We are maidfantastic. We own and operate www.maidfantastic.co.uk (the site) and we are committed to protecting and respecting your privacy. We are a limited company registered in England and Wales.
For the purposes of the Data Protection Act 1998 (the Act) and the European General Data Protection Regulation (GDPR), the data controller is maidfantastic hereinafter referred to as “maidfantastic”.
If you have any questions or suggestions about this information or would like to contact us to exercise your rights, please contact us at:
b. General information on the processing of personal data
The use of this website may result in the processing of personal data. The term “personal data” under data protection law refers to all information relating to a specific or identifiable person. An IP address can also be considered personal data. An IP address is assigned to each device connected to the internet by the internet service provider, so that it can send and receive data. When you use the website, we collect data that you provide yourself. In addition, when you use the website, we automatically collect certain information about your use of it.
We process personal data in compliance with the relevant data protection regulations of the GDPR and the Act. We will only process data where we are legally permitted to do so. When you use this website, we will process personal data only with your consent (Article 6, paragraph 1, (a), GDPR), for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract (Article 6, paragraph 1, (b), GDPR), for compliance with a legal obligation (Article 6, paragraph 1, (c), GDPR), or if the processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data (Article 6, paragraph 1, (f), GDPR), If you are applying for an open position with us we will additionally process your personal data in connection with your interest in future employment with us (Article 26, paragraph 1, GDPR).
c. Duration of Storage
Unless otherwise stated in the following sections, we will store the data only as long as necessary to achieve the purpose of processing, or to fulfil our contractual or statutory obligations. Such statutory storage duties may result especially from commercial or tax law regulations.
d. Technical Service Providers
If not specified otherwise in the following notes the processing of data is done on servers of technical service providers, which were contracted by us to do so. These service providers process data strictly by our instructions and are contractually committed to ensure adequate technical and organizational data protection measures.
2. Special notes for users
In the following we will describe how we process data when you book household services via our platform and request the service of a cleaner.
We collect the following information:
First name, last name, email address, telephone number, street, house number, additional address information, postcode, city, preferred method of payment (hereinafter combined referred to as “user profile data”); type of service requested and additional services as well as the date, time and duration of the requested service; information if service is one-off or recurring (hereinafter combined referred to as “booking data”; time of user profile creation and update;
In addition, you are able to specify the following information on a voluntary basis:
Presence of domestic animals, disposal site for waste, availability of parking spots, specification of special needs (e.g. certain priorities or rooms, which should not be included in the service requested), possible requirements regarding cleaning materials, information on how the service provider can access your apartment (e.g. keys are with neighbour or you are at home).
maidfantastic transfers the user profile data, booking data and possible additional information provided by you on a voluntary basis for the purpose of arranging household services to service providers you selected during the booking process plus potentially other service providers that fit your booking criteria.
If a booking request is accepted and a contract between you and a cleaner is confirmed maidfantastic also processes your user profile data for the purpose of booking support, fulfilment, completion, accounting and follow-up assistance of the respective booked cleans and services as well as contracts including additional related actions such as invoices, credit, claims, cancellations etc.
On top of that we use user profile data, especially your telephone number, to send out automated messages to notify and remind you of upcoming cleaning events and services.
maidfantastic also uses the booking data to the required extent to generate invoices for the delivered services of the partner and any following necessary assistance (e.g. in case of inadequate service delivery of cleaner).
In addition we transfer, depending on the chosen method of payment, your credit card data (card number, expiry date, security code) or your bank account details (hereinafter also referred to as “payment data”), that maidfantastic collects in connection to the booking, to the licensed payment provider Stripe, Inc., 185 Berry Street, Suite 550, San Francisco, CA 94107, cooperating with us for the purpose of handling of payments (hereinafter referred to as “payment provider”). The payment provider is collecting, processing and using the payment data for the purpose of handling of payments respectively collecting the receivables from your bank account. There is no additional storage of your payment data.
As part of our fulfilment, we store the services you booked and that were delivered by a cleaner including created invoices in your user profile, so that we are able to provide access to this information at a later point in time.
The legal basis for the described data processing is Article 6, paragraph 1, (b), GDPR.
If you are leaving a review about a delivered household service, maidfantastic will process the data provided by you for the purpose of displaying the review on our platform. Legal basis of this data processing is Article 6, paragraph 1, (b), GDPR.
