Privacy policy

Privacy Policy

Thank you for visiting our website https://www.hpm-healthcare.com/ and for your interest in our company. The protection of your personal data is important to us. In accordance with the requirements of the EU General Data Protection Regulation (GDPR), we inform you below about the type, scope and purpose of the processing of personal data within our online offering.

Person Responsible

HPM Healthcare Recruiters L.L.C-FZ
Meydan Grandstand, 6th Floor
Meydan Road, Nad Al Sheba
Dubai, United Arab Emirates
Email: careers@hpm-healthcare.com

Provision of the Website and Creation of Log Files

Each time our website is accessed, our system automatically collects data and information from the device accessing it (e.g. computer, cell phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

  1. Information about the browser type and version used;
  2. The operating system of the accessing device;
  3. Host name of the accessing computer;
  4. The IP address of the accessing device;
  5. Date and time of access;
  6. Websites and resources (images, files, other page content) that were accessed on our website;
  7. Websites from which the user’s system came to our website (referrer tracking);
  8. Notification of whether the retrieval was successful;
  9. Amount of data transferred.

These data are stored in the log files of our system. They are not stored together with personal data of any specific user, so identification of individual website visitors does not occur.

Legal Basis for the Processing of Personal Data

Art. 6 (1)(f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the purposes described below.

Purpose of Data Processing

The temporary (automated) storage of the data is necessary for the operation of a website visit to enable delivery of the website. In addition, the storage and processing of personal data serves to maintain compatibility of our website for as many visitors as possible and to combat abuse and troubleshoot. To this end, it is necessary to log the technical data of the requesting computer so that we can respond as early as possible to display errors, attacks on our IT systems, and/or malfunctions of our website’s functionality. Furthermore, the data help us optimize the website and generally ensure the security of our information technology systems.

Duration of Storage

The deletion of the aforementioned technical data takes place as soon as it is no longer required to ensure compatibility of the website for all visitors, but at the latest 3 months after access to our website.

Right to Object and Deletion

You may object to the processing at any time pursuant to Art. 21 GDPR and request deletion of data pursuant to Art. 17 GDPR. You can find which rights you are entitled to and how to exercise them at the bottom of this privacy policy.

Special Features of the Website

Our website offers various features during the use of which we collect, process, and store personal data. We explain below what happens to this data:

Application Form

  • Which personal data is collected and to what extent is it processed?
    The data you enter into the form fields of the application form and any data you upload are processed to fulfill the purpose stated below.
  • Legal basis for the processing of personal data
    Art. 6 (1)(b) GDPR (performance of pre-contractual or contractual measures)
  • Purpose of data processing
    Examination and processing of the application documents you uploaded via the form.
  • Duration of storage
    The deletion of the data occurs as soon as the application has been processed and no legitimate interest in retaining the application data remains. Therefore, if no employment relationship is established, your application documents will be deleted after no more than 6 months.
  • Right to object and deletion
    You may object to the processing at any time pursuant to Art. 21 GDPR and request deletion of data pursuant to Art. 17 GDPR. You can find which rights you are entitled to and how to exercise them at the bottom of this privacy policy.
  • Necessity of providing personal data
    The information in the application form is neither contractually nor legally required, but is necessary to submit and process the application. If you do not fill out the mandatory fields or do not complete them in full, the application cannot be sent or processed.

Contact Form(s)

  • Which personal data is collected and to what extent is it processed?
    The data you enter into our contact forms.
  • Legal basis for the processing of personal data
    Art. 6 (1)(a) GDPR (consent by a clear affirmative action)
  • Purpose of data processing
    The data collected via our contact form(s) will be used only to process the specific contact request submitted through the contact form. Please note that to fulfill your request, we may send confirmation emails to the address you provided, although this is not mandatory and serves only for your information.
  • Duration of storage
    After processing your request, the collected data will be deleted immediately, provided there are no statutory retention periods.
  • Right to withdraw consent and deletion
    The right to withdraw consent and to deletion is governed by the general provisions described later in this privacy policy.
  • Necessity of providing personal data
    The use of the contact forms is voluntary. You may also use other contact options provided on our site. If you choose to use the contact form, you must fill in the fields marked as mandatory; otherwise, the request cannot be submitted or processed.

Statistical Analysis of Visits to This Website – Web Tracker

When this website or individual files of the website are accessed, we collect, process, and store the following data: IP address, referring website, file name, date and time of access, amount of data transferred, and retrieval status (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our online offering and for statistical purposes. In addition, we use the following web trackers to analyze visits to this website:

Integration of External Web Services and Processing of Data Outside the EU

On our website, we use active content from external providers (web services). When you access our site, these providers may receive personal information about your visit. Processing of data outside the EU may occur. You can prevent this by installing a suitable browser plugin or disabling scripts in your browser, which may result in functional restrictions on some websites.

