Privacy Statement

As of 16.10.2026 

AuPairWorld's Privacy Notice for the Previous Platform

Privacy Notice for the AuPairWorld Platform

We, AuPairWorld GmbH, Friedrich-Ebert-Straße 10, 34117 Kassel, Germany, Tel.: +49 (0) 561 31 0561 - 0, info@aupairworld.com, would like to explain below how we process your data on this platform.

If you have any questions about data protection, you can contact our Data Protection Officer at aupair-world@dsb-moers.de. Further contact details can be found at www.dsb-moers.de.

Purpose, Legal Basis, Profiling, Categories of Recipients and Data Retention Period

Purpose: Provision and Operation of a Platform for Matching Host Families and Au Pairs

The purpose of data processing on this platform is to provide and operate a service that suggests host families and au pairs who are as compatible as possible, based on the evaluation of user information and an algorithm-based matching process. In addition, the platform supports the entire matching process, from initial contact and communication through to a potential au pair stay.

When providing our website, we comply with the requirements of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the German Digital Services Act (DDG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

In particular, we process personal data on the following legal bases:

  • Art. 6(1)(a) GDPR for the processing of personal data with the consent of the data subject.

  • Art. 6(1)(b) GDPR for the processing of personal data necessary for the performance of a contract with the data subject or to take steps at the request of the data subject prior to entering into a contract.

  • Art. 6(1)(c) GDPR for the processing of personal data necessary to comply with a legal obligation to which we are subject under applicable EU law or the applicable law of a country in which the GDPR applies in whole or in part.

  • Art. 6(1)(f) GDPR for the processing of personal data necessary to safeguard our legitimate interests or those of third parties, provided that these interests are not overridden by the interests or fundamental rights and freedoms of the data subject. Legitimate interests include, in particular, our commercial interest in providing our website, information security, the enforcement of our legal claims and compliance with other legal requirements.

To provide our services, we use service providers (IT service providers, external consultants and hosting companies) that are separately bound by confidentiality and data protection obligations. Data is disclosed to public authorities only where overriding legal provisions require it. No data is transferred to third countries.

When you visit our website, a connection is established with your browser. The following information is automatically collected and temporarily stored in system files: your device's IP address, the date and time of access, the name and URL of files accessed, the website from which access originated or from which you were referred to our website (referrer URL), the browser used and, where applicable, your device's operating system and the name of your internet service provider.

We process this data to ensure a smooth connection and system security. Connection data is automatically deleted and is generally not stored for longer than seven days. If the website is misused, log data that must be retained as evidence will be stored until the incident has been resolved.

Matching Process

One component of the platform is the automated evaluation of personal information provided by users as part of an algorithm-based matching process. Various user characteristics are assessed using predefined weightings and combined into a matching score to suggest host families and au pairs who are as compatible as possible. The matching score is not visible to users.

In addition, user behaviour during the matching process is evaluated to continuously improve the quality of search results and the matching process.

The processing necessary to provide the matching function is based on Art. 6(1)(b) GDPR. Where the process involves a decision based solely on automated processing that produces legal effects within the meaning of Art. 22(1) GDPR, the exception under Art. 22(2)(a) GDPR may apply, provided that the decision is necessary for entering into or performing a contract.

For the development and provision of the platform and the algorithm-based matching process, we use the service provider Neuralia AI (Strada Castiglione 1, 86020 Roccavivara, Italy). We have concluded a data processing agreement with this company in accordance with Art. 28 GDPR.

Use of Storage Technologies on Your Device

This website uses storage technologies ("cookies" and/or browser storage) to store information about your use of the website. The information generated by cookies about your usage behaviour on this website is used to analyse how you use the website, evaluate your browsing behaviour and improve the information we provide.

Where storage technologies on your device are necessary for the website to function, we use these technologies on the basis of our legitimate interests in improving the information we provide, ensuring the functionality of the website and maintaining information security. The legal basis for data processing is Art. 6(1)(f) GDPR (legitimate interest) in conjunction with Section 25(2)(2) TDDDG.

