MEDWING International Recruiting GmbH Privacy Policy
‍
1. Contact details of the person responsible for processing and the company data protection officer
1.1 Responsible person within the meaning of the GDPR is:MEDWING International Recruiting GmbH (hereinafter MEDWING)
‍
represented by Johannes Roggendorf
Rosenthaler Strasse 63-64
10119 Berlin
E-Mail: info@medwing.com | Telephone: 030 202380920 | Fax: 030 577027873

1.2 MEDWING has appointed a data protection officer.

If you have any questions about data protection at MEDWING or about the data we store about you, please contact us by post or e-mail to: LOROP GmbH
Landgrafenstrasse 16
10787 Berlin
email: datenschutz@lorop.com

2. Information on the processing of personal data during the placement process and the provision of related services
‍
If you want to use our MEDWING services as an international applicant, you must conclude a placement agreement with MEDWING. We collect, use and process certain personal data from you to establish and implement them. For more information on concluding the placement agreement, please see our general terms and conditions for international applicants.
The following personal data is processed and passed on for our service:
Master and contact details: name, first name, address, e-mail, phone/mobile, date of birth, nationality, passport number
Career data: Education, professional experience, professional preferences, language skills
Documents: Curriculum vitae, profile picture, work/internship certificates, training certificates and other documents relevant in the context (e.g. for recognition & visa)
Other voluntary information: marital status or other interest-based aspects
The above data is collected for the purpose of arranging a job in Germany and, in order to provide our services, we reserve the right to make this data available to cooperation partners or employers in Germany who offer jobs that match your applicant profile and support you in the migration and relocation process. We will only transfer your applicant profile and the necessary personal data to the respective cooperation partner for you if you agree in our interviews. Data processing for the purpose of transmitting this data and providing our services within the framework of the brokerage agreement is based on Article 6 (1) (b) GDPR.
The data can only be viewed and processed by authorized persons. Should further data be required, this requires the consent of the candidate separately. The data is stored as long as the brokerage agreement has not been terminated (see 4).

3. Information on the processing of selected health data
‍
As part of the placement process, employers request information about the vaccination status with regard to the vaccinations required in Germany for use in healthcare. This information includes health data, which is to be regarded as particularly vulnerable data within the meaning of Article 9 (1) of the General Data Protection Regulation (GDPR). The relevant health data for the provision of our services relates to the vaccination status and includes the number of doses, vaccines and date of the relevant vaccinations against the following diseases:
Corona/COVID-19
MMR (measles-mumps-rubella)
Other vaccinations that are necessary for use in certain wards or in certain facilities (e.g. in the children's ward)
MEDWING requests the necessary documents to compare the vaccination status with current requirements (e.g. with regard to the institution-related COVID-19 obligation) and to provide the proof to the future employer. The processing results in the data being stored in a digitally managed profile in order to check that the vaccination status is up-to-date during placement and at the time of entry.
The above data is collected for the purpose of arranging and starting a job in Germany and is used exclusively to prove the vaccinations required by law or by the future employer.
The data can only be viewed and processed by authorized persons. Should further data be required, this requires the consent of the candidate separately. The data is stored as long as the brokerage agreement has not been terminated (see 4).

4. Sub-processor
‍
As part of the contractual or pre-contractual measures, we process your personal data within MEDWING International Recruiting GmbH as well as MEDWING GmbH and other subsidiaries of MEDWING GmbH. This only gives access to your personal data to people who need it to fulfill our contractual and legal obligations.
In addition, we use the following service providers to process your request or registration:
Ankaadia GmbH, Clara-Schumann-Strasse 3, 61440 Oberursel, Germany
MEDWING GmbH, Rosenthaler Strasse 63-64, 10117 Berlin, Germany
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland
The transfer of your personal data to third countries or to an international organization is not ruled out due to the service providers used - particularly in the process of international recruitment. Additional recipients may include authorities and financial institutions, for example.
The legal basis for the transfer of data is Art. 6 para. 1 lit. b) GDPR and, in the case of official institutions, Art. 6 para. 1 lit. c) GDPR.
‍
5. Termination
‍
If the brokerage contract is terminated, we will delete all personal data, including the mentioned health data, no later than 30 days from termination of the contract, or, if we are contractually or legally obliged to store the data in question, block it until it is finally deleted and restrict processing. Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
‍
6. Rights of data subjects
‍
The undersigned is a data subject in accordance with the provisions of the General Data Protection Regulation (GDPR) and has the following rights vis-à-vis the person responsible:
Right to information:
In accordance with Article 15 GDPR, the signatory has the right to request information about the personal data that is being processed about him.
Right to object:
The signatory has the right to object at any time, without giving reasons, to the processing of his personal data, which is carried out on the basis of Article 6 paragraph 1 letter f GDPR, in accordance with Article 21 paragraph 1 GDPR. All you need to do is send an e-mail to international-recruiting@medwing.com. The legality of the processing carried out on the basis of consent up to the withdrawal is not affected by the revocation.
The controller will then no longer process the personal data unless he can prove compelling legitimate grounds for processing which outweigh the interests, rights and freedoms of the signatory, or the processing serves to assert, exercise or defend legal claims. The collection of data to provide the website and the storage of log files are absolutely necessary for the operation of the website.
Right to rectification:
If the data stored about the signatory is no longer accurate, a correction may be required in accordance with Article 16 GDPR. If the data is incomplete, you have the right to have it completed.
Right to delete:
In accordance with Article 17 GDPR, the signatory may request the deletion of his personal data.
Right to restrict processing:
According to Article 18 GDPR, the signatory has the right to request that the processing of his personal data be restricted.
If processing has been restricted, this data — apart from storage — may only be processed with the consent of the signatory or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. The signatory will be informed before any restriction is lifted.
Right to complain:
In accordance with Article 77 (1) GDPR, the signatory has the right to complain to a data protection supervisory authority of his choice if he believes that the processing of his personal data violates data protection law.
The responsible supervisory authority includes the Berlin Commissioner for Data Protection and Freedom of Information (e-mail: mailbox@datenschutz-berlin.de).
Right to data portability:
If the requirements of Article 20 (1) GDPR are met, the signatory has the right to have data that he has provided to the person responsible and which is processed automatically on the basis of his consent or to fulfill a contract handed over to himself or to third parties.
The collection of data to provide the website and the storage of log files are absolutely necessary for the operation of the website and are therefore not based on consent in accordance with Article 6 (1) letter a GDPR or on a contract under Article 6 (1) (b) GDPR, but on Article 6 (1) (f) GDPR. The requirements of Article 20 (1) GDPR have not been met in this respect.
‍
7. Consequences of failure to sign
‍
The undersigned has the right not to agree to the declaration of consent to this privacy policy. Since the collection, transfer and processing of the data described above for the services in the context of placement and migration support is absolutely necessary, failure to sign precludes the use of the services offered.
‍
8. Timeliness and amendment of this data protection information
‍
This privacy policy was last updated in October 2025.