Privacy Policy

Last updated: 2025

At NANNIA, we value your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and safeguard your information when you contact us or use our childcare services.

1. Who We Are

NANNIA
Sofia, Bulgaria
Email: info@nannia.bg

NANNIA acts as the data controller of your personal data in accordance with the General Data Protection Regulation (GDPR).

2. What Personal Data We Collect

We may collect the following categories of personal data:

When you contact us or request a booking:

  • Name
  • Email address
  • Phone number
  • Child’s age
  • Address (for home visits and pick-ups)
  • Preferred hours and service details

Where necessary for service safety (with your consent):

  • Health-related information (e.g. allergies, specific conditions)

When you browse our website:

  • IP address
  • Device and browser information
  • Cookies and basic usage data (non-identifiable analytics)

We collect only data that is necessary for providing our services and ensuring child safety.

3. How We Use Your Data

We use your personal data to:

  • Respond to enquiries
  • Organize and deliver childcare services
  • Communicate with you regarding bookings
  • Ensure safety and quality of care
  • Improve our website and user experience
  • Comply with legal and accounting obligations

We do not sell or share your personal data for marketing purposes.

4. Legal Grounds for Processing

We process your personal data based on the following legal grounds:

  • Contractual necessity – to provide requested childcare services
  • Legitimate interest – to manage operations, communication, and service safety
  • Consent – for health-related information, cookies, and optional communications
  • Legal obligation – for invoicing, accounting, and regulatory compliance

5. Data Sharing

We share personal data only when necessary and in a limited manner:

  • With caregivers assigned to your booking (only relevant details)
  • With IT and hosting providers supporting our website and systems
  • With accounting or legal service providers, where required

All third parties are required to comply with applicable data protection laws (GDPR).

6. Data Retention

We retain personal data only for as long as necessary:

  • Booking and communication data: up to 3 years
  • Accounting and invoicing data: 10 years (as required by Bulgarian law)
  • Email enquiries: 12–18 months
  • Cookie data: according to your consent settings

After this period, data is securely deleted or anonymized.

7. Data Security

We take appropriate technical and organizational measures to protect your personal data against:

  • Unauthorized access
  • Loss or misuse
  • Accidental disclosure

Access to personal data is limited to individuals who require it to provide services.

8. International Data Transfers

Personal data is processed within the European Economic Area (EEA).

If any data is transferred outside the EEA (e.g. through certain service providers), appropriate safeguards will be applied in accordance with GDPR.

9. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Withdraw consent at any time
  • Object to processing
  • Request data portability
  • Lodge a complaint with the Commission for Personal Data Protection (CPDP), Bulgaria

To exercise your rights, contact:
info@nannia.bg

10. Cookies

Our website uses essential and basic analytical cookies to improve functionality and user experience.

You can control or disable cookies at any time through your browser settings.

11. Contact

For any questions regarding this Privacy Policy or your personal data:

📧 info@nannia.bg