DATA PRIVACY POLICY

Bridge Now UG(Hamburg, Germany) (also referred to below as “Bridge Now”, “we” and “us”) would like to inform you how we process your personal data in connection with our services. You can access these services directly via bridge-now.de (the “website”).

Please contact our Data Protection Officer if you have any further questions about data protection relating to our website or the services offered there: contact@bridge-now.de

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG).

We process personal data to fulfil our contractual obligations under Art. 6(1)(1)(b) GDPR. This includes in particular:

• customer communications, such as sending latest information related to German Healthcare,  updates in legal provisions, new market trends etc.
• sending the future employer anonymised skillsets of the Talent and helping the talent make informed decisions by sending him/her information about the employer.
• recording and processing customer feedback and customer enquiries

We also process your data to safeguard our legitimate interests under Art. 6(1)(1)(f) GDPR

• so that we can send you relevant information about your chosen area of employment
• for marketing purposes, unless you have objected to the use of your data
• to prepare international healthcare statistics
• to prepare statistics in order to improve our services. In individual cases, we create customer profiles while processing the employment data. However, these profiles are immediately anonymised and are not used for analyzing or predicting personal preferences.
• to communicate with you, where an ongoing business relationship with you or your employer already exists, or where it is intended to initiate one (business contacts)
• to plan support services. 

We process your data on the basis of your consent under Article 6(1)(1)(a) GDPR for specific purposes, in particular:

• to send out the monthly newsletter 
• for you to receive targeted information and offers from Bridge Now and its partner companies
• for market research and customer surveys
• for personalised use of the website and personalised offers, including profiling
• to assist with processes related to the use of the website, with reminder functions and live chats
• for analytical purposes, to improve our offers to you.

We process your data based on our statutory obligations under Art. 6(1)(1)(c) GDPR.

When we are legally required to do so, we process personal data to fulfil our retention obligations under commercial and tax laws, or our statutory security and safety requirements. Please refer to the section “Duration of data processing” if you would like further information about these retention periods.

We have marked some fields as mandatory in the forms on our website, for which information is legally or contractually required. You must complete these fields so that we can provide you with the contract or service you wish. 

Where required the user is required to provide data in the form of CVs, Photos, Videos etc about their professional developments, which are used with the consent of the user to help in finding the right employer in healthcare sector in Germany.

Your personal data will be deleted as soon as it is no longer required for the stated purposes. However, we have to continue to store your data until the end of the retention periods and deadlines stipulated by the legislator or the supervisory authorities in the German Commercial Code, Tax Code and Money Laundering Act. These deadlines are generally between six and ten years. We may also retain your data until the expiry of the statutory limitation periods (generally three years, in individual cases up to 30 years) where required for the establishment, exercise or defence of legal claims. The relevant data will then be routinely erased. 

Within the context of the above-mentioned data processing and the various relevant legal bases (contract performance, legitimate interests, consent or statutory processing obligations), your data may be shared with the following categories of recipients:

• Bridge Now GmbH 
• vicarious agents, e.g. service providers for healthcare and other additional services in this context
• other service providers, e.g. for provision of the website, sending out newsletters, processing feedback and the preparation of international healthcare statistics
• government authorities and institutions, e.g. on the basis of entry regulations or police activities and investigations.

In such cases, personal data may be transferred to third countries or international organisations. Appropriate security measures will be taken for such data transfers to protect you and your personal data, in line with and in compliance with the statutory regulations.

We use EU standard contractual clauses if no legal basis exists for such transfers, or when they are made to a country for which the EU Commission has not issued an adequacy decision.

For information on EU standard contractual clauses, see the Commission Decision on standard contractual clauses for the transfer of personal data to commissioned processors in third countries.

Bridge Now is committed to fair and transparent data processing. It is therefore important to us that data subjects – providing the relevant legal requirements are met – are not only able to exercise their right to object, but also the rights listed below:

• right of access by the data subject, Art. 15 GDPR
• right of rectification, Art. 16 GDPR
• right to erasure (“right to be forgotten”), Art. 17 GDPR
• right to restriction of processing, Art. 18 GDPR
• right to data portability, Art. 20 GDPR
• right to object, Art. 21 GDPR

If you wish to exercise your rights, please send an email to ​contact@bridge-now.de
Please provide the following information, so that we can identify you:

• name
• postal address
• email address 

Please note that we will use your personal data in accordance with Article 6(1)(c) GDPR to process your request and for identification purposes.

You have the right under Art. 77 GDPR in conjunction with Section 19 BDSG to lodge a complaint with a supervisory authority. The relevant supervisory authority for Bridge Now is:

Commissioner for Data Protection and Freedom of Information of the State of Schleswig Holstein is:

Postfach 71 16
24171 Kiel
or
Holstenstraße 98
24103 Kiel

Telephon: 04 31/988-12 00
E-Mail: mail@datenschutzzentrum.de

We share your personal data with other affiliated companies within Bridge Now and GoDaddy, our official Web Hosting Partner, or with external companies, in order to process your enquiry via the chat assistant. We reserve the right to disclose information about you if required by law, or if we are required to do so by official authorities or the courts. 

If you have given your consent to receiving our newsletter in the newsletter area of our website (which continues to apply until you either withdraw your consent or Bridge Now stops sending the newsletter), we would like to draw your attention to the following:

Your consent is the legal basis for the processing.

Your consent refers to the processing of the following personal data that you have given us voluntarily:

• email address
• surname, first name, title, gender/salutation

The newsletter is sent to the email address you gave us based on your consent. The newsletter provides you with information on a wide range of topics related to Bridge Now and our partner companies.

To personalise our communication, we analyse your usage behaviour with each newsletter by means of cookies and similar technologies. This analysis includes for example which pages were opened, clicks, reading time and potential bookings.

The basis for the personalisation of the newsletter is the analysis of the following data:

• your interaction with the newsletter
• your master data that you provided voluntarily (area in healthcare, gender, etc.)
• your IP address
  

The following systems and technologies are used in our newsletter:

GoDaddy: the official supporter of our Website and the Data Processor. 

GoDaddy provides for the security compliant to the EU regulations of GDPR. More details on  Universal Terms of Service - Data Processing Addendum - GoDaddy UK