Privacy Policy

We are delighted with your visit to our website.

When you visit our websites or contact us via contact form, email, telephone, or fax, various personal data are collected.

Personal data are data with which you can be personally identified. Unfortunately, it is generally not possible to display a website without personal data on your device, this includes for example your IP address.

In the following, we provide you with detailed information about what data we collect, what we use them for, how and for what purpose this happens, as well as what rights you have.

1. Responsible Party

Responsible for the data processing on these websites is the

Strada Armata Română 56
RO-Sfântu Gheorghe
Phone: +40 (747)460 466

Authorized representatives: Corina Borboly | Bettina Breese
Commercial register entry: t J14/14/2022
VAT ID: RO45505186

2. Data Protection Officer

We have appointed a data protection officer for our company; you can reach them at the following contact details:

Jan Frederic Uhlenbruch
c/o HUM Society for Homecare
and Medical Technology GmbH
Zum Pier 79
D-44536 Lünen
Phone: +49 (0)231 880885-32

3. Supervisory Authority

The authority responsible for data protection for us is

The National Supervisory Authority For
Personal Data Processing
28-30 G-ral Gheorghe Magheru Bld., District 1
010336 Bucharest, Romania
Phone: +40 318 059 211

4. Hosting

Our websites are hosted on servers of an external hosting service provider, specifically Image Arts GmbH, Otto-Hahn-Str. 2, D-40670 Meerbusch.

Personal data collected on our websites are processed on these servers. This includes, for example, IP addresses, meta and communication data, website accesses and other data generated via the websites.

Our service provider will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to these data. We have concluded a contract for order processing with our service provider to ensure data protection-compliant processing.

We use our service provider in the interest of secure and efficient provision of our websites by a professional provider (Art. 6 para. 1 lit. f GDPR).

5. Server log files

The hosting provider of our websites collects and stores information in so-called server log files that your browser automatically transmits when you visit the websites.

These are:

  • Referrer (previously visited website)
  • Requested website or file
  • Browser type and browser version
  • Used operating system
  • Used device type
  • Time of access
  • IP address in anonymized form
6. Analysis, Statistics, and Cookies

Analysis data is collected exclusively for statistical evaluation and technical optimization of our website. Furthermore, we only use technically necessary cookies.

7. Inquiries via Email, Telephone, or Fax

When you contact us via email, telephone, or fax, your inquiry, including all related personal data, will be stored and processed for the purpose of handling your request. We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, if your inquiry is related to the performance of a contract or necessary for pre-contractual measures. In all other cases, the processing is based on your consent (Article 6(1)(a) of the GDPR) and/or our legitimate interests (Article 6(1)(f) of the GDPR) in efficiently handling the inquiries directed to us.

The data you provide us through contact inquiries will remain with us until you request deletion, revoke your consent for storage, or the purpose for data storage ceases to exist (e.g., after completing the processing of your request). Mandatory legal provisions – especially retention periods – remain unaffected.

8. Applications

We offer you the opportunity to apply with us (e.g., via email or by postal mail).

In the following, we will inform you about the scope, purpose, and use of the personal data collected as part of the application process.

We assure you that the collection, processing, and use of your data will be in accordance with applicable data protection laws and all other legal provisions, and your data will be treated strictly confidential.

8.1 Scope and Purpose of Data Collection

When you submit an application to us, we process the associated personal data (e.g., contact and communication details, application documents, notes from job interviews, etc.) to the extent necessary for the decision on establishing an employment relationship.

The legal basis for this is Art. 6(1)(b) of the General Data Protection Regulation (GDPR).

Your personal data will only be disclosed within our company to persons involved in the processing of your application.

8.2 Storage Period of Applicant Data

If we are unable to offer you a job, you decline a job offer, or you withdraw your application, we reserve the right to retain the data you have provided to us based on our legitimate interests (Art. 6(1)(f) of the General Data Protection Regulation (GDPR)) for up to 6 months from the end of the application process (rejection or withdrawal of the application). Afterward, the data will be deleted, and physical application documents will be destroyed.

The retention serves primarily for evidential purposes in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period (e.g., due to a pending legal dispute), deletion will only take place once the purpose for the further retention no longer applies.

9. Your Rights

To exercise your rights, you can contact us at any time using the contact details provided in the imprint and the section “Verantwortliche Stelle” (responsible entity).

9.1 Revocation of Your Consent to Data Processing (Art. 7 (3) GDPR)

Many data processing operations are only possible with your explicit consent. You can revoke a consent you have already given at any time. For this purpose, a simple notification to us via email is sufficient. The lawfulness of data processing carried out before the revocation remains unaffected by the revocation.

9.2 Right to Information, Correction, Blocking, Deletion (Art. 15-17 GDPR)

You have the right, within the scope of the applicable legal provisions, to obtain free-of-charge information (Art. 15 GDPR) about your stored personal data, its origin, recipients, and the purpose of data processing, as well as, if applicable, the right to correction, blocking, or deletion of this data (Art. 16, 17 GDPR).

9.3 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing of your personal data (Art. 18 GDPR). This right exists in the following cases:

  • If you contest the accuracy of your personal data stored by us, we usually require time to verify this. During the verification period, you have the right to request the restriction of processing of your personal data.
  • If the processing of your personal data was or is unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of processing of your personal data instead of deletion.
  • If you have objected to the processing of your personal data according to Art. 21(1) GDPR, a balance between your interests and ours must be carried out. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, except for storage, these data may only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

9.4 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the data that we process automatically based on your consent or for the performance of a contract, in a commonly used and machine-readable format, and have the right to transmit this data to yourself or to another controller (Art. 20 GDPR). If you request direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

9.5 Right to Object (Art. 21 GDPR)

If data processing is based on Art. 6 (1) lit. e or f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. The specific legal basis on which the processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR). Profiling does not take place.

9.6 Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy, especially in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).