← Back to Home

Privacy Policy

I. Controller

This Privacy Policy applies to the processing of personal data by the controller:

JobNexxt GmbH
Untermainkai 40
60329 Frankfurt am Main
Germany

VAT identification number: DE313042978
Frankfurt am Main Local Court, HRB 132001

Data protection officer: Tilo Ferrari (tilo.ferrari(a)jobnexxt.com)
Please send data protection enquiries to datenschutz@jobnexxt.com.

II. General information on data processing

1. Scope

We collect and process your personal data on our website where this is necessary to provide a functional service offered by us.

2. Legal bases

We process personal data only where a legal basis under Article 6(1) GDPR applies:

  • consent, Article 6(1)(a) GDPR;
  • performance of a contract or steps prior to entering into a contract, Article 6(1)(b) GDPR;
  • compliance with a legal obligation, Article 6(1)(c) GDPR;
  • legitimate interests, Article 6(1)(f) GDPR, provided that your interests or fundamental rights do not override those interests.
3. Retention period

We retain personal data only as long as necessary for the respective processing purpose. Once the purpose no longer applies, the data are deleted or anonymised unless statutory retention periods prevent this.

4. External links

Our website contains links to external third-party websites. When you follow a link, you leave our website. The respective provider is responsible for processing personal data on the linked site and its privacy policy applies. The provider may process technical data, including your IP address and browser, display and language settings.

5. Cookies

We use cookies and comparable technologies, such as tracking pixels and local storage. Session cookies are deleted when you leave our website; persistent cookies enable your browser to be recognised on a later visit.

On your first visit, a cookie banner lets you accept all cookies, allow only necessary cookies or make individual choices. You may withdraw or adjust your consent at any time with future effect through the cookie-banner settings.

Cookies are used in particular for website operation and security, audience measurement and web analytics, marketing and conversion tracking, and improving our online services.

III. Data processing

1. Website

When you access our website, your browser automatically sends information that is temporarily stored in server log files: IP address, date and time of access, name and URL of the retrieved file, referrer URL, browser, operating system and access provider. The legal basis is Article 6(1)(f) GDPR.

We process these data to establish a connection, enable convenient use of the website, ensure system security and stability, compile statistics, conduct clickstream analysis to optimise navigation and for administrative purposes. Data are retained only for as long as necessary for the placement process and statutory retention obligations. You may request erasure where no legal periods or legitimate grounds prevent it.

2. Placement in care facilities and cooperation with care providers

We refer enquiries from people in need of care and their relatives to suitable care facilities and hospitals. For this purpose, we process first and last name, contact details, information about the desired form of care and care needs, preferred admission date, and other information voluntarily provided that is necessary for placement. Where necessary, these data are shared with suitable care facilities or hospitals.

Processing is based on Article 6(1)(b) GDPR. Where special categories of personal data, especially health data, are processed, this is done solely on the basis of explicit consent under Article 9(2)(a) GDPR.

The processing serves to arrange suitable care places, contact care facilities and carry out the placement process. Data are retained only as long as necessary for these purposes and statutory retention obligations. Consent may be withdrawn at any time with future effect; this may limit or prevent further placement.

3. Contacting us

When you contact us by email or through the contact form, we process your salutation, first and last name, message content, email address and, where provided, telephone number and address. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. Processing depends on your enquiry and normally ends when it has been finally handled, unless statutory retention obligations apply.

You may object at any time to processing connected with your enquiry. In that case, we can no longer process your enquiry; stored data will be deleted unless statutory obligations prevent it.

4. Tools
4.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. It analyses visitor origin, time spent on pages and use of our website. This may involve user activity, device and browser information, IP address, operating system, advertising data and pseudonymous user IDs. Cookie-generated data may be transferred to Google servers in the United States. When IP anonymisation is active, the IP address is generally shortened within the EU or EEA first.

The legal basis is your consent under Article 6(1)(a) GDPR. Processing is used to analyse and improve our online services. According to Google, portions of IP addresses and cookie information in server logs are anonymised after 9 or 18 months. You can withdraw consent at any time, disable third-party cookies or install the Google Analytics opt-out add-on. More information: Google Privacy Policy.

