Privacy Policy & Data Protection Framework

Last Updated & Legally Effective: February 26, 2026

1. Legal Definitions & Roles

For the purposes of this privacy framework, the following definitions apply:

• "Data Controller" / "Data Fiduciary": Refers to EuropeCareers, operating legally in both the Federal Republic of Germany and the Republic of India, responsible for determining the purpose and means of processing personal data.
• "Data Subject" / "Candidate": Refers to you, the individual utilizing our services for recruitment, Ausbildung, or visa assistance.
• "Special Category Data": Refers to highly sensitive information, including medical records or criminal background checks (PCC), required strictly for specific visa or employment categories.

2. Exhaustive Categorization of Data Collected

To facilitate complex international recruitment (specifically for Doctors, Nurses, Physiotherapists, and OT Assistants) and immigration pathways (like the Chancenkarte), we collect extensive data arrays:

• Biographical & Identity Data: Full legal name, date and place of birth, gender, nationality, marital status, and government-issued identifiers (Passport details, Aadhaar, PAN).
• Contact & Communication Data: Residential addresses, email addresses, active phone numbers, and a complete log of all correspondence (emails, chat logs, and recorded consultancy calls) between you and our staff.
• Academic & Professional Credentials: Comprehensive resumes (CVs), academic transcripts, university degrees, nursing/medical licenses, employment history, reference letters, and Defizitbescheid (recognition notices).
• Language & Assessment Data: Certifications from recognized institutions (Goethe-Institut, TELC, ÖSD), internal interview assessments, and psychometric/language test results.
• Financial Data: Bank account details, transaction histories, and proof of funds (Sperrkonto / Blocked Account details) strictly required for visa processing and fee remittance.
• Special Category (Sensitive) Data: Medical fitness certificates, vaccination records (e.g., Measles, COVID-19, as mandated by German healthcare laws), and Police Clearance Certificates (PCC).
• Technical & Usage Data: IP addresses, browser types, time zone settings, device identifiers, and website navigation paths collected via tracking cookies.

3. Lawful Basis and Purpose of Processing

We do not process data arbitrarily. Every data point is tied to a specific legal ground under GDPR Article 6:

4. Third-Party Disclosures and Data Sharing

EuropeCareers does not sell, rent, or trade your personal data. However, to execute our services, data is shared with strictly vetted third parties on a "need-to-know" basis:

• Prospective Employers: Hospitals, clinics, care homes, and vocational institutions in Germany.
• Government & Diplomatic Entities: The German Embassy/Consulates in India, VFS Global, Ausländerbehörde (Foreigners' Authority), and the Academic Evaluation Center (APS India).
• Authorized Service Providers: Sworn translators, German notaries (Notar), and legal advisors facilitating the recognition (Anerkennung) process.
• IT & Cloud Infrastructure: Secure cloud storage providers and CRM systems used by our international teams.

5. Cross-Border Data Transfer Protocols

As a transnational entity, your data is routinely transferred from our Indian hubs to our German headquarters and partners. EuropeCareers guarantees that all data exported outside India to the European Economic Area (EEA) is protected by:

• Standard Contractual Clauses (SCCs): Legally binding agreements ensuring European-grade data protection standards are maintained by our Indian operations.
• Adequacy Decisions: Leveraging secure, encrypted channels that comply with the highest international cybersecurity frameworks.

6. Cookies and Tracking Technologies

Our website utilizes cookies to distinguish you from other users, providing a seamless browsing experience. We use:

• Strictly Necessary Cookies: Essential for website operation and secure logins.
• Analytical/Performance Cookies: Tools like Google Analytics to track visitor metrics anonymously.
• Note: You can configure your browser to refuse all or some browser cookies, but this may render parts of our website inaccessible.

7. Data Retention and Destruction Policy

We adhere to strict data minimization principles. Candidate data is retained under the following timelines:

• Successful Placements: Kept for up to 10 years to comply with German commercial and tax laws (HGB and AO).
• Active Talent Pool: Retained for 24 months for unmatched candidates actively seeking opportunities, subject to consent renewal.
• Rejected/Withdrawn Applications: Securely purged within 6 months of final communication, unless legally required to retain for dispute resolution.

8. Data Breach Management Protocol

In the unlikely event of a data breach compromising your personal data, EuropeCareers has a robust incident response plan. We are legally mandated to notify the relevant supervisory authorities (in Germany and India) within 72 hours of becoming aware of the breach, and will notify affected Data Subjects immediately if the breach poses a high risk to their rights and freedoms.

9. Comprehensive Data Subject Rights

Under the GDPR and DPDP Act, you possess powerful rights regarding your personal information:

• Right to Access: You may request a comprehensive digital copy of all data we hold regarding your profile.
• Right to Rectification: You may demand the immediate correction of inaccurate or outdated credentials.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your data, provided there are no overriding legal obligations (e.g., ongoing visa applications or unpaid invoices).
• Right to Restrict Processing: You may ask us to suspend the processing of your data while its accuracy is being contested.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: You may revoke your consent at any time without detriment, halting all future profile submissions to German employers.

10. Automated Decision-Making and Profiling

EuropeCareers does not rely solely on automated decision-making (including AI profiling) that produces legal or similarly significant effects. All candidate evaluations, CV shortlisting, and employer matching are conducted by human recruitment specialists.

11. Contact Details & Data Protection Officer (DPO)

To exercise your rights, report a grievance, or ask questions about this Master Privacy Policy, please contact our appointed Data Protection Officer, Shubham Singh. We commit to responding to all legitimate data requests within 30 days.