Skip to content

Privacy Policy

31 October 2026

Your privacy matters to us. This Privacy Policy explains how World Healthcare Recruitment collects, uses, stores and protects your personal data, in accordance with the General Data Protection Regulation (GDPR / Regulation (EU) 2016/679) and applicable national data protection laws.

1. Data Controller

The controller of your personal data is:

Centar za afirmaciju i razvoj 2015

Kralja Milana 4, 11000 Belgrade, Serbia

Tax number (PIB) 111353825, company number (Matični broj) 28277920

Represented by the Managing Director, Rajko Ćulibrk

World Healthcare Recruitment is not a separate company but the business division of Centar za afirmaciju i razvoj that recruits medical professionals.

Office Serbia: Belgrade, Serbia

Offices Bosnia and Herzegovina: Banja Luka and Sarajevo, Bosnia and Herzegovina

Team in Germany: Munich and Berlin, Germany

Email for all data protection enquiries: info@worldhealthcarerecruitment.net

Website: worldhealthcarerecruitment.net

For any questions regarding the processing of your data or the exercise of your rights, you may contact us at the email address above.

2. What Data We Collect

We collect only the data we need to provide our placement service and the free tools on the website.

Data you enter in forms (application, contact, newsletter, free tools):

  • Full name, email address, phone number
  • Country and city of residence
  • Profession and German level
  • The content of your message
  • Referral code, if you came via a colleague's link

Data from the free tools (only if you use them):

  • German placement test, medical German test and readiness quiz: your answers and result
  • Diploma check: country, level of education and profession
  • German CV generator: the content of the CV you upload (document or photo) or enter in the form — work experience, education, languages, contact details
  • Cover letter generator: the details you enter about your job, experience, German skills, recognition, target facility and motivation
  • Schengen calculator: dates of stay and the calculation result
  • Online info day: the chosen date and your role (candidate or employer), and for employers the name of the facility
  • PDF guides and checklists: which guide you downloaded

Data collected automatically:

  • Our visit statistics: anonymised (hashed) IP address, approximate location (country, city) and network name derived from the IP address, pages viewed, time on page and how much of the page was seen, clicks on buttons, starting to fill in a form, device and browser type, source of the visit (e.g. campaign tag in the link)
  • Google Analytics 4, Google Ads and Meta Pixel: identifiers in cookies and data about your visit and actions on the website (e.g. an application sent) — see section 8

If you later provide documents during the recruitment process (diplomas, certificates, CV, recognition documents — Anerkennung), we process them solely for the purpose of placement and with your consent.

Partner area for employers: if you have been given access to a partner area, we store the details of your organisation and contact persons that you enter, messages and attachments, and records of logins and of documents being opened. We use this data only to prepare and carry out our cooperation. No third-party analytics tools are used in the partner area.

3. Legal Basis for Processing

We process your data on the following legal bases under Article 6 GDPR:

  • Consent (Art. 6(1)(a) GDPR) — when you voluntarily provide your data through a form or subscribe to the newsletter. You may withdraw your consent at any time.
  • Legitimate interest (Art. 6(1)(f) GDPR) — for basic website analytics, system security and the improvement of our services, whereby we always balance our interest against your rights and freedoms.
  • Performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR) — where processing serves to connect you with an employer in Germany.

4. Purpose of Processing

We use your data for the following purposes:

  • Job placement — matching with German employers (hospitals, clinics, care homes), organising interviews, support with diploma recognition (Anerkennung), language training, translation of documents, visa and relocation.
  • Free tools — creating your German CV and cover letter, test and check results, PDF guides, registration for the online info day (confirmation, calendar invitation, access link and reminder). We also email you the result or document.
  • Communication — answering your enquiries and contacting you about your application.
  • Newsletter — sending updates about jobs and news, only if you have explicitly subscribed.
  • Measuring and improving the website and advertising — to know which pages, tools and campaigns genuinely help people.

As a reminder: our placement is free for candidates — the employer pays the fee. The German course at our school is free for candidates as well. External costs (certified translations, visa) are borne by the candidate and are not a fee of our agency. The recognition fee is paid by the employer.

