Privacy Policy

Status: November 2025

1. Controller
Care EU GmbH iG
Leonhardstraße 61
8010 Graz
Austria
E-Mail: office@care-eu.at

2. Purpose of Data Processing
We process personal data for the purpose of brokering care and nursing staff as well as for carrying out pre-contractual and contractual measures. This includes contact information, professional qualifications, application documents, and technical data when visiting our website.
The legal basis for processing is Art. 6 para. 1 lit. b GDPR (contract/initiation of a contract), lit. f GDPR (legitimate interests) and, if applicable, Art. 6 para. 1 lit. a GDPR (consent).

3. Data Collection on Our Website
When you visit our website, technical data such as IP address, browser type, operating system, referrer URL, and time of access are automatically processed. These are necessary to ensure the secure and fault-free operation of the website.

4. Cookies and Local Storage Technologies
We use technically necessary cookies and – after consent – statistics and marketing cookies. Details on the cookies used can be found in the cookie banner on our website. Use without cookies is generally possible but may be restricted.

5. Hosting
Our website is operated by a European hosting service provider. Personal data may be stored and processed within the scope of commissioned processing.

6. Contacting Us
Data that you transmit to us as part of a contact request will be used exclusively to process your request. The data will only be stored for as long as necessary or as required by law.

7. Disclosure of Data to Third Parties
Data will only be disclosed:
- if this is necessary for the brokering activity (Art. 6 para. 1 lit. b GDPR),
- based on consent,
- to fulfil legal obligations, or
- to protect legitimate interests (e.g., IT service providers).

8. Transfer to Third Countries
Should data be transferred to a third country (e.g., by external service providers), this will only take place in accordance with the provisions of Art. 44–49 GDPR and – if applicable – on the basis of the EU-US Data Privacy Framework.

9. Storage Duration
Personal data will be stored for as long as is necessary to fulfil the brokering activity and according to statutory retention periods. Data from inquiries without subsequent contact will be deleted after three years at the latest.

10. Your Rights
Data subjects have the following rights:
- Right of access (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR),
- Right to erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR),
- Right to object (Art. 21 GDPR),
- Right to withdraw given consent (Art. 7 para. 3 GDPR),
- Right to lodge a complaint with the supervisory authority (Art. 77 GDPR).
Responsible Data Protection Authority:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Wien (Vienna)
E-Mail: dsb@dsb.gv.at

11. Changes to the Privacy Policy
We reserve the right to update this Privacy Policy as needed. The currently valid version can be found on our website.