3. Special notes for cleaners and service providers
a. Registration and mediation
If you are registering as a cleaner on our platform maidfantastic processes the following data for the purpose of being able to initiate and potentially close a contract with you regarding the arrangement of household services:
First name, last name, email address, street, house number, postcode, city, nationality, date of birth and telephone number (hereinafter combined referred to as “partner profile data”), information on whether you are allowed to work as self-employed , your previous cleaning experience, information on your access to means of transportation, your bank details, your language skills, information on the work area and the potential timeframe of your availability and your access to different means of communication (mobile phone, smartphone, internet access) (hereinafter combined referred to as “data cleaner”). In addition, you are able to provide / upload a picture of yourself as well as short description of yourself.
maidfantastic stores your profile data and such information that is created as part of the accounting of arranged cleans in a profile for cleaners, which can be accessed by you.
Cleaner profile data is used by maidfantastic for the purpose of fulfilment, completion and accounting of booked cleans/services as well as contracts including additional related actions such as invoices, credit, claims, cancellations etc and is stored in the respective profile.
In addition, maidfantastic uses cleaner profile data, especially your telephone number, to send out automatic messages to notify and remind of upcoming cleaning events.
Legal basis for this data processing is Article 6, paragraph 1, (b), GDPR.
If a user leaves a review on our platform, maidfantastic will process this data for the purpose of displaying the review on the platform. Reviews are an integral part of our platform to ensure the utmost transparency for users.
Legal basis for this data processing is Article 6, paragraph 1, (b), GDPR.
In case you want to delete your maidfantastic account, maidfantastic will block your data first and then delete afterwards.
4. Processing Server Log Files
When using our website for informational purposes only, general data is initially stored automatically (i.e. not via registration) and transmitted to our server by your browser. By default, these include: the browser type/version, the operating system used, the page accessed, the page previously visited (referrer URL), the IP address, the date and time of the server request and the HTTP status code.
The processing is carried out for the purposes of our legitimate interests, the legal basis of which is Article 6, paragraph 1, (f), GDPR. This processing is used for technical administration and website security. Stored data will be deleted after seven days unless there are concrete reference points for potential unlawful use that require further examination and processing of this data.
We offer a blog on our website in which we publish articles on various topics. Our blog includes a commenting functionality, which requires the entry of personal data if used. In case you are leaving a comment, this comment will be published with the user name you provided in the respective article. We thus recommend that you use a pseudonym instead of using your full name as your user name. To use the commenting function, it is mandatory to provide an email address and user name. All other data provided is made on a voluntary basis. Legal basis for this data processing is Article 6, paragraph 1, (b), GDPR.
When you are posting a comment we also store your IP address in addition to the aforementioned data. Legal basis for the storage of your email address and your IP address is Article 6, paragraph 1, (f), GDPR. We will only use your email address in case a third party notifies us about unlawful content and we will need to examine the incident. Your IP address is stored for the purpose of being able to defend ourselves against third party rights in case you posted unlawful content. Your email address is stored for as long your comment is publicly visible. Your IP address is deleted one week after your comment was published.
In general, we do not check posted comments before publishing. We do nevertheless reserve the right to delete your comments, if third parties claim that the comment is unlawful. You are able to object to the storage of the mentioned data at any time. In this case we need to delete your comment from our website.
6. Job Applications
You can apply for an open position with us through our website. To this end, we collect personal contact data from you, which specifically includes your name, your CV, your cover letter and other content provided by you.
Your personal application data will only be collected, stored, processed and used for purposes in connection with your interest in current or future employment with us and the actual processing of your application. Your online application will only be processed and handled by the relevant contact people in our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data.
If we store your application data for longer than six months and you have specifically agreed to this, we inform you that this consent can be withdrawn at any time based on Article 7, paragraph 3 GDPR. Withdrawal of the consent does not affect the legality of processing done until you declared your withdrawal.
In case we are unable to offer you any employment, we will keep the data provided by you for up to six months after the end of the application process for the purpose of answering questions in relation to your application and rejection. This is not applicable in case there are statutory obligations preventing a deletion, the continued storage is needed for the purpose of evidence documentation or you have specifically agreed to a longer period of storage.
7. Messages to us
If you send us a message via one of mentioned means of communication, we will process the data provided by you only to handle your request. Legal basis for this data processing is Article 6, paragraph 1, (b), GDPR.
a. Subscription and Cancellation
We offer the option to subscribe to our newsletter on our website. To receive our newsletter, you will need a valid email address and your name. To verify your email address, you will first receive a subscription email, which you need to confirm (double opt-in).
We are sending you our newsletter on the basis of your confirmation (Article 6, paragraph 1, (a), GDPR). You can stop receiving our newsletter at any time in the future. You can do so easily by using the unsubscribe link available in any email or contact us via one of our mentioned communications channels (e.g. at firstname.lastname@example.org)
By registering for the newsletter, we will save your IP address and date and time of registration. The processing of this data is necessary to provide evidence of the registration process in accordance with statutory requirements.
