Data protection regulations
1. Data Controller
The entity responsible for processing personal data on this website and in connection with the services offered through this website is:
J&N PALABRAS UG (limited liability)
147 Bergheimer Street
69115 Heidelberg
Germany
Phone: [Insert phone number] Email: info@jnpalabras.com
Website: https://jnpalabras.com
Represented by the Managing Director: José J. Wiechens
2. General Information on Data Processing
The protection of your personal information is important to us.
We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and any other relevant data protection regulations.
Personal data is any information relating to an identified or identifiable natural person.
We process personal data, in particular, when you:
- visit our website,
- use our contact form,
- contact us by email or phone,
- register with us as a candidate or applicant, or apply,
- Submit your application materials,
- participate in a recruitment or selection process,
- participate in an online meeting,
- subscribe to our newsletter,
- or take advantage of our other services.
As a general rule, we process personal data only for specified, explicit, and legitimate purposes and only to the extent necessary for the respective purpose.
3. Legal Basis for Processing
The processing of personal data is based, in particular, on the following legal grounds:
Art. 6(1)(a) of the GDPR – Consent
Data processing is based on your consent if you have provided it to us for a specific purpose.
Consent that has been given may be revoked at any time, effective for the future.
The lawfulness of the processing carried out up to the time of revocation remains unaffected by this.
Art. 6(1)(b) GDPR – Contract and Precontractual Measures
Data is processed when necessary to fulfill a contract with you or to take steps prior to entering into a contract.
This applies in particular to:
- Consulting services,
- Recruiting and support services,
- Application processes,
- Scheduling appointments,
- organizational preparation,
- as well as any other services you have requested.
Art. 6(1)(c) of the GDPR – Legal Obligation
Processing may take place if we are required by law to process personal data.
Art. 6(1)(f) GDPR – Legitimate Interests
Data may be processed if it is necessary to safeguard our legitimate interests or the interests of a third party, provided that there are no overriding interests or fundamental rights of the data subject that preclude such processing.
Our legitimate interests may include, in particular, the secure and efficient conduct of our business operations, communication with prospective clients and business partners, the prevention of misuse, and the improvement of our services.
4. Website Visits and Server Log Files
When you visit our website, the server or hosting provider automatically processes information.
These may include, in particular:
- IP address,
- Date and time of access,
- page or URL accessed,
- previously visited website,
- Browser type and browser version,
- Operating system,
- device used,
- amount of data transferred,
- Status codes,
- as well as other technical information.
Data is processed in particular for the following purposes:
- technical operation of the website,
- Ensuring safety and stability,
- Detection and defense against attacks,
- Error analysis,
- as well as to prevent abuse and fraud.
The legal basis is Article 6(1)(f) of the GDPR.
Our legitimate interest consists, in particular, in providing a secure and functional website.
The log data will be deleted as soon as it is no longer needed for the stated purposes, provided that there are no legal retention requirements to the contrary.
5. Website Hosting
Our website is hosted by an external hosting provider.
As part of the hosting service, the hosting provider may process personal data, in particular technical connection data and server log data.
Data is processed to ensure the secure and reliable operation of our website.
The legal basis is Article 6(1)(f) of the GDPR.
To the extent that the hosting provider processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Article 28 of the GDPR.
Web hosting providers:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
68 Hauptstraße | D-02742 Friedersdorf
6. Contact via email, phone, or the contact form
If you contact us by email, phone, or through our contact form, we will process the personal data you provide.
These may include, in particular:
- Name,
- Email address,
- Phone number,
- Companies,
- Position/Title,
- Content of your message,
- as well as any other information you voluntarily provide to us.
Your personal data is processed to handle your inquiry and to carry out any pre-contractual or contractual measures that may result from it.
The legal basis is generally Article 6(1)(b) of the GDPR, provided that your request relates to the conclusion or performance of a contract.
In other cases, processing is based on Article 6(1)(f) of the GDPR.
The data you provide will be deleted as soon as the purpose for which it was processed no longer applies and there are no legal retention requirements that prevent this.
7. Contact Form
On our website, you can contact us using a contact form.
The required fields are necessary so that we can process your request.
The specific data that is collected is indicated by the respective input fields on the contact form.
Providing this information is voluntary. Without the required information, we may not be able to process your request.
We use the data submitted via the contact form solely to process your inquiry and for related communication purposes.
Information will only be disclosed to third parties if it is necessary to process your inquiry, required by law, or permitted on another valid legal basis.
8. Applications and Applicant Information
8.1 General Information
A key part of our work is helping international professionals—particularly those in the healthcare field—find career opportunities in Germany.
If you register with us as a candidate or applicant, submit an application, or send us your application materials, we will process your personal data to carry out the recruiting and application process.