5. Data Processors

To provide our services we use carefully selected providers who process data on our behalf, under data processing agreements and in line with the GDPR:

  • Hetzner (Germany) — hosting of the website, the database and our CRM system on servers in the EU.
  • Nexo — our internal CRM system in which the team handles applications; it runs on our server at Hetzner in the EU.
  • Brevo (France, EU) — sending emails (confirmations, results, documents from the generators) and newsletters.
  • Anthropic (Claude), USA — processing the content you enter or upload in the German CV generator and the cover letter generator, solely to create that document, and help with website content. According to Anthropic's terms, data sent via its API is not used to train models. Data from other forms is not sent to this tool.
  • Google (Google Analytics 4 and Google Ads) and Meta (Meta Pixel) — measuring visits and advertising performance, and showing ads to website visitors (see section 8).
  • Video meeting platform (e.g. Zoom, Google Meet or Microsoft Teams — named in the invitation) — only if you join the online info day; that platform's privacy policy then also applies.
  • Freepik — source of illustrations and photos (does not process your personal data).

Appropriate agreements guaranteeing the protection of your data are in place with all processors that have access to personal data.

6. Data Retention

We keep your data only as long as needed for the purpose for which it was collected:

  • Data from forms and free tools: up to 12 months after the last contact, unless a recruitment process is under way.
  • Data of candidates in an active recruitment process: for the duration of the process and up to 24 months afterwards for possible future opportunities, unless you request deletion.
  • Documents from the generators (CV, cover letter) are not stored on the website: we email them to you and our team; only the record of the request remains in the database.
  • Online info day registrations: up to 12 months after the date.
  • Newsletter data: until you withdraw consent (unsubscribe).
  • Our visit statistics: in anonymised form for up to 14 months; Google (Analytics and Ads) and Meta retain data according to their own settings and policies.
  • Records of movement through the website: up to 13 months after the last visit; after that, only anonymous statistics remain.

After the retention period, data is permanently and securely deleted or anonymised.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — to know which of your data we process.
  • Right to rectification — to request the correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten") — to request the deletion of your data.
  • Right to restriction of processing — to request a temporary restriction of processing.
  • Right to object — to object to processing based on legitimate interest.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.

You can exercise your rights by sending a request to info@worldhealthcarerecruitment.net. We respond to your request within 30 days. You also have the right to lodge a complaint with the competent data protection supervisory authority.

8. Cookies and Analytics

Necessary (technical) cookies and the browser's local storage enable the basic functions of the website — e.g. your language choice, progress in a test, or the Schengen calculator not asking for your contact details again.

Our visit statistics run on our own server and the data does not go to third parties. We do not store the full IP address. For visitors from the EU, the EEA, Switzerland and the United Kingdom, we set no cookie for these statistics: visits are recognised only within a single day, using a hash of the IP address and browser. For all other visitors, we set the cookie whr_vid (up to 13 months) to recognise a return visit. When you send an application, we link the record of your movement through the website to it, so that we can see what brought you to us and what interested you.

To measure visits and advertising performance, the website uses:

  • Google Analytics 4 (Google Ireland Ltd.) — statistics on visits and actions on the website;
  • Google Ads (Google Ireland Ltd.) — showing our ads to people who have visited the website (remarketing) and measuring that an application was sent or a free tool was used after an ad;
  • Meta Pixel (Meta Platforms Ireland Ltd.) — measuring advertising performance on Facebook and Instagram (e.g. that an application was sent after an ad) and showing our ads to people who have visited the website. When you send an application or leave your contact details in a free tool, we also pass Meta a confirmation of that event from our server, with the contact details from the application in hashed (unreadable) form plus IP address and browser data, so that the application is attributed to the ad correctly.

These services set cookies (e.g. _ga, _gcl_au, _fbp), and data may be transferred to the USA (see section 10). In addition, we keep our own anonymised visit statistics (hashed IP address, no tracking cookies).

You can delete or block cookies in your browser settings. Google offers a browser add-on to opt out of Google Analytics (tools.google.com/dlpage/gaoptout); you manage the ads Google shows you at myadcenter.google.com, and ad settings for Facebook and Instagram in your Meta account. You can object to processing based on legitimate interests by emailing info@worldhealthcarerecruitment.net.

9. Data Security

We apply appropriate technical and organisational safeguards (encryption of data transmission via HTTPS/TLS, access control, regular security reviews) to protect your data from unauthorised access, loss or misuse.

10. Transfers to Third Countries

Your data is primarily processed in the European Union (Hetzner, Brevo, our database and CRM). Anthropic (CV and cover letter generators), Google and Meta may process data in the USA; such transfers rely, depending on the provider, on the EU-U.S. Data Privacy Framework or on EU Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are published on this page. We recommend checking it occasionally.

12. Privacy Contact

For any questions regarding this Privacy Policy or the processing of your data, please contact us at:

World Healthcare Recruitment

Email: info@worldhealthcarerecruitment.net

Offices: Belgrade (Serbia), Banja Luka and Sarajevo (Bosnia and Herzegovina); team in Munich and Berlin (Germany)