Children's data

Introduction

Children's personal data is treated as a special category under the GDPR. This means stricter requirements apply to how we process, store and protect it. For Opvango's soft launch, we therefore deliberately decided not to enable certain features yet.

What do we currently process?

• Your child's first and last name
• Date of birth, so we can show suitable types of childcare — KDV, BSO or GOB
• Desired start date and care periods
• Free text you add to the application

This information is needed to send your application to the childcare provider. It is shared only with the childcare locations to which you apply.

What do we not process yet?

• Copies of your child's identity documents
• Passport photos or other images of your child
• Medical data or allergy information
• Registration documents as files, including PDF and JPG
• Income information or a connection to the Dutch Tax Administration for childcare benefit

Why not yet?

We first want to complete the legal, technical and organisational safeguards for special-category personal data. The following items are on our roadmap and have not yet been implemented, so upload features remain disabled until they are ready:

• Data processing agreements with our sub-processors
• Encryption at rest with rotated keys
• Audit logging for every access to children's documents
• Automated retention periods, including mandatory deletion after a defined period

Roadmap

We are working on these safeguards and will introduce them in a separate phase. Until then, we explicitly ask you not to upload documents or photos of your child, and the related pages remain hidden in the parent portal.

Questions

Email [email protected] if you have questions about how we handle children's data. We respond within 14 days.