Privacy Policy

Personal data (referred to hereinafter mostly as "data") are only processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, also known as the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" refers to any operation or series of operations that is performed with or without the help of automated procedures in connection with personal data, such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we either alone or jointly with others decide on the purposes and means of processing. We also inform you below about the third-party components used by us for optimization purposes and to enhance the usability, insofar as third parties process data in their own responsibility as a result.

Our privacy policy is structured as follows:

I. Information about us as the responsible party
II. Rights of users and affected parties
III. Information on data processing

I. Information about us as the responsible party

The responsible provider of this website in terms of data protection law is:

German Nurse Agency GNA GmbH
Klinikweg 23
22081 Hamburg
Germany

Email: info@german-nurse.agency
Phone: +49 151 70 838 616

II. Rights of users and affected parties

With regard to the data processing described in more detail below, users and affected parties have the right to confirmation as to whether their relevant data is being processed, to access the processed data, to further information about the data processing as well as to copies of the data (see also Art. 15 GDPR); to rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR); to immediate deletion of their related data (see also Art. 17 GDPR), or alternatively, if further processing is necessary in accordance with Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR; to receive their relevant and provided data and to transmit this data to other providers/responsible parties (see also Art. 20 GDPR); to lodge a complaint with the supervisory authority, if they believe that their relevant data has been processed by the provider in violation of data protection regulations (see also Art. 77 GDPR). Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any rectification or deletion of data or restriction of processing that is carried out based on Articles 16, 17 (1), 18 GDPR. However, this obligation does not exist if this notification is impossible or involves a disproportionate effort. Regardless, the user has the right to information about these recipients.

Users and affected parties also have the right to object to future processing of their related data under Art. 21 GDPR, provided that the data is processed by the provider in accordance with Art. 6 (1) (f) GDPR. In particular, an objection against data processing for the purpose of direct marketing is permissible.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for storage ceases to exist, and there are no legal storage obligations preventing deletion, and no contrary provisions concerning individual processing procedures are made thereafter.

Contact form

If you send us inquiries via the contact form, your information from the form, including the contact details you provided, will be stored. This is done to process your inquiry and to be available for follow-up questions. Your data will not be passed on to third parties without your explicit consent.

Legal basis of processing:

• Art. 6 (1) (b) GDPR: If the inquiry is related to the fulfillment of a contract or the implementation of pre-contractual measures.

• Art. 6 (1) (f) GDPR: If processing is based on our legitimate interest in effectively processing your inquiry.

• Art. 6 (1) (a) GDPR: If your consent has been obtained. You can revoke this consent at any time.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent, or the purpose for data storage ceases to exist (e.g., after your inquiry has been processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Inquiries via email, phone, or fax

If you contact us via email, phone, or fax, your personal data (e.g., name, contact details, content of the inquiry) will be stored and processed. This serves to process your concern. Your data will not be passed on to third parties without your consent.

Legal basis of processing:

• Art. 6 (1) (b) GDPR: If the inquiry is related to the fulfillment of a contract or the implementation of pre-contractual measures.

• Art. 6 (1) (f) GDPR: If processing is based on our legitimate interest in effectively processing your inquiry.

• Art. 6 (1) (a) GDPR: If your consent has been obtained. You can revoke this consent at any time.

The data you transmit will remain with us until you request deletion, revoke your consent, or the purpose for data storage ceases to exist (e.g., after your concern has been processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Server data

For technical reasons, in particular to ensure a secure and stable web presence, data is transmitted to us or to our web space provider by your internet browser. With these so-called server log files, among others, the type and version of your internet browser, the operating system, the website from which you accessed our web presence (referrer URL), the website(s) of our web presence that you visit, the date and time of the respective access, as well as the IP address of the internet connection from which the use of our web presence occurs, is collected.

These collected data are temporarily stored, but not together with other data from you.

This storage occurs based on the legal basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our web presence.

Perspective Software

To provide our online services, we use an external service provider: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter "Perspective"). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to entities in the United States of America, as Perspective employs subprocessors based in the USA. Since the European Commission has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective provides additional measures and guarantees for data transmission to the United States in accordance with GDPR requirements to ensure an adequate level of protection. For example, through the conclusion of standard contractual clauses between Perspective and the subprocessors.

I. Description and scope of data processing

Perspective processes your data for us so that we can provide our online services to you. For this purpose, Perspective automatically transmits your IP address to deliver the content and features of our online services to your browser or device.

The following data may be collected:

1. Information about the browser type and the version used

2. The operating system of your computer

3. The internet service provider you use

4. The IP address of your device

5. Date and time of your access to the funnel

6. Websites from which you came to our website ("Referrer")

II. Legal basis for data processing

Perspective stores the data mentioned in I. in so-called log files. This is done to ensure

• a smooth connection to the website,

• a comfortable use of our website,

• evaluation of system security and stability as well as

• other administrative purposes.

The temporary storage of the IP address by the system is also necessary to enable delivery of the website to your computer. For this, the IP address of your computer must remain stored for the duration of the session.
​

This purpose also underlies our legitimate interest in data processing. The legal basis for data processing is therefore Art. 6 (1) sentence 1 (f) GDPR.

III. Duration of processing

The personal data processed by Perspective is deleted as soon as it is no longer necessary for the purpose of its collection:

• In the case of data collection for the provision of the website, this is the case when the session ends.

• In the case of storing the IP address in log files, this happens after a maximum of 7 days.

