Privacy Policy - AuPairplus

Last updated: October 7, 2026

This Privacy Policy (hereinafter the "Policy") describes how personal data of users (Au Pairs and Host Families, hereinafter "Users") who use the AuPairplus platform (hereinafter the "Platform") is processed, in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable national data protection legislation.

1. Data Controller

The data controller is Enrico Danilo Visciola, with registered office in Formia (LT) Italy, contactable at the email address privacy [at] aupairplus.com.

2. Categories of Data Collected

Depending on how the User uses the Platform, the Company may collect and process the following categories of data:

Registration and account data: first name, surname, email address, password (stored in encrypted form), preferred language;
Profile data: date of birth, gender, nationality, country and city of residence or stay, languages spoken, family composition, availability and desired length of stay, personal characteristics optionally indicated (e.g. driving licence, smoking habits, swimming ability), free-text presentation and previous experience, optional links to social media profiles;
Photographs uploaded by the User for their profile or gallery;
Attached documents, where provided (e.g. curriculum vitae in PDF format);
Reference data: any names and contact details of third parties (e.g. previous host families) that the User optionally chooses to indicate as a reference; the User warrants that they have informed such third parties and have the authority to communicate their data to the Platform;
Communication content: messages exchanged via the internal messaging system between Au Pairs and Host Families;
Report data: any reports of profiles made by one User against another, with the related reason and description;
Technical and usage data: IP address, device type and browser, date and time of access, pages visited, system logs, technical cookies necessary for the operation of the Service (see the Cookie section);
Search preferences, optionally saved by the User to speed up subsequent searches.

The User is advised not to insert special categories of data in their profile or messages (Article 9 GDPR, e.g. health data, ethnic origin, sexual orientation, religious beliefs) that are not strictly necessary for the use of the Service.

3. Purposes and Legal Basis for Processing

Personal data is processed for the following purposes:

Service delivery (account creation and management, profile display to other Users, search functionality, messaging, favourites) — legal basis: performance of a contract to which the User is a party (Article 6.1.b GDPR);
Verification and moderation of profiles and content, management of reports and prevention of fraudulent or abusive behaviour — legal basis: legitimate interest of the Company and Users in Platform security (Article 6.1.f GDPR);
Service communications (e.g. registration confirmation, notifications related to messages or profile status, communications related to contractual or Policy changes) — legal basis: contract performance and legal obligation, where applicable;
Compliance with legal obligations (e.g. requests from competent authorities) — legal basis: legal obligation (Article 6.1.c GDPR);
Defence of a right in legal proceedings — legal basis: legitimate interest (Article 6.1.f GDPR);
Any promotional communications or newsletters, only if activated in the future — legal basis: specific and revocable User consent (Article 6.1.a GDPR), requested separately and never pre-filled.

The provision of data necessary for registration and Service delivery is mandatory: without such data it is not possible to create an account or use the Platform. The provision of optional data (e.g. additional photos, personal characteristics, social media links) does not affect the use of the Service, but may limit the completeness of the profile shown to other Users.

4. Data Visibility and Disclosure

Certain profile data (e.g. name, age, nationality, city, languages, photographs, presentation text) are by their nature visible to other registered Users who conduct searches on the Platform. If the User activates the public visibility option for their profile, such data may also be visible to unregistered visitors, for as long as this option remains active; the User can disable it at any time from their profile settings. The full surname, email address, direct contact details and attached documents (e.g. curriculum) are never displayed publicly and remain accessible only to the Company and, where relevant, to the other party with whom a conversation has been established, to the extent made available by the User themselves.

Messages exchanged between Users are visible exclusively to the participants in the conversation and, in case of moderation or reporting needs, to authorized Company personnel, with access limited to those who have the need to process them for such purposes.

Personal data may also be disclosed to:

technical service providers who act as data processors on behalf of the Company (e.g. hosting, transactional email sending, cloud infrastructure services), on the basis of appropriate agreements compliant with Article 28 GDPR;
public or judicial authorities, where required by law or necessary to protect the rights of the Company or third parties.

The Company does not sell or disclose Users' personal data to third parties for their marketing purposes.

5. Data Transfer Outside the European Economic Area

No data is transferred outside the European economic area.

6. Retention Period

Personal data is retained for as long as the account remains active on the Platform. If the account is deleted at the User's request, the data will be deleted or anonymized within a reasonable timeframe, except where it is necessary to retain it longer to comply with legal obligations (e.g. tax or accounting legislation, where applicable) or to assert or defend a right in legal proceedings, within the limits of applicable limitation periods. Messages already sent to another User may remain visible to the recipient even after deletion of the sender's account, to the extent necessary to preserve the coherence of the conversation.

7. Minors

The Platform is intended for persons who have reached at least 17 years of age for registration as an Au Pair. Where, according to the legislation applicable in the User's country of residence, the minimum age for validly giving consent to the processing of personal data is higher, the consent of a person with parental responsibility is required. The Company reserves the right to request, at its sole discretion, confirmation of such consent and to suspend the account in the absence of response.

8. Data Security

The Company adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction or accidental disclosure, including: password encryption, secure connections (HTTPS), restriction of access to authorized personnel based on role, and periodic system audits. However, no system is risk-free: in the event of a personal data breach that poses a risk to the rights and freedoms of Users, the Company will proceed with the notifications required by applicable law.

9. Data Subject Rights

Within the limits and conditions provided by the GDPR, the User has the right to:

obtain confirmation of the existence of processing and access their personal data (right of access, Article 15);
obtain rectification of inaccurate data or completion of incomplete data (Article 16) — many profile data can in any case be modified directly by the User in their account settings;
obtain deletion of their data, in cases provided by law (right to be forgotten, Article 17);
obtain restriction of processing in cases provided by law (Article 18);
receive in a structured, commonly used and machine-readable format the data provided to the Company, or request its direct transmission to another controller, where technically possible (right to data portability, Article 20);
object at any time to processing based on the Company's legitimate interest, for reasons relating to their particular situation (Article 21);
withdraw at any time any consent given, without prejudice to the lawfulness of processing carried out before withdrawal (Article 7.3);
lodge a complaint with the competent supervisory authority (in Italy, the Personal Data Protection Authority, www.garanteprivacy.it) or, for Users resident in other European Union countries, with the respective national supervisory authority.

To exercise these rights, the User can contact the Company at the address indicated in the Contact section. The Company responds within the timeframes provided by applicable legislation.

10. Cookies

The Platform uses exclusively technical cookies, strictly necessary for the operation of the Service (e.g. the session cookie used to keep the User authenticated during browsing). Such cookies do not require prior User consent under applicable legislation, as they are indispensable for the provision of the requested Service. Currently the Platform does not use profiling, statistical analysis or third-party cookies for advertising purposes. Should this change in the future, this Policy will be updated accordingly and, where required by law, User consent will be obtained before installing such cookies.

11. Changes to This Policy

The Company reserves the right to modify this Policy at any time, in particular to adapt it to legislative changes or new Service features. Changes will be published on this page with an indication of the date of last update. In case of substantial changes, the Company may notify Users through other channels (e.g. email).

12. Contact

For any questions regarding the processing of your personal data or to exercise the rights described in this Policy, you can contact the Company at privacy [at] aupairplus.com.