Privacy Policy & Data Protection

1. Overview & General Information

This policy explains how German Resources Company handles your personal data when you visit our website or use our recruitment, degree recognition, and consultation forms. Personal data is any information relating to an identified or identifiable natural person.

2. Data Controller (Verantwortliche Stelle)

3. What Data Do We Collect and How?

• Directly Provided Data: Data you enter in job application forms, consultation requests, partnership proposals, and the CV builder (name, email, phone, nationality, qualifications, and uploaded documents such as CVs and diplomas).
• Automatically Recorded Technical Data: Technical data such as IP address, browser type, operating system, and visit timestamp are recorded via server log files to ensure system security and website stability.

4. Purposes and Legal Bases for Processing (Rechtsgrundlagen)

Your data is processed based on the legal grounds established in Article 6 of the GDPR (Art. 6 DSGVO):

• Contractual Performance & Pre-contractual Measures (Art. 6(1)(b) GDPR): To process employment applications, compile ZAB degree equivalence dossiers, and provide booked consultations.
• Explicit Consent (Art. 6(1)(a) GDPR): When you grant us consent to store your CV in our talent pool or to receive notifications.
• Legitimate Interests (Art. 6(1)(f) GDPR): To guarantee the IT security of the website, protect against cyberattacks, and verify inquiry integrity.

5. Data Sharing & Third-Party Disclosure (Datenweitergabe)

We do not sell or rent your personal data to any third party. Data disclosure occurs exclusively when necessary to fulfill the requested services, such as:

• German Authorities and Recognition Bodies: Such as the Central Office for Foreign Education (ZAB) in Bonn and Chambers of Commerce/Crafts (IHK, HWK) to process evaluation dossiers.
• Partner Employers and Hospitals in Germany: For employment dossiers following explicit consent and qualification matching of the candidate.
• Certified Technical Service Providers: Server hosting providers and encrypted email systems subject to rigorous Data Processing Agreements (DPA / AVV).

6. Data Retention Period (Speicherdauer)

We retain personal data only for as long as necessary to achieve the collection purpose or as required by statutory German commercial and tax retention mandates (HGB / AO). Unsuccessful application dossiers are deleted after 6 months (AGG), unless explicit consent has been granted for retention in our talent pool.

7. Your Legal Rights as a Data Subject (Ihre Rechte)

German and European laws grant you the following statutory rights under Articles 15–21 of the GDPR (DSGVO):

• Right of Access (Art. 15 GDPR): To obtain confirmation as to whether your personal data is being processed, its source, and processing purposes.
• Right to Rectification (Art. 16 GDPR): To request rectification of inaccurate data or completion of incomplete personal information.
• Right to Erasure / "Right to Be Forgotten" (Art. 17 GDPR): To request erasure of your personal records unless overriding legal retention duties apply.
• Right to Restriction of Processing (Art. 18 GDPR): To restrict the processing of your personal data under specific statutory circumstances.
• Right to Data Portability (Art. 20 GDPR): To receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent & Object (Art. 21 GDPR): To revoke previously granted consent at any time with future effect and object to data processing.
• Right to Lodge a Complaint with Supervisory Authority: You have the right to lodge a complaint with the competent supervisory body (The Hessian Commissioner for Data Protection and Freedom of Information).

8. Data Security & SSL/TLS Encryption

We implement high-grade SSL/TLS encryption to protect data transmissions between your browser and our servers, safeguarding form submissions from unauthorized third-party interception.