These may include, in particular:
- First and last name,
- Contact information,
- Date of birth,
- Nationality,
- Residence and residency information,
- Resume,
- Evidence of education and qualifications,
- Certificates of employment,
- Employment references,
- Proof of work experience,
- Language skills,
- Language certificates,
- Information about professional licenses,
- Information about recognition procedures,
- Information on residency status,
- Application photo, if provided by you,
- as well as any other information required for the application and hiring process.
8.2 Purpose of the Processing
Data is processed in particular for the following purposes:
- a review of your professional profile,
- matching candidates with suitable job openings,
- communicating with you,
- the preparation and conduct of job interviews,
- the impression made on potential employers,
- coordinating application processes,
- organizational support for recognition procedures,
- organizational support for visa and residency procedures,
- as well as preparing you for your transition into the workforce.
8.3 Legal Basis
To the extent that processing is necessary to decide whether to establish an employment relationship, it is carried out in particular pursuant to § 26 BDSG.
In addition, Article 6(1)(b) of the GDPR and Article 6(1)(a) of the GDPR may serve as the legal basis, particularly if you expressly commission us to provide specific services or give your consent to do so.
Pursuant to Section 26 of the Federal Data Protection Act (BDSG), applicants are expressly considered employees within the meaning of that provision.
9. Processing of Special Categories of Personal Data
As part of the application and certification processes, we may receive documents that contain special categories of personal data.
This may include, in particular, health data.
Health data falls under the special categories of personal data as defined in Article 9 of the GDPR and is subject to enhanced protection.
We therefore ask that you, as a general rule, provide us only with those specific categories of personal data that are actually necessary for the respective application, recognition, residency, or employment process.
To the extent that the processing of special categories of personal data is necessary, it is carried out only on the basis of an appropriate legal authorization, in particular a relevant exception under Article 9(2) of the GDPR or, where necessary, explicit consent.
10. Disclosure of Applicant Data to Potential Employers
If you apply for a job through J&N PALABRAS or ask us to help you find a suitable employer, we may share your application information with potential employers.
Such a transfer will take place only to the extent that there is an appropriate legal basis under data protection law.
In particular, the following may be transmitted:
- Resume,
- professional qualifications,
- Work experience,
- Language skills,
- Certificates of training,
- relevant certificates,
- as well as any other information required for the specific position.
Particularly sensitive data is transmitted only if it is necessary for the specific purpose and legally permissible.
11. Application Materials
You can submit your application materials to us, in particular, via:
- Email,
- Contact Form,
- Upload feature,
- Application platform,
- or by any other means expressly provided for
be transmitted.
We use application materials exclusively for the specific purposes of recruitment, application, accreditation, visa processing, and integration.
We ask that you refrain from providing any unnecessary sensitive information that is not required for the specific purpose.
12. Retention of Applicant Data
As a general rule, we store applicant data only for as long as is necessary for the respective application and recruiting process or as required by statutory retention obligations.
If an employment relationship is not established, application materials are generally deleted as soon as they are no longer needed for the purposes of the respective application process and there are no legal grounds for further storage.
Data may be retained for a longer period, in particular, if:
- You have expressly consented to longer-term storage,
- further retention is necessary to assert, exercise, or defend legal claims,
- or there is a legal requirement to retain the data.
13. Candidate Pool / Talent Pool
If we wish to store applicant data beyond the specific application process for future suitable positions, we will do so only on an appropriate legal basis.
If your consent is required for this, we will obtain it separately.
Consent to be included in a candidate or talent pool may be revoked at any time, effective for the future.
14. HubSpot
We can use HubSpot to manage contacts, prospects, business partners, job applicants, and communication processes.
The provider is:
HubSpot, Inc.
2 Canal Park
Cambridge, MA 02141
United States
Among other things, HubSpot may process personal data collected through contact forms, communications, website interactions, or other features.
Depending on the functions used, these may include, in particular:
- Name,
- Email address,
- Phone number,
- Companies,
- Communication content,
- Contact information,
- Interactions with our website,
- Appointment and communication data,
- as well as technical information.
HubSpot may use cookies and similar technologies on our website. HubSpot specifically describes the use of cookies and tracking technologies to analyze website interactions and manage contacts.
To the extent that HubSpot processes personal data on our behalf, it does so on the basis of a contract for data processing or a corresponding data processing agreement.
HubSpot provides a data processing agreement for this purpose, including provisions regarding international data transfers.
Unless the use of HubSpot cookies or tracking technologies is necessary for the technical operation of the website, they are activated only on the basis of the user’s consent via our cookie management system.
For more information, please see HubSpot's Privacy Policy:
15. Google Analytics
To the extent that we use Google Analytics, we use the service to analyze the use of our website and to improve our online offerings.
