Privacy Policy
This is an informational translation. The German version is legally binding.
1. Data controller
The controller responsible for data processing on this website is:
Heinz Personnel Solutions GmbH, Am Eichenhain 32, 13465 Berlin, Germany
Email: info@hpstalent.de
2. General information on data processing
We generally only process personal data of our users to the extent necessary to provide a functioning website and our content and services. Processing regularly takes place only with the consent of the person concerned (Art. 6(1)(a) GDPR), to perform a contract or pre-contractual measures (Art. 6(1)(b) GDPR), or on the basis of our legitimate interest in providing our offering securely, functionally and economically (Art. 6(1)(f) GDPR).
3. Server log files
When you visit our website, our hosting provider automatically collects information in what are known as server log files, which your browser automatically transmits to us, such as browser type, operating system, referrer URL, time of the server request, and a shortened IP address. This data is used solely to ensure smooth operation and the security of our systems (Art. 6(1)(f) GDPR) and is not combined with other data sources.
4. Contact form, complaints form & appointment booking
If you send us inquiries via the contact form, the complaints form, or the appointment booking tool, we process the data you provide there (e.g. name, email address, message text) to handle your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract, or otherwise our legitimate interest in processing incoming inquiries (Art. 6(1)(f) GDPR). Your data will be deleted as soon as it is no longer required for processing, without prejudice to statutory retention obligations.
5. Applications via Ankaadia
For applications from nursing professionals, we use the platform of our partner Ankaadia GmbH. If you apply via the application link on our website, you leave our site and enter your data directly into Ankaadia's system. Processing there is governed by Ankaadia's own privacy policy.
6. Cookies, consent, Google Analytics and Google Ads
On your first visit, a consent banner asks which technologies we may use. You can choose “Accept all” or “Necessary cookies only”, or set the categories “Statistics” and “Marketing” individually under “Settings”. You can change or withdraw your choice at any time with effect for the future via “Cookie settings” (bottom left on every page and in the footer).
Necessary: We store your choice in your browser's local storage (localStorage) so that the notice does not reappear on every page. No cookies are set for this and no data is passed to third parties. This access is strictly necessary for the service you requested (Section 25(2) no. 2 TDDDG). The legal basis for processing is Art. 6(1)(c) and (f) GDPR; our legitimate interest is respecting your decision and being able to demonstrate it. After 12 months we ask again.
Google Analytics (only with your consent, category “Statistics”): The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Analytics 4 to understand how our website is used, for example which pages are visited, for how long, and how visitors find us. This helps us improve the website. For this, Google sets cookies (e.g. “_ga”) stored for up to 2 years and processes data such as browser and device information, approximate region, pages viewed and time spent. Google Analytics 4 does not store IP addresses. Google Signals and personalised advertising are disabled. The Google tag only loads after you have given consent; without consent, no data is sent to Google. The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. How long Google keeps the analytics data depends on the retention period set in our account.
Google Ads conversion tracking (only with your consent): The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use it to measure whether visitors contact us after clicking one of our Google ads. For this, Google sets cookies (e.g. “_gcl_au”) stored for up to 90 days and processes data such as your IP address, browser and device information, the time of your visit, the pages viewed and the ad click. We only receive aggregated reports from Google that do not allow us to identify you personally. We do not use personalised advertising (remarketing). The Google tag only loads after you have given consent (Google Consent Mode, basic mode); without consent, no data is sent to Google. The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
Data may be transferred to Google LLC in the USA. An adequacy decision of the European Commission exists for the USA (EU-US Data Privacy Framework), under which Google LLC is certified. Further information: policies.google.com/privacy and business.safety.google/adsprocessorterms.
7. Third-party services used
Depending on consent and the technical setup in place, the following third-party services may be used on this website. Data is only transmitted to the extent necessary for the respective service:
Google (including Google Analytics, Google Maps, Google Fonts): Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may process data on servers in the USA. Further information: policies.google.com/privacy.
Meta / Facebook: We operate a company page on Facebook and may embed social plugins. Provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Further information: facebook.com/privacy/policy.
HubSpot: For marketing and customer communication, the platform of HubSpot Ireland Limited, One Sir John Rogerson's Quay, Dublin 2, Ireland, may be used, for example for forms and newsletter distribution.
Vimeo: To embed video content, the service of Vimeo.com, Inc., New York, USA, may be used. Playing a video may establish a connection to Vimeo's servers.
AI-assisted tools (e.g. Claude by Anthropic): We use AI-assisted tools to support internal workflows, such as text and content creation. AI tools do not currently have direct access to personal visitor data from this website.
Ankaadia: see item 5.
8. Storage period
We store personal data only for as long as necessary for the respective processing purpose, or for as long as statutory retention obligations apply, for example under the German Commercial Code or Fiscal Code.
9. Your rights as a data subject
You have the right at any time to request information about the data we hold about you, to have it corrected, deleted or its processing restricted, to object to processing, and to data portability. You may withdraw any consent already given at any time with effect for the future. Simply contact info@hpstalent.de.
10. Right to lodge a complaint with a supervisory authority
You also have the right to lodge a complaint with a data protection supervisory authority. As our company is based in Berlin, the competent authority is:
Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte fuer Datenschutz und Informationsfreiheit)
Alt-Moabit 59-61, 10555 Berlin, Germany
mailbox@datenschutz-berlin.de
11. Currency and changes to this privacy policy
This privacy policy is currently valid. As our website and offering evolve, or due to changes in legal requirements, it may become necessary to update this privacy policy.