4.2 HubSpot

We use functions provided by HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA, for email marketing, social-media publishing and reporting, general reporting, contact management and CRM, landing pages, advertising audiences and contact forms. The processing may include contact and communication data, usage data, device and browser information, and interaction data relating to emails or forms. HubSpot uses cookies and similar technologies.

The legal basis is your consent under Article 6(1)(a) GDPR. Processing serves to manage contact enquiries, carry out marketing and communication measures, analyse website use and optimise sales and communication processes. Transfers to the USA may take place under standard contractual clauses pursuant to Article 46 GDPR and, where applicable, the EU-U.S. Data Privacy Framework. Data are retained only as long as necessary for these purposes. You can withdraw consent at any time. More information: HubSpot Privacy Policy.

4.3 Cooperation with Jobnexxt GmbH

As part of personnel and employment placement, we cooperate with Jobnexxt GmbH. Mr Tilo Ferrari is responsible for data processing at Jobnexxt GmbH. If you submit an enquiry or application documents through our website, we process your name, contact details, professional qualifications and other information necessary for the placement process. Where necessary, those data may be transferred to Jobnexxt GmbH, which processes them under its own responsibility.

The legal bases are Article 6(1)(b) GDPR for pre-contractual measures and contract performance, and Article 6(1)(f) GDPR for our legitimate interest in efficiently organising placement processes. Processing serves to handle your enquiry and conduct application, placement and employment processes in the care sector. Data are retained only as long as necessary for these purposes and statutory retention obligations. You may object at any time with future effect to processing based on legitimate interests.

4.4 Stripe

For payment processing, we use Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe receives in particular name, address, email address, payment and transaction data, billing information and data needed to execute and verify payment. Stripe processes these data for payment execution, fraud prevention, identity verification, legal obligations and provision of payment services. Data may be transferred to Stripe affiliates, payment networks, banks, other payment-service providers and the United States.

The legal bases are Article 6(1)(b) GDPR and, for legal obligations, Article 6(1)(c) GDPR. Data are retained only as long as necessary for payment processing, statutory retention duties or the assertion or defence of legal claims. More information: Stripe Privacy Center.

4.5 Google Maps

We use Google Maps, provided by Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland, to display interactive maps and care facilities near you. This may process your IP address, location data where enabled, device and browser information, usage data and other technical data, which may be transferred to Google servers, including in the United States.

Google Maps is loaded solely with your consent under Article 6(1)(a) GDPR and Section 25(1) TTDSG. You can withdraw consent at any time through our consent-management tool or your browser settings; map functionality may then be limited. More information: Google Privacy Policy.

IV. Data processing outside our website

1. Social media: LinkedIn

We operate a company page on LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Personal data are processed when you visit the page or interact with its content. For certain processing operations, particularly Page Insights, we and LinkedIn are joint controllers within the meaning of Article 26 GDPR. The joint-controller arrangement is available at LinkedIn Joint Controller Addendum.

If you contact us directly, we use the data you provide only to handle and answer your enquiry. LinkedIn also provides aggregated, anonymised statistics about reach, interactions and demographics. Processing is based on our legitimate interest under Article 6(1)(f) GDPR to analyse and optimise our content. You may object at any time with future effect. More information: LinkedIn Privacy Policy.

V. Your rights

You have the following rights:

  1. access to your personal data, Article 15 GDPR;
  2. rectification of inaccurate or incomplete data, Article 16 GDPR;
  3. withdrawal of consent with future effect, Article 7(3) GDPR;
  4. erasure where statutory requirements are met, Article 17 GDPR;
  5. restriction of processing, Article 18 GDPR;
  6. data portability in a common machine-readable and structured format, Article 20 GDPR;
  7. objection to processing under Article 6(1)(e) or (f) GDPR, including direct marketing, Article 21 GDPR;
  8. lodging a complaint with a competent data protection supervisory authority, Article 77 GDPR. Information on German supervisory authorities: BfDI.