1. Data protection at a glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information can be found in the privacy policy below.

2. Data controller

The controller responsible for data processing on this website is:

GS Consulting (in formation)
Owner: Lébendé Guy André Sorgho
Max-Josef-Weg 3
69181 Leimen, Germany
Phone: +49 179 9454148
Email: info@gsconsulting-recruiting.de

3. Data collection on our website

How do we collect your data? Your data is collected when you provide it to us (entries in a contact or application form). Other data is collected automatically when you visit the site by our IT systems (e.g. IP address, browser type, time of access).

What do we use your data for? Part of the data serves to ensure error-free provision of the website. The main processing serves to prepare and carry out placements, recognition procedures and visa applications.

4. Forms and email transmission (direct-mail method)

When you send us enquiries via a contact or application form, your details, including contact data and uploaded documents (CV, certificates), are stored for processing and in case of follow-up questions.

Important note on third-party exclusion: We do not use any external form providers (such as Formspree or Netlify Forms) that cache your data on third-party servers. All form entries are forwarded directly, as an encrypted email, to our business mailbox (info@gsconsulting-recruiting.de). The legal basis is Art. 6(1)(b) GDPR and your consent under Art. 6(1)(a) GDPR.

5. Categories of data collected in the placement process

Candidate form: title, first name, last name, email address, country of origin, target field in Germany, qualifications/diplomas, professional experience, language skills, and uploaded files (CV, certificates).

Company form: company name, legal form, contact person, business contact details, location and detailed description of the staffing need.

6. Processing of special categories of data (Art. 9 GDPR)

In the context of placement in care and health professions, the processing of health data (e.g. vaccination status, medical fitness) may be necessary. This processing is based exclusively on your explicit, voluntary consent under Art. 9(2)(a) GDPR, which you give via a dedicated checkbox in the application form. You may withdraw this consent at any time with effect for the future.

7. Data transfer to third countries and to employers

(1) To fulfil our placement mandate, candidate data (profiles and CVs) is forwarded to potential employers (clinics, companies) in Germany.

(2) Insofar as necessary for handling placements, recognition of qualifications or visa applications in the country of origin, data may be transferred to countries outside the EU (third countries). These transfers are safeguarded by the EU Commission’s standard contractual clauses.

8. Retention period

The data you enter in forms remains with us until you request its deletion, withdraw your consent, or the purpose for storage ceases (e.g. after completed processing or termination of the placement procedure). Mandatory statutory retention periods — in particular under the AGG or tax regulations — remain unaffected.

9. Your rights as a data subject

Within the applicable legal provisions, you have at any time the right to:

• access to your stored personal data (Art. 15 GDPR);
• rectification of inaccurate data (Art. 16 GDPR);
• erasure of your data (“right to be forgotten”, Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• withdrawal of your consent with effect for the future (Art. 7(3) GDPR).

Simply write an informal email to info@gsconsulting-recruiting.de. You also have the right to lodge a complaint with the competent supervisory authority (the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg).

10. Hosting and IT infrastructure

This website is hosted by an external provider (Cloudflare / Netlify). The collection of server log files (IP address, date, time) is automated to ensure IT security and system stability, on the basis of our legitimate interest under Art. 6(1)(f) GDPR.

11. Cookies and local storage

This site uses no tracking cookies and no advertising or analytics trackers. Only technically necessary data is stored in your browser’s local storage (localStorage) — in particular the record of your acceptance of the cookie notice. This storage is permitted without consent under § 25(2) TDDDG, as it is strictly necessary for the operation of the site. No data is passed to third parties and no individual tracking takes place.