Retention
We process and retain your personal data for the duration of our relationship and for as long as necessary to fulfil our contractual and legal obligations.
CVs submitted for employment purposes, in hard copy or electronic form, are retained at least until completion of the recruitment process and for two years thereafter, for potential future opportunities.
We delete your data:
• When it is no longer necessary for the purposes for which it was collected
• Upon your request for deletion or objection, unless compelling legal grounds require continued retention
• When marketing processing was based solely on your consent and such consent is withdrawn
11. Automated Decision-Making and Profiling
We do not use automated decision-making processes in the course of our business activities. While certain data elements may be processed automatically, human intervention always precedes the establishment of any business relationship.
12. Use of Data for Marketing Purposes
We may process your personal data to inform you about products, services, and offers that may be of interest to you or your business.
We will only do so where we have your consent or where we determine that such processing is within our legitimate interests.
You have the right to object at any time to the processing of your personal data for marketing purposes.
13. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
• The right to access your data and obtain a copy
• The right to rectify or erase your data
• The right to object to or restrict processing
• The right to data portability
• The right to object to automated decision-making or profiling
• The right to withdraw consent at any time, without affecting the lawfulness of prior processing
14. Right to Lodge a Complaint
You have the right to lodge a complaint with us by post at Velo, Corinthia – Kaidasi, by email at ohnannyblue@gmail.com, or by telephone at +30 697 3780 483, as well as with the Hellenic Data Protection Authority (www.dpa.gr), should you believe that your concerns regarding data protection have not been adequately addressed.
15. Cookies
Our website may use cookies to enhance user experience and for functional purposes.
16. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy and related business practices at any time. Any changes will be communicated appropriately, and the revision date will be updated accordingly.