We analyse the reading habits and open rates of our newsletters. We therefore collect and process pseudonymized usage data, which we will not compare to your email or IP address. Legal basis for the analysis of our newsletters is Article 6, paragraph 1, (f), GDPR and serves our legitimate interest to optimize our newsletters. You can withdraw your consent at any time by contacting us via one of the mentioned contact channels.
c. Newsletter service
We use the newsletter service MailChimp, a service provided by The Rocket Science Group, LLC 675 Ponce de, Leon Avenue NE, Suite 5000, Atlanta, GA 30308, USA, hereinafter referred to as “Mailchimp”. Mailchimp works with us as a data processor, is strictly bound by instructions and contractually committed to ensure adequate technical and organizational data protection measures. MailChimp is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation: See more here.
10. Analysis of our website
a. Google Analytics
Our website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google“. Google Analytics employs cookies. The information generated by these cookies about your usage of our website is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate user usage of our site, to compile reports on website activity for us, and to provide other services related to website and internet usage. It is possible to create pseudonymous user profiles using this information.
We use Google Analytics only with an active IP anonymization feature on our website. In doing so, Google abbreviates and thereby anonymizes your IP address within member states of the European Union or signatory states to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is transferred to a Google server in the USA and is abbreviated there. The IP address transmitted by your browser within the context of Google Analytics will not be combined with any other data held by Google.
The legal basis for the use of this service is Article 6 (1) (f) GDPR and serves our legitimate interest to ensure a needs and demand-driven layout of our website and services.
You may prevent or stop the data processing at any time. To do this you can download and install a browser plugin that blocks tracking services or can adjust the settings on your browser software accordingly to prevent cookies from being installed.
Google is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation.
B. Google Marketing Services
Our website uses marketing and remarketing services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter referred to as “Google”. These services allow us to display advertisements in a more targeted manner in order to present advertisements of interest to users. Through remarketing, ads and products are displayed to users relating to an interest established by activity on other websites within the Google network. For these purposes, a code is used by Google when our website is accessed and what are referred to as (re)marketing tags are incorporated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user’s device (comparable technologies may also be used instead of cookies). Cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which apps users have visited, which content they are interested in and which offers have been used. In addition, technical information about the browser and operating system, referring websites, the length of the visit as well as any additional data about the use of the online products and services are stored. The IP address of users is also recorded, although we would like inform you that within the framework of Google Analytics, IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area are truncated.
All user data will only be processed as pseudonymous data. Google does not store any names or email addresses. All displayed ads are therefore not displayed specifically for a person, but for the owner of the cookie. This information is collected by Google and transmitted to and stored by servers in the USA.
One of the Google marketing services we use is the online advertising program Google AdWords. In the case of Google AdWords, each AdWords customer receives a different conversion cookie. Cookies can therefore not be tracked through the websites of AdWords customers. The information collected by the cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information that personally identifies users.
The legal basis for the use of this service is Article 6 (1) (f) GDPR and serves our legitimate commercial interests.
If you wish to object to interest-based advertising by Google marketing services, you can do so using the settings and opt-out options provided by Google here.
Google is certified under the Privacy Shield Agreement and thus guarantees its compliance with European data protection legislation. See more here.
11. Withdrawal of consent
You are entitled to withdraw your consent to data processing in accordance with Article 7, Paragraph 3 GDPR. Withdrawal of consent does not affect the legality of processing done before you declared your withdrawal.
12. Your rights
As the person concerned, you are entitled to exercise your rights against us. In particular, you have the following rights:
- In accordance with Article 15 GDPR, you have the right to request information as to whether or not, and to what extent, we process personal data about you.
- You have the right to have us correct your data in accordance with Article 16 GDPR.
- You have the right to have us delete your personal data in accordance with Article 17 GDPR.
- You have the right to have the processing of your personal data restricted in accordance with Article 18 GDPR.
- You have the right, in accordance with Article 20 GDPR, to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format and to transmit this data to another controller.
13. Right to object
In accordance with Article 21 GDPR, you have the right to object to any processing operations executed that use Article 6, Paragraph 1, Points (e) and (f) GDPR as their legal basis. If personal data was used by us for the purpose of direct mail you may also object to this processing in accordance with Article 3, Paragraph 2 and 3 GDPR.
14. Complaints to Government Authorities
If you believe that the processing of your personal data constitutes an infringement of the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR.