Privacy Policy for Bright Roots Kindergarten

Effective Date: 17/10/2025

1. Introduction

Welcome to Bright Roots Kindergarten.
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information you share with us when you visit our website brightroots.sk or submit applications through our forms.

​

2. Data Controller

The data controller responsible for your personal data is: Sheila Cobo Campaña (Trnava, Slovakia)
Email: brightroots.kindergarten@gmail.com

​​

3. Personal Data We Collect

We collect personal data from parents/guardians, children, and job applicants:

For enrollment applications (via Airtable):

• Child information: full name, date of birth, address, language(s) spoken at home, allergies, medical needs, and special requirements

• Parent/guardian information: full name, email, phone number

• Enrollment preferences: program choice, preferred start date, source of referral, reasons for choosing our kindergarten

• Other voluntarily provided information in forms or messages

For job applications (via Wix forms):

• Applicant information: full name, email, phone number, CV, qualifications, experience, and other details submitted voluntarily

• This information is sent to our email brightroots.kindergarten@gmail.com

​

4. Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR) – we rely on the consent of parents/legal guardians to process personal data of children.

• Contractual necessity (Art. 6(1)(b) GDPR) – processing is necessary for pre-enrollment procedures.

• Legitimate interest (Art. 6(1)(f) GDPR) – ensuring website functionality, security, and communication with users.

​

5. Data Retention

• Enrollment applications: retained for 5 years from the child’s enrollment start date, unless deletion is requested earlier.

• Contact form messages: retained for 6 months after resolution.

• Job applications: retained for 12 months unless you request deletion earlier.

​

6. Data Sharing and Processors

We use Airtable to process enrollment forms. Airtable acts as a data processor under GDPR and stores data securely.

We do not sell or share your personal data with any other third parties.

​

7. Cookies and Analytics

Our website may use essential cookies for basic functionality. We currently do not use tracking or analytics cookies.

​

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

​

9. Rights of Data Subjects

Parents/legal guardians have the following rights under GDPR:

• Access and obtain a copy of their child’s personal data

• Correct or update inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Withdraw consent at any time

• Lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, www.dataprotection.gov.sk)

​

10. Contact

For questions regarding personal data, please contact:
📧 brightroots.kindergarten@gmail.com

​

11. Updates to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with a revised “Effective Date”.

​