Where cookies are used that are not necessary for the operation of the website, we obtain your consent in advance. The legal basis for data processing is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG (consent).

Cookies are deleted after a maximum of two years. You can prevent cookies from being installed by adjusting your browser settings. However, please note that doing so may prevent you from using all the functions of this website to their full extent.

Data is collected in anonymised form, and the data collected cannot be linked to you personally. You can change your cookie settings under "Consent" in the footer.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.

Google Analytics also uses cookies, which are text files stored on your device that enable an analysis of your use of the website.

It cannot be ruled out that information generated by cookies about your use of this website may be transferred to and stored on a Google server in the USA. Data is transferred to the USA only if the requirements of Art. 44 et seq. GDPR are met.

The transfer of personal data to the USA has been recognised as permissible under the EU-U.S. Data Privacy Framework. Google LLC participates in this framework.

The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. User data is deleted after a maximum of 24 months.

You can withdraw your consent at any time with effect for the future and prevent Google from using your data by downloading and activating the available browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent cookies from being stored by adjusting your browser settings. However, please note that doing so may prevent you from using all the functions of this website to their full extent.

Further information about data protection at Google can be found at https://policies.google.com/privacy.

Google Ads

To optimise our advertising, we use Google Ads tags provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This processing is based on your consent pursuant to Art. 6(1)(a) GDPR for the analysis of our website and the commercial optimisation of our service.

Data processing through Google Ads helps us ensure that advertisements are displayed only to people who are interested in them.

As part of remarketing, Google code, small graphics and cookies are integrated into our website. These make it possible to track which websites you visit outside our website and which content interests you.

This allows us to determine which advertisements on Google have led users to take actions or place orders on our website. We only receive the number of users who clicked on an advertisement and cannot establish a link to you personally.

As part of this processing, it cannot be ruled out that this information may be transferred to a Google LLC server in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Data is transferred to the USA only if the requirements of Art. 44 et seq. GDPR are met. The transfer of personal data to the USA has been recognised as permissible under the EU-U.S. Data Privacy Framework. Google LLC participates in this framework.

The data is generally processed in pseudonymised form and is not combined with information such as your name or email address unless you have authorised Google to make such a connection through your user account.

Further information can be found in Google's detailed privacy policy: https://www.google.com/policies/privacy.

If you have a Google account, you can manage your Google service settings and object to data processing: https://policies.google.com/technologies/ads.

Microsoft Clarity

This website uses the Clarity web analytics service. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity/.

We use Microsoft Clarity to analyse user interactions on our website, such as mouse movements, scrolling and clicks on buttons. This information is used to create heatmaps, which help us optimise the website and improve the user experience.

Clarity uses technologies (cookies) that enable users to be recognised for the purpose of analysing user behaviour. It cannot be ruled out that your personal data may be stored on Microsoft servers (Microsoft Azure Cloud Service) in the USA.

Data transfers to the USA are based on the Standard Contractual Clauses pursuant to Art. 46 GDPR.

Microsoft Clarity is operated as an independent service by Microsoft Ireland Operations Limited. In this context, Microsoft, like us, acts as an independent controller within the meaning of Art. 4(7) GDPR when processing personal data in connection with the use of the service.

The legal basis for data processing is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

For more information about data protection at Microsoft Clarity, please refer to Microsoft's privacy statement: https://privacy.microsoft.com/en-us/privacystatement.

Sentry

We use the CDN and error analysis service Sentry (Functional Software Inc. dba Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA) to improve the technical stability of our website by monitoring system stability and identifying code errors.

As part of this process, data is transmitted to the provider and generally stored there. This may include your IP address, product and version information about your browser and operating system (known as the user agent), the website from which you accessed our website (referrer), the date and time of the request, your internet service provider where applicable, and data relating to the time of the error.

