Privacy notice.

Last updated 22 October 2026

This privacy notice explains how personal data is processed when you visit www.dpks.de and contact DPKS. For subsequent placement services and the use of MyDPKS, you will receive additional information about the respective processing activities.

Controller and privacy contact

Niklas Leibacher, trading as DPKS
Sonnensteig 25
61137 Schöneck, Germany
Telephone: +49 179 8290938
Email: kontakt@dpks.de
Website: https://www.dpks.de

You can use these contact details for privacy enquiries and to exercise your rights.

Hosting and technical provision

Our website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, Germany. Raidboxes processes data on our behalf to provide and operate the website. We have entered into a data processing agreement.

When you access the website, technical connection data is processed. This includes, in particular, your IP address, the time and type of request, the resources requested, browser and operating system information and, where applicable, the previously visited page. This data enables website delivery, troubleshooting and protection against misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of the website. According to Raidboxes documentation, regular access logs cover a maximum of seven days. Evidence required for specific security incidents may be retained separately until the incident is resolved and, where necessary, to establish, exercise or defend legal claims.

Website optimisation through FastPixel

We use Raidboxes Performance+ with FastPixel, provided by Faster Web Solutions SRL, Bucharest, Romania. The service optimises and caches website files. FastPixel uses BunnyCDN, provided by BunnyWay d.o.o., Ljubljana, Slovenia, for delivery. Technical request data is processed, including the IP address, requested address, browser and operating system information, the previously visited page where applicable, time and technical response data. The purpose is fast, secure and reliable website delivery; the legal basis is Article 6(1)(f) GDPR.

According to the information from FastPixel provided to us through Raidboxes, processing for the service we use takes place in Europe, primarily in Germany. According to this provider statement, personal data and account data are not processed outside the European Economic Area. The service is engaged through our contractual relationship with Raidboxes.

According to this information, FastPixel counts page views to measure usage under the subscribed plan. Page-view usage information is stored for approximately 30 days to provide usage reports in the FastPixel account dashboard. According to the provider, these usage statistics are limited to page-view counts; individual visitor profiles are not created for this purpose. The stated retention period applies to these usage statistics and is not a general retention period for all technical connection data or logs.

Further provider information: https://fastpixel.io/privacy/, https://fastpixel.io/terms/ and https://bunny.net/gdpr/.

Contacting us and the contact form

If you contact us using the form, by email or by telephone, we process your information to answer your enquiry, assign it to the appropriate person and agree the next steps with you. For emails and telephone calls, the scope of data depends on the information you provide.

The contact form collects your selected role and reason for contacting us, your name and your email address. Your telephone number is optional. Employer enquiries also require the name of the organisation or company; your job title is optional.

Nursing professionals enquiring about starting work can optionally provide their nursing qualification, country of training, German language skills and a message. Employers enquiring about staffing needs can provide the number of nursing professionals required and a message. These additional advisory details are not requested for enquiries solely about MyDPKS access. Fields marked with an asterisk are required for the selected form route; the form cannot be submitted without them. Optional information may be omitted.

Employer enquiries are sent to arbeitgeber@dpks.de; enquiries from nursing professionals are sent to talent@dpks.de. Within DPKS, access is limited to the people responsible for handling the enquiry. Internal assignment serves to process your request. An access enquiry does not yet create a MyDPKS account or publish a profile for employers.

Please do not submit identity document copies, health data or other sensitive documents through the general contact form. If such data is needed later, we will first inform you about the purpose, legal basis and intended transmission method.

We obtain your explicit consent through the form to review and answer your advisory or placement enquiry. Processing is based on Article 6(1)(a) GDPR, taking account of section 298 of Book III of the German Social Code (SGB III). Without this consent, we cannot process the relevant individual placement enquiry. General information remains available. You may withdraw consent at any time with effect for the future by contacting kontakt@dpks.de; processing before withdrawal remains lawful.

As evidence, we record your agreement, the consent wording and notice displayed, the text version, language and server-side receipt time with the enquiry. This fulfils our accountability obligation under Article 7(1) GDPR on the basis of Article 6(1)(c) GDPR. We do not additionally store a full IP address for this consent record.

Enquiries solely about MyDPKS access do not require placement consent. Article 6(1)(b) GDPR applies where processing is necessary to take steps towards or perform a contract with you. We handle general enquiries and communications with company contacts on the basis of Article 6(1)(f) GDPR; our interest is to answer and assign the enquiry appropriately.

At this initial stage, we do not forward your enquiry to recruitment partners or employers or publish a candidate profile. We will inform you separately before any subsequent further processing, particularly support by a partner in Jordan. The consent given through the form does not cover that disclosure to a partner.

