Privacy Policy

SAMI Personalvermittlung, Abdessamad El-Ouazzani, Nastplatz 6, 70376 Stuttgart

Phone: +49 176 613 609 47 · Email: kontakt@sami-personalvermittlung.de

Applicant data: name, contact details, CV, qualifications – solely for direct placement.

Client data (B2B): Within our business relationships with companies, we process the following data of contact persons: name, function/position, business email address, phone number, company name and address, and invoicing data. This data is used exclusively for order processing, communication, invoicing and the fulfilment of contractual obligations. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligations, e.g. retention periods). Tax-relevant documents are retained for 10 years as required by law. Other client data is deleted after the end of the business relationship, unless statutory retention obligations apply.

Communication data: email/phone contact is stored for processing.

For appointment booking we use Microsoft Bookings, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. When booking an appointment, your name, email address and, where applicable, phone number are transmitted to Microsoft. Microsoft processes this data in accordance with its own privacy policy. The data transfer to the USA takes place on the basis of the Standard Contractual Clauses pursuant to Art. 46 GDPR. Further information: https://privacy.microsoft.com/en-us/privacystatement

We host our website with the provider Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes access and connection data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. The transfer to the USA takes place on the basis of the EU Standard Contractual Clauses pursuant to Art. 46 GDPR. The legal basis for using the hosting provider is Art. 6(1)(f) GDPR (legitimate interest in a secure and reliable provision of our website).

Our backend (application server) and the associated database are operated with the provider Railway Corporation, 548 Market Street PMB 68956, San Francisco, CA 94104, USA. The data collected via our website – in particular enquiries from the contact form – is processed there and stored in a PostgreSQL database. A data processing agreement pursuant to Art. 28 GDPR is in place with Railway. The transfer to the USA takes place on the basis of the EU Standard Contractual Clauses pursuant to Art. 46 GDPR. The legal basis is Art. 6(1)(b) GDPR (steps prior to / performance of a contract) and Art. 6(1)(f) GDPR (secure operation of our services).

When our website is accessed, information is automatically recorded in so-called server log files that your browser transmits automatically: browser type and version, operating system used, referrer URL, hostname of the accessing computer, date and time of the server request, and the IP address. This data is not merged with other data sources and is processed exclusively to ensure trouble-free operation and the security of the website. The IP address is not used to identify individual persons. The server log files are deleted or anonymised after 7 days at the latest. Legal basis: Art. 6(1)(f) GDPR.

On our website we link to our profiles on social networks (e.g. Instagram, TikTok, LinkedIn). These are simple links only, not embedded social media plug-ins. Personal data is only transmitted to the operators of these networks once you actively click on the respective link and visit the provider's page. The respective provider is responsible for the data processing that takes place there.

We have concluded data processing agreements pursuant to Art. 28 GDPR with service providers that process personal data on our behalf. This applies in particular to: the hosting provider of our frontend (Vercel Inc., USA); the hosting provider of our backend and database (Railway Corporation, USA); our email service provider Brevo (Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France) for sending emails; and Microsoft (for appointment booking via Microsoft Bookings and email services via Microsoft 365). Insofar as data is transferred to third countries (e.g. the USA), this takes place on the basis of the EU Standard Contractual Clauses pursuant to Art. 46 GDPR.

Applicant data: deleted after completion of the process or upon withdrawal, at the latest after 24 months. Tax-relevant documents: 10 years.

LfDI Baden-Württemberg, Lautenschlagerstr. 20, 70173 Stuttgart, poststelle@lfdi.bwl.de

Consents can be withdrawn at any time by email to kontakt@sami-personalvermittlung.de.

As of: June 2026