Privacy policy

Status: September 2026

1. Controller

2. Hosting and server log files

This is a static website without user accounts. It is operated on our behalf by our technical service provider and hosted by Amazon Web Services (AWS Amplify Hosting, Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg) in the eu-central-1 region (Frankfurt am Main, Germany), which is the hosting data centre location. Processing is based on data processing agreements pursuant to Art. 28 GDPR.

The website is delivered via the globally distributed AWS content delivery network (Amazon CloudFront). Your request is answered by the server location closest to you, which means your IP address may also be processed outside the European Union. Where data is transferred to a third country in this context, this takes place on the basis of the European Commission's standard contractual clauses pursuant to Art. 46 (2) (c) GDPR.

When you access the website, your browser automatically transmits the following data, which is stored in server log files: IP address, date and time of access, name and URL of the file retrieved, referrer URL, browser and operating system used. Processing serves to provide, secure and stabilise the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and functioning operation). Log files are stored only for as long as necessary for these purposes.

3. No cookies, no tracking

This website does not set cookies, uses no analytics or tracking tools and does not embed third-party content (e.g. fonts, maps, videos). Fonts are served from our own server. Consent under Section 25 TDDDG is therefore not required.

4. Contact by e-mail, phone or form

The forms on this website do not transmit any data to our server. They merely open your own e-mail client with the details you entered; transmission takes place via e-mail from you. If you contact us by e-mail, phone or post, we process your details to handle the enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). Data is deleted once it is no longer required for that purpose and no statutory retention obligations apply.

5. Complaints procedure

Complaints and concerns received through the complaints channel are treated confidentially and documented. We process the data provided solely to handle the complaint and to fulfil our documentation obligations in the context of fair recruitment. The legal basis is Art. 6 (1) (f) GDPR and, where applicable, Art. 6 (1) (c) GDPR. Complaints may also be submitted anonymously. Complainants are not disadvantaged.

6. Candidate and employer registration (external platform)

The links “Register now” and “Share staffing needs” take you to the platform app.nurse-bridge.de, which IndoMedCare uses to manage recruitment procedures. The platform operator processes the data entered there on our behalf as a processor pursuant to Art. 28 GDPR; IndoMedCare GmbH remains the controller. For candidate data: we process your details to carry out the recruitment procedure (Art. 6 (1) (b) GDPR, Section 26 BDSG). Disclosure to employers, training providers, authorities, recognition bodies or diplomatic missions takes place only to the extent necessary and – where it concerns presenting you to a specific employer – only with your prior consent. The privacy notice applicable on the platform is shown to you there before registration.

7. Recipients and transfers to third countries

In the course of recruitment procedures we disclose data only to the extent necessary and legally permissible to employers, training providers, authorities, recognition bodies, diplomatic missions, language schools and carefully selected cooperation partners. Where partners in India are involved, transfers are based on appropriate safeguards pursuant to Art. 46 GDPR (EU standard contractual clauses) or – for your own application from India – on the performance of the contract with you (Art. 49 (1) (b) GDPR).

8. Your rights

• Access to the personal data we process about you (Art. 15 GDPR)
• Rectification of inaccurate or completion of incomplete data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Independent Centre for Data Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.

To exercise your rights, an e-mail to info@indomedcare.de is sufficient.

9. Data security

This website is delivered exclusively over an encrypted HTTPS connection. We apply technical and organisational measures to protect your data against loss, misuse and unauthorised access.

10. Changes

We update this privacy policy when the legal situation, our services or our data processing change. The version published on this page applies.