Email delivery and mailboxes

We use Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (GE), Switzerland, for email delivery and our mailboxes. Data processed includes sender and recipient addresses, message content, any attachments and technical delivery information. We have a data processing agreement with Infomaniak. The legal basis depends on the enquiry, as described in the preceding section.

According to Infomaniak, the mail service is hosted in Switzerland. Switzerland is covered by a European Commission adequacy decision under Article 45 GDPR.

Form messages are sent using WP Mail SMTP and an SMTP connection to Infomaniak. Delivery errors are logged to diagnose technical faults. Retention for these events is set to one week; additional detailed delivery debugging is disabled. Troubleshooting is based on Article 6(1)(f) GDPR and our interest in reliable message delivery.

Protecting the contact form

We use technical checks to limit automated misuse and duplicate submissions. These include checking a hidden field and the validity of the form request. A pseudonymous check value is derived from the IP address using a secret key. The corresponding counter is valid for one hour after its last update. Following successful delivery, another check value derived from the recipient and message content is used for ten minutes to identify identical repeats.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to protect our communication channels. The validity period of these values is distinct from subsequent technical cleanup and the expiry of backup copies.

Language selection

Our website is available in German and English. You can change the language using the language switcher. The language displayed depends on the page address you access. We use Polylang to associate the language versions. Its language cookie is disabled; we do not use this cookie to remember your language choice for future visits.

When you access a language version, the connection data required for technical delivery is processed. The information on hosting and website optimisation in this privacy notice applies.

Questionnaire and platform examples

The questionnaire for preparing a conversation and the interactive platform examples process your entries in your browser. These functions do not automatically transmit your entries to DPKS. If you use the copy function, the displayed summary is written to your device's clipboard. We only receive this information if you include it in a message and send it to us yourself.

These functions support your voluntary preparation for a conversation and illustrate processes. To the extent that personal data is processed, this serves our legitimate interest in providing these information resources under Article 6(1)(f) GDPR. Section 25 TDDDG additionally applies to any required access to your device.

Fonts and videos

The fonts and videos in the DPKS page templates are embedded as website files. Accessing them involves the connection data required for technical delivery. Where files are delivered through the optimisation infrastructure, the information on hosting and FastPixel also applies. The embedded video files do not require a YouTube or Vimeo player. The legal basis for technical provision is Article 6(1)(f) GDPR.

Retention and backups

We retain standalone contact enquiries only for as long as needed to handle them. After the final response, they are deleted within 28 days at the latest, provided retention is still needed for immediate follow-up questions and there is no other documented retention ground. If they are no longer needed earlier, we delete them earlier.

If a necessary response is missing, we generally follow up once after 14 days. After a further 14 days without a response, we close and delete the standalone enquiry unless another retention ground applies. An expressly agreed later response date is taken into account. Following a rejection or withdrawal, we delete information no longer needed without undue delay after the necessary handling.

If an enquiry becomes a placement case or an assignment, we transfer only the necessary information to that case. We provide separate information about further processing. Placement records are subject, in particular, to the specific requirements of section 298(2) SGB III; its three-year retention period for other business records is not a blanket retention period for all contact enquiries or candidate documents.

Where statutory retention duties apply, the affected records are retained accordingly: commercial and business correspondence generally for six years, accounting vouchers for eight years, and certain books and financial statements for ten years. These periods generally start at the end of the relevant calendar year. Evidence required for specific legal claims may be retained separately to the extent necessary until resolution or expiry of applicable periods. Further use is restricted to the respective retention purpose.

Automatic backups are created daily to restore the website. The most recent 30 daily backup versions are retained. According to Raidboxes' contractual description, these automatic backups are held at Hetzner in Nuremberg. Data deleted from the live system may remain in backups until the relevant backup expires. Backups serve restoration; following restoration, deletions that are already due must be reapplied.

Consent records are managed for a specific purpose together with the relevant case. They are not retained indefinitely. The periods applicable to the case govern deletion; any longer retention is limited to what is necessary to meet legal duties or pursue specifically justified legal claims.

Your rights

Subject to the applicable legal requirements, you have rights of access to your personal data, rectification, erasure and restriction of processing. Where automated processing is based on consent or a contract, a right to data portability may also apply.

You may withdraw consent at any time with effect for the future, in particular by contacting kontakt@dpks.de. This does not affect the lawfulness of processing before withdrawal.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will stop processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You may object to direct marketing at any time without giving a reason.

You may lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement. The authority generally responsible for DPKS is the Hessian Commissioner for Data Protection and Freedom of Information: Postfach 3163, 65021 Wiesbaden, Germany; telephone +49 611 1408-0; https://datenschutz.hessen.de.