Privacy Policy

Your privacy matters to us. This Privacy Policy explains how World Healthcare Recruitment collects, uses, stores and protects your personal data, in accordance with the General Data Protection Regulation (GDPR / Regulation (EU) 2016/679) and applicable national data protection laws.

1. Data Controller

The controller of your personal data is:

World Healthcare Recruitment

Recruitment agency for medical professionals

Office Serbia: Belgrade, Serbia

Office Bosnia and Herzegovina: Banja Luka, Bosnia and Herzegovina

Office Germany: Berlin and Munich, Germany

Registration number: [XXX]

Tax / company identification number: [XXX]

Email for all data protection enquiries: info@worldhealthcarerecruitment.net

Website: worldhealthcarerecruitment.net

For any questions regarding the processing of your data or the exercise of your rights, you may contact us at the email address above.

2. What Data We Collect

We collect only the data that is necessary to provide our recruitment and placement services.

Data you enter through the forms on the website (application, contact, newsletter):

• First and last name
• Email address
• Phone number
• Country and city of residence
• Profession (e.g. nurse, doctor, pharmacist, physiotherapist, caregiver)
• Level of German language proficiency
• The content of any message you send us

Data collected automatically (analytics):

• Anonymised (hashed) IP address
• Website usage data (pages viewed, time of visit, device and browser type)

If, during the recruitment process, you later provide us with documents (diplomas, certificates, CV, documents for qualification recognition — Anerkennung), we process this data solely for the purpose of placement and on the basis of your consent.

3. Legal Basis for Processing

We process your data on the following legal bases under Article 6 GDPR:

• Consent (Art. 6(1)(a) GDPR) — when you voluntarily provide your data through a form or subscribe to the newsletter. You may withdraw your consent at any time.
• Legitimate interest (Art. 6(1)(f) GDPR) — for basic website analytics, system security and the improvement of our services, whereby we always balance our interest against your rights and freedoms.
• Performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR) — where processing serves to connect you with an employer in Germany.

4. Purpose of Processing

We use your data for the following purposes:

• Job placement — connecting you with German employers (hospitals, clinics, care homes), organising interviews, supporting the recognition of qualifications (Anerkennung), language training, document translation, visa and relocation.
• Communication — responding to your enquiries and contacting you regarding your application.
• Newsletter — sending job and news updates, only if you have expressly subscribed.

Please note: for candidates, our placement service is free of charge — the fee is paid by the employer. External costs (language course, sworn translation, recognition fee, visa) are borne by the candidate and do not constitute a fee charged by our agency.

5. Data Processors

To deliver our services we use carefully selected providers that process data on our behalf, under data processing agreements (DPA) and in compliance with the GDPR:

• Brevo — sending emails and newsletters.
• Hetzner — hosting the website on a VPS server (servers in the EU / Germany).
• PostgreSQL database — storing form data on our infrastructure.
• Freepik — source of illustrations and photographs on the website (does not process your personal data).
• Anthropic (Claude) — a tool used to assist with the creation and editing of website content. Your personal data from the forms is not shared with this tool.

Appropriate agreements ensuring the protection of your data have been concluded with all processors that have access to personal data.

6. Data Retention

We retain your data only for as long as necessary to fulfil the purpose for which it was collected:

• Contact form data: up to 12 months after the last contact, unless a recruitment process is ongoing.
• Candidate data in an active recruitment process: for the duration of the process and up to 24 months after its completion, in view of possible future opportunities, unless you request deletion.
• Newsletter data: until consent is withdrawn (unsubscription).
• Analytics data: in anonymised form, up to 14 months.

After the retention period expires, data is permanently and securely deleted or anonymised.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — to know which of your data we process.
• Right to rectification — to request the correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — to request the deletion of your data.
• Right to restriction of processing — to request a temporary restriction of processing.
• Right to object — to object to processing based on legitimate interest.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.

You can exercise your rights by sending a request to info@worldhealthcarerecruitment.net. We respond to your request within 30 days. You also have the right to lodge a complaint with the competent data protection supervisory authority.

8. Cookies and Analytics

Our website uses cookies and similar technologies. Necessary (technical) cookies enable the basic functioning of the website and do not require your consent. We use analytics cookies only with your consent, to understand how the website is used and to improve it.

For analytics we use data in anonymised form (hashed IP address), without profiling individuals. You can change or withdraw your consent to cookies at any time through your browser settings or the cookie banner on the website.

9. Data Security

We apply appropriate technical and organisational safeguards (encryption of data transmission via HTTPS/TLS, access control, regular security reviews) to protect your data from unauthorised access, loss or misuse.

10. Transfers to Third Countries

Your data is primarily processed within the European Union / European Economic Area. Should any processor process data outside the EU/EEA, we ensure appropriate safeguards (EU Standard Contractual Clauses or adequacy decisions).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We publish any changes on this page, indicating the date of the last update. We recommend that you check this page periodically.

12. Privacy Contact

For any questions regarding this Privacy Policy or the processing of your data, please contact us at:

World Healthcare Recruitment

Email: info@worldhealthcarerecruitment.net

Offices: Belgrade (Serbia), Banja Luka (Bosnia and Herzegovina), Berlin and Munich (Germany)