The provider is:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Analytics uses cookies and similar technologies to collect information about the use of our website. In particular, Google describes the use of cookies such as „_ga“ to distinguish between users for analytical purposes.
In particular, the processing may include the following information:
- IP address,
- Device and browser information,
- pages viewed,
- Interactions with the website,
- Duration of stay,
- Source of the website visit,
- as well as other usage data.
Google may receive information from websites that use Google services, including the URL and IP address.
Google Analytics is generally not activated on our website until you have given your consent via our cookie banner.
The legal basis is Article 6(1)(a) of the GDPR.
You can revoke your consent at any time via the cookie settings, effective for the future.
For more information, please see Google's Privacy Policy:
16. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small text files that may be stored on your device.
In particular, we distinguish between:
Technically Necessary Cookies
These cookies are necessary to provide basic website functionality, ensure security, or enable features you have explicitly requested.
These cookies may be used without separate consent, provided that this is permitted by law and necessary for the respective function.
Statistics and Analytics Cookies
These cookies allow us to analyze how our website is used and improve our offerings.
They will only be used if you have given your consent in advance.
Marketing and Tracking Cookies
These cookies may be used to analyze user activity across different websites or services or to measure the effectiveness of marketing campaigns.
They will only be used if you have given your consent.
17. Cookie Settings and Withdrawal
If consent is required for the use of cookies or similar technologies, they will not be activated until you have given your consent.
You can change or revoke your preferences at any time using the cookie settings management feature available on our website.
The revocation is effective going forward.
Any processing that has already taken place remains lawful until the time of revocation.
The specific lifespan and provider assignment of individual cookies may vary depending on the services used on our website.
18. Zoom
We can use Zoom for online appointments, job interviews, counseling sessions, or training sessions.
The provider is:
Zoom Communications, Inc.
55 Almaden Boulevard, 6th Floor
San Jose, CA 95113
United States
When using Zoom, the following data, in particular, may be processed:
- Name,
- Email address,
- Meeting ID,
- Audio and video data,
- Technical connection specifications,
- Device information,
- Chat messages,
- as well as any additional information you may provide during a meeting.
The specific data that is actually processed depends on the Zoom features used and the respective settings.
In its current privacy policy, Zoom describes how it processes personal data when users participate in meetings, webinars, chats, and other Zoom services.
To the extent that Zoom processes personal data on our behalf, it does so in accordance with the relevant data protection agreements.
Zoom states that it uses appropriate transfer mechanisms for the transfer of personal data from the EEA to third countries, in particular standard contractual clauses or other legally permissible mechanisms.
In general, you can also join a Zoom meeting via a web browser, provided that the Zoom feature in question supports this.
Video or audio recordings are made only if this is expressly provided for, legally permissible, and the individuals concerned have been informed accordingly or the necessary consents have been obtained.
For more information, please see Zoom's Privacy Policy:
19th Newsletter
When you subscribe to our newsletter, we process the email address you provide as well as any other information you voluntarily provide.
Registration is generally carried out using a double opt-in process.
After registering, you will receive an email asking you to confirm your registration.
Your email address will be added to the newsletter mailing list only after confirmation.
Data processing is based on your consent in accordance with Article 6(1)(a) of the GDPR.
You may withdraw your consent at any time.
To do so, you can use the unsubscribe link included in every newsletter.
The lawfulness of the processing carried out up until the time of revocation remains unaffected.
20. Sending newsletters through an external service provider
If we use an external mailing service provider for the newsletter, the data required for mailing will be transmitted to that service provider.
Current newsletter service provider:
HubSpot, Inc.
2 Canal Park
Cambridge, MA 02141
United States
The service provider processes the data exclusively for the agreed-upon purposes and in accordance with the data protection agreements required for this purpose.
Depending on the newsletter system used, information may be processed regarding whether and when a newsletter email was opened or a link contained therein was clicked.
Such an analysis is conducted only to the extent that it is legally permissible and the necessary legal basis exists.
21. Scheduling an Appointment
To the extent that we offer the option on our website to book a consultation or job interview online, personal data may be processed for this purpose.
These may include, in particular:
- Name,
- Email address,
- Phone number,
- Preferred date,
- Details regarding the matter,
- as well as any additional voluntary information.
The data is processed to schedule the appointment and, if necessary, to prepare a contract or a consultation.
If external services are used for scheduling appointments, they will be specified accordingly in this Privacy Policy.
Appointment Scheduling Service:
HubSpot, Inc.
2 Canal Park
Cambridge, MA 02141
United States
22. Embedded Content
Our website may include content from external providers.
These may include, for example:
- Videos,
- Maps,
- Social media content,
- Fonts,
- Posting functions,
- Forms,
- Presentations,
- or other external content.
When you visit a page with embedded content, a connection may be established to the servers of the respective third-party provider.
