As of: October 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

IndoFachkraft UG (haftungsbeschränkt)
Im Biegel 12, 71522 Backnang, Germany
Represented by the Managing Director Vishnu Marthala
Phone: +49 17641791626
Email: info@indofachkraft.de

2. General Information

Personal data is any data that can be used to identify you personally. We process it confidentially and in accordance with statutory data protection law, in particular the GDPR, the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG), as well as this Privacy Policy.

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

3. Hosting and Server Log Files

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you access the website, Vercel automatically processes technically required data in so-called server log files: IP address, date and time of access, page accessed, referrer URL, browser type and version, and operating system.

The legal basis is our legitimate interest in providing the website securely, stably and quickly (Art. 6(1)(f) GDPR). Log files are only stored for as long as necessary for operation and security. A data processing agreement (Art. 28 GDPR) is in place with Vercel. Vercel participates in the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission’s adequacy decision (Art. 45 GDPR).

4. Consent Management (Cookie Banner)

We use our own, self-hosted solution to obtain and manage your consent. Your choice (categories, time, version) is stored only locally in your browser (localStorage) and is not transmitted to third parties. This storage is strictly necessary (Section 25(2) no. 2 TDDDG); the legal basis for the processing is our legal obligation to be able to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). We ask again after 270 days. If your browser blocks storage, your choice applies only until the page is reloaded.

You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” link in the website footer.

5. Contacting Us and Enquiry Forms

Contact and enquiry forms

If you send us an enquiry using a form on this website (e.g. contact form, quote request, needs check or trade-fair enquiry), we process the data you provide, in particular name, company, email address, phone number, your message and, where applicable, information about qualifications and work experience, in order to handle your enquiry and contact you.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take pre-contractual steps; in all other cases, our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR). Enquiries are stored in a database at our service provider Supabase; to notify our team and to reply by email we use the email delivery service Resend (see section 6).

Care Pulse Check

Your answers in the Pulse Check are evaluated only in anonymised, aggregated form for the industry benchmark. We use your email address to send you the benchmark and – only if you additionally tick the corresponding box – to arrange a non-binding call. The legal basis in each case is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by emailing info@indofachkraft.de.

Enquiries by email, phone or WhatsApp

If you contact us by email, phone or WhatsApp, we process your enquiry including the resulting personal data in order to handle your request (Art. 6(1)(b) or (f) GDPR). When you use WhatsApp, WhatsApp Ireland Limited additionally processes data in accordance with its own privacy policy. For confidential documents we recommend sending them by email.

Appointment booking

For online appointment booking we link to a Google Calendar booking page (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data is only transmitted to Google once you follow this link. We process the data you provide when booking in order to hold the appointment (Art. 6(1)(b) GDPR).

6. Processors

We use the following service providers, who process personal data exclusively on our behalf and in accordance with our instructions (Art. 28 GDPR):

Vercel Inc., USA – website hosting (see section 3)
Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 – database for enquiries and website content
Plus Five Five, Inc. (Resend), USA – email delivery

Where data is transferred to countries outside the EU/EEA, this is based on an adequacy decision (Art. 45 GDPR) or the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

7. Placement of Professionals

As part of our placement services we process data of professionals (e.g. CV, qualifications, language skills) and of contact persons at employers in order to initiate and carry out the placement (Art. 6(1)(b) GDPR). We only pass on profiles of professionals to potential employers with their consent (Art. 6(1)(a) GDPR). We transmit data to authorities (e.g. immigration and recognition authorities) where this is necessary for the respective procedure or required by law (Art. 6(1)(b) or (c) GDPR).

As we operate between Germany and India, data may be transferred to India. This is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) or, where necessary for the placement, on Art. 49(1)(b) GDPR.

We do not sell personal data to third parties.

8. Analytics and Marketing Tools

Google Analytics (only with consent)

With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (e.g. “_ga”) to analyse website usage statistically. Google Analytics 4 does not store IP addresses. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Without consent, Google Analytics is not loaded.

Microsoft Clarity (only with consent)

With your consent we use Microsoft Clarity, an analytics service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how visitors interact with the website (e.g. mouse movements, clicks, scrolling, pages visited, device and browser) and creates heatmaps and session recordings from this so that we can improve usability. Input in form fields is masked before transmission and is not recorded. Clarity sets cookies (e.g. “_clck”, stored for up to 12 months, and “_clsk”, stored for 1 day). Data may be transferred to Microsoft Corporation in the USA; Microsoft Corporation is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). We have disabled sharing with Microsoft Advertising. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Without consent, Clarity is not loaded. More information: https://privacy.microsoft.com/en-gb/privacystatement

Apollo.io (only with consent)

With your consent we use the website tracker of Apollo.io Inc., San Francisco, USA. Apollo.io uses IP address and usage data to identify which companies visit our website so that we can offer employers relevant services. Data is transferred to the USA. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR; for the third-country transfer, Art. 49(1)(a) GDPR where applicable). Without consent, Apollo.io is not loaded.

Vercel Web Analytics and Speed Insights

To measure page views and loading performance we use Vercel Web Analytics and Speed Insights (Vercel Inc., USA). These services set no cookies and store no information on your device; visitors are only counted via a daily rotating, anonymised hash. The legal basis is our legitimate interest in a stable and fast website (Art. 6(1)(f) GDPR).

9. Embedded Content and Fonts

YouTube (privacy-enhanced mode)

We embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in privacy-enhanced mode (youtube-nocookie.com). Before playback we only show a preview image delivered via our own server; no connection to YouTube is established. Only when you click “Play” is the video loaded from YouTube. In doing so, your IP address, among other data, is transmitted to Google and information may be stored on your device; data may be transferred to Google LLC in the USA (EU-US Data Privacy Framework). The legal basis is your consent given by clicking “Play” (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

Fonts (hosted locally)

This website uses Google Fonts typefaces that are hosted locally on our server. No connection to Google servers is established.

10. Retention Period

Unless a more specific retention period is stated in this Privacy Policy, we only store personal data for as long as necessary for the respective purpose. We delete enquiries that do not lead to a business relationship no later than 12 months after they have been finally handled. Statutory retention obligations (in particular under Section 257 HGB and Section 147 AO, usually six to ten years) remain unaffected; in these cases, processing is restricted until the retention period expires.

11. Your Rights

Within the scope of the statutory provisions, you have the following rights at any time:

Access to your stored data (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.

To exercise your rights, simply send a message to info@indofachkraft.de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Heilbronner Straße 35, 70191 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

12. Further Information

You are under no statutory or contractual obligation to provide us with personal data. However, without the details marked as required in forms we cannot process your enquiry. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

We update this Privacy Policy when our data processing or the legal situation changes. The version published on this website applies.