Who we are (data controller for this Website)

This Privacy Policy describes how KIDOLA S.A. (RCS Luxembourg B245482) (“Kidola”, “we”, “us”) processes personal data when you visit or interact with our website https://kidola.lu (the “Website”) and when we manage our customer/prospect relationships.

KIDOLA S.A.
100, Route de Volmerange
3593 Dudelange
Luxembourg

Email: hello@kidola.lu

Data Protection Officer (DPO): Quentin de Madre – quentin@kidola.lu

Scope and roles (Website vs. Kidola app)

Website & business contacts: Kidola acts as the data controller for personal data collected via the Website (e.g., demo requests, contact requests) and for commercial/relationship data about our customers and prospects.

Kidola app used by childcare facilities: In the context of the Kidola web/app platform used by nurseries/childcare facilities, the nursery is generally the data controller and Kidola acts as a processor (subcontractor) processing data on the nursery’s instructions. This is why, if you are a parent/guardian, you should contact your childcare facility regarding your data processed in the app.

Personal data we process

Depending on your interactions, we may process the following categories of personal data:

• Identification and contact data: name, email address, phone number, organisation, role.
• Communications: the content of messages you send us, support requests, and related metadata.
• Usage and device data (Website): IP address, cookie identifiers, pages viewed, approximate location, browser/device information.

In the Kidola app (processed on behalf of nurseries), personal data may include in particular:

• Children profiles: name, age, gender, identification number.
• Tutor/guardian profiles: name, email address, phone number.
• Nursery internal user profiles: name and email address.
• Daily follow-up data entered by nursery staff, for example, arrival/departure times, activities, naps, hygiene, food, comments, etc.

Purposes and legal bases

We process personal data for the purposes and legal bases below (GDPR Article 6):

• To respond to requests and provide demos/support (Article 6(1)(b) – steps prior to a contract, or Article 6(1)(f) – legitimate interests).
• To manage customer and supplier relationships (Article 6(1)(b) – contract; and/or Article 6(1)(f) – legitimate interests).
• To comply with legal obligations (Article 6(1)(c)).
• To improve and secure the Website, prevent fraud, and maintain logs (Article 6(1)(f)).
• To measure Website audience and run marketing/advertising tags where enabled (Article 6(1)(a) – consent).

For the Kidola app where we act as processor, processing is carried out on the nursery’s documented instructions and under our contractual arrangements with the nursery (GDPR Article 28). The childcare facility (as data controller) is responsible for ensuring an appropriate GDPR article conditions, and Kidola processes such data only on the childcare facility’s documented instructions.

Cookies and similar technologies

We use cookies and similar technologies on the Website. Non-essential cookies (analytics/marketing) are set only with your consent, which you can withdraw at any time via our cookie settings.

Our Website may use the following tools (depending on your preferences): Google Tag Manager, Google Analytics, Meta Pixel, HubSpot, and potentially Google Ads and LinkedIn Ads.

Important: The analytics and marketing/advertising tags and cookies described in this section apply only to the public Website. They are not used within the Kidola app operated by childcare facilities.

For details, please refer to our Cookie Policy on the Website.

Recipients of personal data

We may share personal data from the website with:

• Our staff and authorised contractors who need access for their tasks (support, administration, sales).
• Technical service providers acting on our behalf (hosting, email delivery, security, analytics/consent tools).
• Marketing and advertising partners where you have consented (e.g., Meta, Google, LinkedIn) for measurement and campaign purposes (Website only, and only where you have consented).

In the Kidola app context, personal data is typically shared by the nursery with (i) its staff, (ii) the relevant parents/guardians for their own child(ren), and (iii) where applicable, public authorities for invoicing/administration purposes, under the nursery’s responsibility.

International transfers

For the Kidola app, data is hosted in the European Union/European region. For Website analytics/marketing tools, some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) and, where required, additional measures.

Data retention

We keep personal data only as long as necessary for the purposes described above:

• Kidola app photos: stored for 3 months; backups are deleted within 1 additional month after deletion of the original.
• Other Kidola app data: stored until the nursery requests export and/or deletion; backups are deleted within 1 month after deletion.
• Website enquiries and business contacts: for the duration of our relationship and then for a limited period (typically up to 5 years) to manage follow-ups, comply with legal obligations, and handle disputes, unless a longer period is required by law.
• Cookie preferences: up to 12 months (then we may ask you to renew your choice).
  
  

Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures may include access controls, encryption in transit, and security monitoring.

Your rights

Depending on the context, you may have the right to request access, rectification, erasure, restriction, portability, and to object to processing. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

If your personal data is processed in the Kidola app by your childcare facility, the childcare facility is the data controller. To exercise your rights in that context, please contact the childcare facility directly. If needed, the childcare facility may contact us as processor to action the request.

For Website and business-contact data processed by Kidola as controller, you can contact us at hello@kidola.lu.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page and the “Last updated” date will be revised accordingly.