IV. Rights of the affected parties

You have the right to obtain information free of charge at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request rectification, blocking, or deletion of this data. For this and for further questions regarding data protection, you can contact us at any time at the address given in the imprint. Furthermore, in case of violations of the GDPR, you have the right to complain to the responsible supervisory authority.

Because data processing is based on Art. 6 (1) sentence 1 (f) GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms or the processing is necessary for the establishment, exercise, or defense of legal claims (objection under Art. 21 (1) GDPR). Since the collection of data for the provision of the website and the storage of data in log files is essential for the operation of our website, there usually should not be a possibility of objection for you.

Additionally, you have the right, under certain circumstances, to request the restriction of processing your personal data. The right to restrict processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of processing your personal data.

• If the processing of your personal data was unlawful, you can request the restriction of data processing instead of deletion.

• If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing your personal data instead of deletion.

• If you have lodged an objection under Art. 21 (1) GDPR, a balance must be struck between your and our interests. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing your personal data.

If you have restricted the processing of your personal data, these data – aside from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

Contact and inquiry management

To provide contact, inquiry, or application forms, we use an external service provider: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter "Perspective"). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to entities in the United States of America, as Perspective employs subprocessors based in the USA. Since the European Commission has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective offers additional measures and guarantees for data transmission to the United States in accordance with GDPR requirements to ensure an adequate level of protection. For example, through the conclusion of standard contractual clauses between Perspective and the subprocessors.

I. Description and scope of data processing

When using the contact, inquiry, or application forms from Perspective, the following data is transmitted to Perspective's servers:

• Date and time of access

• Websites from which you came to our internet page ("Referrer")

• Context information (e.g., button clicks on the pages, selections made on the pages)

• Content of all filled text fields (e.g., contact details such as your name or address, or other personal data, depending on the question presented in the specific text field)

• Files uploaded by you

II. Purpose and legal basis of data processing

‍‍The purpose of this data processing is to ensure the communication you initiated.

The processing of your data from contact, inquiry, or application forms thus initially takes place based on your consent. The legal basis is Art. 6 (1) sentence 1 (a) GDPR. If a contractual initiation occurs via an inquiry form, the legal basis is also Art. 6 (1) sentence 1 (b) GDPR. The legal basis for the processing of data in an application form can be in addition to Art. 6 (1) sentence 1 (f) GDPR also Art. 88 GDPR in conjunction with section 26 BDSG.

III. Duration of processing

‍Your personal data will be stored as long as it is necessary to fulfill the processing purpose, or until you revoke your consent. Exceptions to this principle are those data that Perspective must keep due to legal obligations. These include, for example, commercial and tax retention obligations. These retention periods amount – at present – to up to ten years.

IV. Rights of affected parties

You have the right to obtain information free of charge at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request rectification, blocking, or deletion of this data. For this and for further questions on data protection, you can contact us at any time at the address indicated in the imprint. Furthermore, you have a right to complain to the responsible supervisory authority in case of violations of the GDPR.

You can revoke your consent to data processing at any time by informal notification to us (e.g., by email). The legality of the processing carried out on the basis of the consent up to the revocation is not affected by the revocation.

Additionally, you have the right, under certain circumstances, to request the restriction of processing your personal data. The right to restrict processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of processing your personal data.

• If the processing of your personal data was unlawful, you can request the restriction of data processing instead of deletion.

• If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing your personal data instead of deletion.

• If you have lodged an objection under Art. 21 (1) GDPR, a balance must be struck between your and our interests. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing your personal data.

If you have restricted the processing of your personal data, these data – aside from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

LeadTable

To manage and organize contacts and the visual preparation generated via various online channels, we use an external service provider: Katiba Technology UG (software "LeadTable"), Heisinger Straße 12, 87437 Kempten (Allgäu). Katiba Technology stores data exclusively on servers in Germany, except for the sending of emails, which may take place under the conditions set out in the contract outside the EU, but the transmitted data will be limited to non-personal data. This serves to facilitate a decision among a multitude of applicants. To enable the above, your data is transmitted to Katiba Technology UG (limited liability) and processed there for specific purposes.

I. Description and scope of data processing Katiba Technology processes data to assist us in managing contacts that are generated via various online channels. This may include the following data:

• Professional contact and (employment) organization data such as name, first name, address, email address, phone number.

• Private contact and identification data such as gender, mobile phone number, date and place of birth.

II. Legal basis for data processing The processing of this data is based on the service contract between the parties. The data processing begins with the creation of a company account and continues until this contract or the main contract is terminated by one party.

III. Duration of processing Personal data processed by Katiba Technology will be deleted as soon as they are no longer necessary for the purpose of their collection. This specifically applies to the storage of IP addresses in log files, which will be deleted after a maximum of seven days.

IV. Rights of the affected parties

You have the right to obtain information free of charge at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request rectification, blocking, or deletion of this data. For this and for further questions regarding data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to complain to the responsible supervisory authority in case of violations of the GDPR.

You can revoke your consent to data processing at any time by informal notification to us (e.g., by email). The legality of the processing carried out on the basis of the consent up to the revocation is not affected by the revocation.

Additionally, you have the right, under certain circumstances, to request the restriction of processing your personal data. The right to restrict processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of processing your personal data.

• If the processing of your personal data was unlawful, you can request the restriction of data processing instead of deletion.

• If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing your personal data instead of deletion.

• If you have lodged an objection under Art. 21 (1) GDPR, a balance must be struck between your and our interests. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing your personal data.