In particular, this may involve the transmission of IP addresses, browser information, and technical data.
If consent is required for the integration, external content will not be loaded until you have given your consent.
23. YouTube
When we embed YouTube videos, a connection to Google’s or YouTube’s servers may be established when you access that content.
In doing so, personal data—in particular IP addresses and technical information—may be processed.
To the extent that it is technically possible and required under data protection laws, YouTube content will not be loaded until you have given your consent.
The provider is Google Ireland Limited or the Google entity responsible for the service in question.
For more information:
24. Google Maps
When Google Maps is embedded on our website, a connection to Google's servers may be established while the map is loading.
In particular, IP addresses and technical information may be processed.
Google Maps will be loaded only after you have given your consent, if necessary.
For more information, please see Google's Privacy Policy.
25. External Fonts
To the extent that external fonts, such as Google Fonts, are loaded directly from third-party servers on our website, a connection may be established to the respective provider’s servers.
In particular, the visitor's IP address may be transmitted.
Whenever possible, we use fonts stored locally on our server to avoid unnecessary transmission of personal data to third-party providers.
26. Recipients of Personal Data
Personal data may be disclosed to the following categories of recipients, to the extent that this is necessary for the respective purposes and legally permissible:
- Web hosting providers,
- IT and software service providers,
- Providers of CRM systems,
- Communications service providers,
- Providers of video conferencing systems,
- Newsletter service provider,
- potential employers,
- Government agencies and public entities,
- Language schools and educational institutions,
- Accreditation bodies,
- Translation and certification service provider,
- as well as other service providers as may be necessary in each individual case.
Data will only be transferred if there is an appropriate legal basis for doing so.
27. Transfer to Third Countries
When using certain external services, personal data may be transferred to countries outside the European Union or the European Economic Area.
Such a transfer will take place only if the requirements of Articles 44 et seq. of the GDPR are met.
These may include, in particular:
- an adequacy decision by the European Commission,
- appropriate safeguards, in particular standard contractual clauses,
- or another legally permissible basis.
With certain providers, particularly U.S. service providers, data may be transferred to the United States.
Please review the current privacy policies of the respective service providers.
28. Data Security
We implement appropriate technical and organizational measures to protect personal data from loss, destruction, alteration, unauthorized access, or unauthorized disclosure.
Our security measures are regularly reviewed and updated in line with technological advancements and organizational capabilities.
The transmission of personal data via our website is encrypted using a secure HTTPS connection, to the extent technically feasible.
29. Duration of Storage
We store personal data only for as long as is necessary for the respective purpose.
In addition, data may be stored if:
- there are statutory retention requirements,
- the data is necessary to comply with legal obligations,
- or the data is needed to assert, exercise, or defend legal claims.
Once the respective retention period has expired, the data will be deleted unless there is another legal basis for continued storage.
30. Your Rights
In accordance with the statutory requirements, you have the following rights in particular:
Right to information
You may request information about whether we process personal data about you and, if so, what data we process.
Right to rectification
You may request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to erasure
You may request the deletion of your personal data in accordance with the applicable legal requirements.
Right to Restriction of Processing
You may request that the processing of your personal data be restricted, subject to the statutory requirements.
Right to data portability
Subject to the legal requirements, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent
If processing is based on your consent, you may revoke it at any time, effective for the future.
Right to Object
You may object to the processing of your personal data in accordance with the applicable legal requirements.
In particular, you may object at any time to the processing of your personal data for direct marketing purposes.
31. Exercising Your Privacy Rights
To exercise your rights, you can contact us at any time:
J&N PALABRAS UG (limited liability)
147 Bergheimer Street
69115 Heidelberg
Germany
E-mail: info@jnpalabras.com
Please note that, in response to such requests, we may need certain information to verify your identity.
32. Right to File a Complaint with a Data Protection Supervisory Authority
You have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data.
The competent supervisory authority for our company is, in particular:
The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg
20 Lautenschlagerstraße
70173 Stuttgart
Germany
Website:
State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg
The right to file a complaint may also be exercised with another competent data protection supervisory authority, in particular with the supervisory authority of the data subject’s usual place of residence or workplace.
33. No Automated Decision-Making
As a general rule, no fully automated decision-making—including profiling as defined in Article 22 of the GDPR—takes place in connection with our website or our recruiting services, unless otherwise expressly stated in a specific individual case.
34. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy if there are changes to legal requirements, our services, the technical systems we use, or the third-party providers we engage.
The most recent version published on this website shall apply in each case.
Date of this Privacy Policy: August 2026
Person in Charge
J&N PALABRAS UG (limited liability)
147 Bergheimer Street
69115 Heidelberg
Germany
Managing Director: José J. Wiechens
E-mail: info@jnpalabras.com
Website: https://jnpalabras.com
As of August 2026