Data security is guaranteed through an EU standard contract.

The legal basis for using this service is our legitimate interest pursuant to Art. 6(1)(f) GDPR in ensuring the security, error-free operation and optimisation of our website.

Further information can be found in Sentry's privacy policy: https://sentry.io/privacy/.

Integration of OpenStreetMap

To determine the geographical location of the address you voluntarily provide, we use the Nominatim geocoding service based on OpenStreetMap. The service provider is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

The address information you provide is transmitted to this service to determine the corresponding country and city.

Content Delivery Network and Video Hosting

To ensure the fast, secure and reliable provision of our platform, as well as the hosting and playback of videos, we use the services of Bunny.net. The provider is BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia.

Bunny.net enables platform content and videos to be delivered via geographically distributed servers. When you access our platform or retrieve and play videos, technically necessary data, in particular your IP address, browser and device information, the time of the request, and information about the content and videos accessed, is transmitted to and processed by Bunny.net.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to ensure the fast, secure and stable provision of our platform, as well as reliable and efficient video playback.

We have concluded a data processing agreement with BunnyWay d.o.o. in accordance with Art. 28 GDPR.

Further information about data processing by Bunny.net can be found at: https://bunny.net/privacy/.

Signing In with Google or Facebook

On our website, you have the option of signing in using your existing Google account (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland).

The legal basis for processing your personal data is your consent pursuant to Art. 6(1)(a) GDPR. This applies both to loading the plugins and to transmitting data for authentication.

If you sign in via Google, you will be redirected to the corresponding page. There, you sign in to your account using your login credentials for the social network.

After successfully signing in, the social network informs you which data will be transmitted to us for authentication as part of the registration or login process. We then store your data and use it for the purposes described in this Privacy Notice.

To carry out the authentication process during registration or login, your IP address is transmitted to the social network provider.

We have no influence over the purpose and scope of data collection or the further processing of data by social network providers. Transfers to third countries are possible.

You can withdraw your consent at any time with effect for the future. This is generally done through the settings in your Google or Facebook account.

Further information about data processing by Google can be found at:

https://www.google.com/policies/privacy/

User Account / Contractual Services

A user account is required to use the platform. Users enter into a separate user agreement, and data processing is therefore based on Art. 6(1)(b) GDPR.

The data in the user account is stored for as long as the account exists.

As part of the onboarding process, we send automated emails to help you set up and use our platform. In doing so, we process your email address as well as information about your registration and use of the platform.

We also use tracking mechanisms to record email opens and clicks in order to improve our onboarding communications.

Processing is based on Art. 6(1)(b) GDPR, as sending onboarding emails and the tracking technically required for this purpose are directly related to providing the platform and enabling its use in accordance with the contract.

Processing is necessary to support registered users in setting up and using the platform, provide usage-related features, and identify technical issues or situations where assistance may be required.

Newsletter and Email Tracking

The purpose of sending our newsletter is to provide information about our new products and services.

We send newsletters on the basis of consent pursuant to Art. 6(1)(a) GDPR. Data is not disclosed to third parties.

When subscribing to the newsletter, a double opt-in procedure is used. You must actively confirm your newsletter subscription by clicking the link in the email sent to you.

The newsletter is sent via Mailjet, a brand of Sinch Email. Data is stored in the United Kingdom. Access by companies within the Sinch Group from third countries may be possible under certain circumstances.

We have concluded a data protection agreement with Sinch Email that provides appropriate safeguards for access from third countries.

Further information about data protection at Sinch can be found at: https://www.mailgun.com/legal/privacy-policy/

We also use Mailjet (Sinch Email) to analyse user behaviour in order to optimise our communications and tailor them to specific target groups. For example, we can see which links were clicked and when.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.

You can unsubscribe at any time by clicking the "Unsubscribe" link. You can also send an unsubscribe request by email to support@aupairworld.com.

