Privacy policy

Last updated: October 2026

1. Controller

The controller responsible for data processing on this website and in the candidate portal is:

Ledi Tauchmann, MEDICJOBLINE
Hennener Bahnhofstraße 52, 58640 Iserlohn, Germany
Phone: +49 (0)2304 910 869 3
Email: info@medicjobline.com

For any data protection questions please contact us at info@medicjobline.com.

2. Overview

We only process personal data where this is necessary to run this website, to place professionals, to support them in the candidate portal and to handle enquiries. We do not sell data, do not use advertising or tracking cookies and do not make automated decisions within the meaning of Art. 22 GDPR – people decide on every placement.

3. Hosting and delivery of the website

This website and the candidate portal are operated on Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit it, Cloudflare processes technically necessary data such as your IP address, date and time, the page requested, browser type and operating system in order to deliver the site and protect it against attacks. Technical error logs are kept for no more than seven days. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR).

We store application data and uploaded documents in Cloudflare databases and storage restricted to data centres in the European Union. We have a data processing agreement with Cloudflare. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

4. Cookies and local storage

We only use technically necessary cookies:
- "lang": stores your chosen language (kept for 1 year)
- Login cookie: keeps you signed in to the candidate portal or admin area (kept for up to 14 days)

These cookies are strictly necessary for the functions you request (§ 25 (2) no. 2 TDDDG). No consent is required for them.

5. Spam protection (Cloudflare Turnstile)

We protect our forms and the login with Cloudflare Turnstile. Technical characteristics of your browser and your IP address are checked to detect automated access. The legal basis is our legitimate interest in preventing abuse (Art. 6 (1) (f) GDPR).

6. Visitor statistics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics to understand which pages are visited. The service does not set cookies or create user profiles; data is evaluated in aggregate form. The legal basis is Art. 6 (1) (f) GDPR.

7. Applying through the website

If you apply through our quick application, we process the details from the form (name, country, profession, specialty, work experience, German skills, email address, phone number, WhatsApp preference, message) and the documents you upload.

The purpose is placement in a job in Germany and support with recognition, language course, visa, housing and integration. The legal bases are your consent (Art. 6 (1) (a) GDPR) and pre-contractual measures taken at your request (Art. 6 (1) (b) GDPR). Providing your details is voluntary; without them, however, we cannot place you.

8. Candidate portal

In the candidate portal we additionally process:
- your account (email address, language) and sign-in with a one-time code; codes are only stored hashed and for no more than ten minutes
- your progress (stage), documents with review status and expiry date, tasks, appointments, language course, the arrival checklist and messages with our team
- automatic email reminders (for example one day before an appointment, for tasks that are due and before a document expires)
- your IP address for a short time to prevent too many sign-in attempts

The legal basis is providing our support at your request (Art. 6 (1) (b) GDPR). Every access to your documents is logged to protect your data (Art. 32 GDPR, Art. 6 (1) (f) GDPR); these logs are deleted after two years.

So that we can support you quickly and in your language, we use the following automatic functions:
- Messages between you and our team are translated automatically (German and your language). The translation is created by an AI language model operated by Cloudflare (Workers AI), which also runs this website. We store it together with the message; the original always remains visible.
- Our team can ask this AI model to suggest a draft reply. Every reply is read and sent by a person.
- New applications are automatically assigned a fixed contact person who speaks your language.
- If documents are still missing after a few days, we remind you by email once a week during the first weeks. When you reach a new stage, we let you know by email.
- If a new job matches your profession and specialty, we let you know by email. You can switch this off at any time in the portal under "Profile".
- For requests from hospitals the system suggests suitable candidates to our team (by profession, specialty, German level, experience and reviewed documents). This is only a suggestion: a person always decides whether your profile is presented to a hospital – and only with your consent.
- After you start work we briefly ask how you are getting on after 7, 30, 90 and 180 days. Answering is voluntary. Your hospital is also asked how satisfied it is; only we see this feedback.

The legal basis is providing our support (Art. 6 (1) (b) GDPR) and our legitimate interest in fast and good support (Art. 6 (1) (f) GDPR).

9. Particularly sensitive data

We only process health information (for example a medical certificate of fitness) if you have given explicit consent when uploading it (Art. 9 (2) (a) GDPR). You can withdraw this consent at any time. Documents are never publicly accessible and are only made available through short-lived, signed links after an authorisation check.

10. Recipients of your data

We only pass on your data where this is necessary for your placement and support:
- to hospitals and facilities – only with your separate consent to profile sharing; the profile does not contain your contact details
- at your request to the authorities responsible for your recognition, to language course providers, to visa and residence authorities and to landlords

Technical service providers (Cloudflare, IONOS) only process data on our behalf.

11. Storage period

We automatically delete application data of people we are not (yet) actively supporting six months after our last contact, unless you have agreed to longer storage. If we are actively supporting you or you have been placed, we keep your data for as long as the support and follow-up care continue and delete it afterwards, unless statutory retention obligations apply. We will delete your account and data at any time on request.

12. Staffing requests from hospitals

When a staffing request is submitted, we process the details from the form to handle the request and prepare a cooperation (Art. 6 (1) (b) GDPR). The data is deleted once it is no longer needed for this purpose and no statutory retention obligations apply.

13. Emails

We send confirmations, login codes, reminders and notifications from our mailbox info@medicjobline.com, which is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have a data processing agreement with IONOS.

14. Contact by phone, email or WhatsApp

If you contact us, we process your details to answer your enquiry (Art. 6 (1) (b) or (f) GDPR).

WhatsApp is a service of WhatsApp Ireland Limited (Meta). If you message us on WhatsApp, Meta also processes data, possibly in the USA. Using WhatsApp is voluntary – you can always reach us by phone or email instead.

15. Chat assistant

On our website and in the portal you can ask questions to a chat assistant. The answers are generated by an AI language model operated by Cloudflare (Workers AI) – the same provider that runs this website. Your questions are only processed to answer them and are not stored by us. If you are signed in to the portal, the assistant also receives your own progress data (for example your stage, missing documents and open tasks) so it can answer questions like "What is my next step?" – never data about other people. Please do not enter passport numbers or health data in the chat. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR for signed-in users. Answers may contain mistakes and do not replace legal or visa advice.

16. Map (OpenStreetMap)

On the contact page you can load a map from OpenStreetMap. Only when you click "Load map" is a connection made to servers of the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) and your IP address transmitted. The legal basis is your consent (Art. 6 (1) (a) GDPR). The EU Commission has issued an adequacy decision for the United Kingdom.

17. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). In the candidate portal you can download your data yourself at any time. You can withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR) – in the portal under "Profile" or by email.

Right to object: where we process data on the basis of Art. 6 (1) (f) GDPR, you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

Simply email us at info@medicjobline.com. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

18. Data security

All data is transmitted encrypted (TLS). Access to the admin area is additionally secured with a second factor, and each team member only sees the data they need for their work.