Information on the Use of Cookies

Extent of Processing of Personal Data

On various pages, we integrate and use cookies to enable certain functions of our website and to integrate external web services. Cookies are small text files that your browser can store on your device. They contain a characteristic string that uniquely identifies the browser when you return to our website. Cookies can be set by our site or by external web services.

Legal Basis for the Processing of Personal Data

Art. 6 (1)(f) GDPR (legitimate interest) or Art. 6 (1)(a) / Art. 9 (1)(a) GDPR (consent). Which legal basis applies is set out in the cookie table below in this section.

For cookies collected on the basis of legitimate interest, our interest is to ensure the functionality of our site and integrated services (technically necessary cookies) and, where applicable, to enhance user-friendliness and personalization. We have balanced your interests against ours accordingly.

We can only identify, analyze, and track individual visitors using cookie technology if you have given consent under Art. 6 (1)(a) GDPR.

Purpose of Data Processing

Cookies are set by our website or external web services to maintain full functionality, improve user-friendliness, or pursue the purpose specified with your consent. They also allow us to recognize visitors by pseudonyms (e.g., individual or random IDs) so that we can offer more individualized services. Details are provided in the table below.

Right to Object, Withdrawal of Consent, and Deletion

You can configure your browser to block cookies. You may then decide on a case-by-case basis whether to accept cookies. Cookies can, for example, indicate that your device is connected to our site (persistent cookies) or store recently viewed offers (session cookies). If you have given consent for processing your personal data, you can withdraw it at any time. The lawfulness of processing carried out before withdrawal is not affected.

Data Security and Data Protection, Communication by E-Mail

Your personal data is protected during collection, storage, and processing by technical and organizational measures so that it is not accessible to third parties. In the case of unencrypted e-mail communication, we cannot guarantee complete data security; for highly confidential information, we recommend encrypted communication or postal mail.

Right to Information and Requests for Correction – Deletion & Restriction of Data – Withdrawal of Consent – Right to Object

Right to Information

You have the right to request confirmation of whether we are processing personal data about you. If so, you have the right to obtain information on the data specified in Art. 15 (1) GDPR, insofar as the rights and freedoms of others are not affected (Art. 15 (4) GDPR). We will gladly provide you with a copy of the data.

Right to Rectification

Pursuant to Art. 16 GDPR, you have the right to have any incorrectly stored personal data (e.g., address, name) corrected at any time. You may also request completion of the data. Any adjustment will be made without delay.

Right to Erasure

Pursuant to Art. 17 (1) GDPR, you have the right to have us delete personal data concerning you if:

  • the data are no longer necessary;
  • the legal basis for processing has lapsed due to withdrawal of consent;
  • you have objected to processing and there are no overriding legitimate grounds;
  • the data have been unlawfully processed;
  • deletion is required by law or processing was pursuant to Art. 8 (1) GDPR.

This right does not apply if processing is necessary for:

  • exercising the right to freedom of expression and information;
  • compliance with a legal obligation;
  • reasons of public interest;
  • the establishment, exercise, or defense of legal claims.

Right to Restriction of Processing

Pursuant to Art. 18 (1) GDPR, you have the right in certain cases to request restriction of processing of your personal data when:

  • the accuracy of the data is contested by you;
  • processing is unlawful and you oppose erasure;
  • the data are no longer needed for processing but are required by you for legal claims;
  • you have objected to processing under Art. 21 (1) GDPR and it is unclear which interests prevail.

Right to Withdraw

If you have given explicit consent under Art. 6 (1)(a) or Art. 9 (2)(a) GDPR, you may withdraw it at any time. The lawfulness of processing carried out on the basis of consent before withdrawal remains unaffected.

Right to Object

Under Art. 21 GDPR, you have the right to object at any time to processing of personal data concerning you which is based on Art. 6 (1)(f) GDPR (legitimate interests). This right applies only if there are particular circumstances giving grounds for objection.

How to Exercise Your Rights

You can exercise your rights at any time by contacting:

HPM Healthcare Recruiters L.L.C-FZ
Meydan Grandstand, 6th Floor
Meydan Road, Nad Al Sheba
Dubai, United Arab Emirates
Email: careers@hpm-healthcare.com

Right to Data Portability

Under Art. 20 GDPR, you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format. You may choose to have the data transmitted to yourself or to a controller designated by you.

On request pursuant to Art. 20 (1) GDPR, we will provide:

  • data collected on the basis of explicit consent under Art. 6 (1)(a) or Art. 9 (2)(a) GDPR;
  • data received from you in the context of existing contracts under Art. 6 (1)(b) GDPR;
  • data processed in an automated procedure.

We will transmit personal data directly to a controller designated by you, to the extent technically feasible. Please note that we cannot transmit data that infringes the rights of others under Art. 20 (4) GDPR.

Right to Lodge a Complaint with a Supervisory Authority Pursuant to Art. 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our site, you may seek judicial clarification at any time and pursue all available legal remedies. Independently, under Art. 77 (1) GDPR, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. The supervisory authority will inform you of the status and outcome of your complaint, including the possibility of a judicial remedy under Art. 78 GDPR.