Evaluation of User Data

When you register with AuPairWorld, we collect your IP address and the date and time of your registration in addition to the personal data you provide.

To ensure that our matching platform is provided in accordance with the contract, we verify the information you provide. For this purpose, we may compare it with other publicly available information on the internet.

These checks are intended to identify abusive or contractually prohibited registrations, particularly fake profiles, fraudulent listings or unauthorised commercial offers.

This helps ensure that the platform is used for its intended contractual purpose of connecting au pairs and host families.

Despite these verification measures, we cannot guarantee the accuracy, completeness or trustworthiness of all user profiles.

The legal basis for processing your personal data is Art. 6(1)(b) GDPR. Data processing takes place to the extent necessary to verify registrations and provide our matching services in accordance with the contract.

We use QlikTech GmbH as a data processor to provide technical support for the evaluation of user data.

We have concluded a data processing agreement with QlikTech GmbH in accordance with Art. 28 GDPR.

Identity Verification

To verify your identity and prevent identity misuse and fraud, we use the identity verification service Didit.

The provider for customers within the European Union is Didit Identity Spain, S.L., Calle Nápoles 227, P. 1, 08013 Barcelona, Spain.

As part of identity verification, personal data is processed and transmitted to Didit.

This includes, in particular, information from your identity document, images of the identity document and, where applicable, photographs and video recordings of your face.

Where necessary for verification, biometric data is also processed to check whether the identity document matches the person being verified and whether the recordings are authentic.

Following verification, we receive only the result of the identity check.

Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Where biometric data is processed for the purpose of uniquely identifying a person, this is based on your explicit consent pursuant to Art. 9(2)(a) GDPR.

Further information about data processing by Didit can be found at:

https://didit.me/de/terms/privacy-policy/

We have concluded a data processing agreement with Didit in accordance with Art. 28 GDPR. You can view this agreement at:

https://didit.me/de/terms/business/#annex-2-data-processing-addendum-dpa

Contact Form

If you contact us using our contact form, the information you provide will be processed to handle your enquiry.

The legal basis for transmitting this information to us is your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future. Your data will then be deleted.

If your enquiry does not give rise to any legal retention obligations (for example, in connection with an order), the data will be deleted after three years.

Your data will be forwarded internally to the relevant contact person responsible for handling your enquiry.

Your data will not be disclosed to third parties without your authorisation.

Stripe

You have the option of using the online payment service Stripe (Stripe Inc., 510 Townsend Street, San Francisco, California 94103, USA / Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) through this website.

We offer various payment methods to enable secure online payment processing.

In particular, the following categories of personal data are processed: account data, payment data, usage data and communication data.

This data is processed to carry out payments and fulfil contractual or pre-contractual obligations on the basis of Art. 6(1)(b) GDPR.

When using Stripe, personal data may be transferred to servers operated by Stripe, Inc. in the USA.

Data is transferred to the USA only if the requirements of Art. 44 et seq. GDPR are met.

The transfer of personal data to the USA has been recognised as permissible under the EU-U.S. Data Privacy Framework. Stripe, Inc. participates in this framework.

We have concluded a data processing agreement with Stripe in accordance with Art. 28 GDPR. You can view this agreement at:

https://stripe.com/de/legal/dpa

Further information about data protection at Stripe can be found at:

https://stripe.com/de/privacy

Your Rights to Access, Rectification, Erasure, Objection and Data Portability

You can exercise your rights to access, rectify and erase your personal data at any time.

Simply contact us using the contact details provided above.

If you request the deletion of your data but we are still legally required to retain it, access to your data will be restricted (blocked).

The same applies if you object to the processing of your data.

You can exercise your right to data portability to the extent that the technical capabilities of both the recipient and ourselves allow it.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority at any time.

Updates and Changes to This Privacy Notice

We reserve the right to amend the content of this Privacy Notice at any time.

This generally takes place when the services we use are further developed or modified.

Last updated: 16 October 2026