Privacy Policy and Cookie Policy

Welcome to Daisy Park’s Privacy and Cookie Policy, at Daisy Park we are committed to respecting your privacy and protecting your personal data and that of your child. This privacy policy will inform you as to how we look after your personal data when you visit our website (www.daisypark.mt) (“the Website”), how we process your information and that of your child when you apply to Daisy Park, as well as how we keep such data secure. We also inform you about your privacy rights. This privacy policy is provided in a layered format so that you can find and click through to specific areas set out below.

1. ABOUT US

1.1 Scope of the Privacy Policy
This Privacy and Cookie Policy (the ‘Privacy Policy’) sets out the ways in which Daisy Park may use your personal data.

1.2 Contact Details
You may contact us using the following means:

a) By Post, using the Postal Address below:

Daisy Park,

Peter Paul Reubens Street,

Attard ATD 1191

b) By telephone using the following number:

+356 21435120

c) By email:

info@daisypark.mt

2. ABOUT YOUR DATA

2.1 Data we process

The following is a list of the types of personal data we collect/process in your and your child’s regard:

DATA CATEGORY	TYPE OF DATA	WHAT IT’S USED FOR	OUR LEGAL BASIS
Tracking Data Data about your use of the Website	IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation paths, and information about the timing, frequency and pattern of your use	For functionality, for security purposes, to analyse the use of the Website and to personalise and optimize content available to you on the Website	Legitimate interest
Communications Data Data provided to us when you send us an email to request information or when you complete a ‘Contact Us’ form	Name and surname, email address, IP address, and other information you may enter into the email or form	To reply to your queries about our nursery and related services	Legitimate interest
Registration Data Data provided to us when you apply for a place at Daisy Park for your child	Name and surname, email address of child’s parents / guardians and their IP address, email address, postal address, phone number, ID card number, username and password, child’s name, age gender, date of birth, allergy and medical information, name, surname and ID card number of persons authorised to pick up the child, relationship to child, emergency contact details	To register an applicant at Daisy Park, to ensure that we have all information necessary, to provide the best care for the child	Legitimate interest / Contractual performance
Financial Data Payment details provided for payment of any fees / expenses to Daisy Park	Cost of purchase, bank account number	To process your transactions for any fees / expenses	Contractual performance
Account History All Data relating to your purchasing activity and patterns	Purchase history	To process your transactions for any fees / expenses. For accounting and taxation purposes	Contractual performance. Legal obligation
Daily Activities Information about the child’s day at Daisy Park	Performance information, photos, videos and other information gathered in relation to the child on a daily basis	To provide the best possible childcare and educational service to the child and to keep the parents / guardians informed about the child’s daily activities and well-being	Legitimate interest / Contractual performance
Subscription Data Information that you provide to us for the purpose of subscribing to our email notifications and / or newsletters	Name and surname, email address, IP address	To send you information about our products, services and news	Consent NOTE that you have the right to withdraw your consent, at any time, by clicking on the ‘unsubscribe’ link found in any marketing communications. You may also send an email to info@daisypark.mt for the purpose

2.2 Cookies and other tracking mechanisms

Like most websites, Daisy Park uses cookies to collect information. Cookies are small data files of letters and numbers that are stored in your browser or the hard drive of your computer and contain information that is transferred to your computer’s hard drive. We use cookies on our Website to improve its functionality and to allow us to constantly improve the Website. When you continue to browse this Website, you are agreeing to our use of cookies.

Please note that you can alter your preferences by blocking cookies at any time, by activating the setting on your browser that allows you to refuse the setting of all or some cookies. Keep in mind, however, that blocking all cookies or even some of them will have a negative impact on the usability and rendering of many websites, including our Website. If you block cookies, you will not be able to use all the features on the Website and might not be able to view it correctly in the way it was originally intended to be displayed. If you want to know more about cookies and how to manage them, visit: www.allaboutcookies.org

We use cookies as follows:

NAME	FUNCTION
Google Analytics	We use this cookie as a third-party service to collect standard internet log information and details of visitors to various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find the identities of those visiting our Website. Google Privacy Policy: https://policies.google.com/privacy?hl=en
WordPress Stats	We use this cookie to be able to optimize our Website designs, gain insight on popular features, identify usage trends, track the delivery of our promotional content and, more generally, to know our market better. WordPress Privacy Policy: https://automattic.com/privacy/
Double Click	We use this cookie to track the effectiveness of our marketing campaigns. It enables Google to serve our adverts on other sites based on your browsing history on our page and engagement with our adverts. Google Privacy Policy: https://policies.google.com/privacy?hl=en
Double Click Ad Exchange	We use this cookie to log when users view specific pages or take specific actions on our Website. This allows us to provide targeted advertising in the future. Google Privacy Policy: https://policies.google.com/privacy?hl=en
GA Audiences	We use this cookie to re-engage visitors that are likely to convert to customers based on the visitor’s on-line behaviour across web sites. Google Privacy Policy: https://policies.google.com/privacy?hl=en
Smarter Click	We use this cookie to show online advertising to people in a focused way, led by how they’ve engaged with our website. https://www.smarterclick.com/privacy-policy/

2.3 Retention of Data

We keep your personal data no longer than strictly necessary for the following purposes:

To realize the purpose for which your personal data was originally collected;
As required by a specific law which we may be subject to;
To manage any legal claims in relation to which such data may be required as evidence.

Most data is kept for 2 years. Transactional records may be kept for up to 10 years from the performance for a contract for accounting and VAT record purposes. Should you need to know the complete list of retention periods we adhere to with respect to indicated categories of personal data, please contact us on: info@daisypark.mt

2.4. Who has access to your Data

Daisy Park is a licensed childcare and educational business domiciled in Malta. The majority of the service providers who are able to access the Website or any of the personal information collected from or relating thereto are located within the EEA and we have data processing agreements in place with these parties. These include email service provider, web developers, affiliates, SEO agents, product suppliers, delivery and logistics, providers of professional advice (accounting and legal services) and providers of childcare software management systems. In relation to secure storage of data and for data management purposes, we have an agreement with Illumine Labs Pvt Ltd which provides us with a data management platform, and consequently data is transferred outside the EEA for this purpose. We have ensured that this service provider processes data in accordance with EU standards, and we have an agreement with strict access restrictions and other security measurements in place. Personal data that we hold is, at all times, on a strict ‘need to know’ basis.

2.5 Personal Data relating to children

All data relating to a child, particularly photos and medical data, are processed under the strictest of controls.

This Website is only accessible to individuals over the age of 16. It is a parent and/or legal guardian’s responsibility to ensure that persons under the age of 16 do not complete any registration forms of any means through our Website. If you think that your child provided this kind of information on our Website, we strongly encourage you to contact us immediately and we will make it a priority to promptly remove such information from our records. If we have reason to believe that we hold unauthorised Personal Data of a person under the age of 16, we will delete it immediately.

3. ABOUT YOUR DATA PROTECTION RIGHTS

At any point in time during our processing of your data, you have the following rights. All requests in this regard may be made by sending an email to: info@daisypark.mt. We will also forward your request to relevant third parties mentioned above as required.

Right of access – You can request a copy of the information that we hold about you.

Right of rectification – You can ask us to correct data that we hold about you if it is inaccurate or incomplete.

Right to be forgotten – in some situations, you may ask us to delete certain data we hold about you and we will always comply to the extent allowed or required by any applicable law.

Right to restriction of processing – in some situations, you may ask us to restrict the processing of your data.

Right of portability – You may ask us to transfer certain data we hold about you to another organization.

Right to object – You have the right to object to certain types of processing, such as direct marketing.

Right to object to automated processing, including profiling – You also have the right to object to the legal effects of automated processing or profiling.

Right to complain about how your Personal Data is being processed by us (or third parties), or about how your complaint has been handled – You can lodge a complaint directly with the Office of the Information and Data Protection Commissioner (https://idpc.org.mt/) and with us (info@daisypark.mt)

4. GLOSSARY OF TERMS

‘EEA’ means the European Economic Area or all the countries which are party to the Agreement on the European Economic Area.

‘GDPR’ means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and Council of 27^th April 2016 on the protection of personal data and on the free movement of such data.

‘Legitimate Interest’ means the interest of our business in conducting and managing our business to enable us to give you the best service / product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.

‘Performance of Contract’ means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

‘Professional Advisors’ include lawyers, auditors, bankers and insurers based in Malta who provide services which Daisy Park Limited consults with.

The version of this Privacy and Cookies Policy is currently Version 1.1 and was last updated on 1^st October 2021. This Policy applies to you until a new version is uploaded on the website and is accepted by you.