Privacy Policy
How we collect, use, store, and protect your personal data.
Table of Contents
1. Who We Are
This website is operated by Nile Bridge Travel Group Limited, a private limited company registered in Kenya (Reg. No. PVT-EY138RMP), trading as Nile Bridge Group.
Data Controller:
Nile Bridge Travel Group Limited
Kilimani, Nairobi, Kenya
Email:
info@nilebridgegroup.co.ke
Phone:
+254 794 563 676
2. Data We Collect
We may collect the following types of personal data:
2.1 Candidate Application Data
- Full name, date of birth, nationality
- Email address, phone/WhatsApp number
- Current country and city of residence
- Professional background — education history, work experience, profession/role, years of experience
- Professional license details (if applicable)
- German language proficiency level
- Preferred German state for employment
- Professional references (name, contact, relationship)
- Hobbies relevant to healthcare
- Support areas of interest
- Uploaded documents — CV, motivation letter, language certificate, professional license, additional documents
- How you heard about us
- Passport status
2.2 Contact Form Data
- Full name, email address, phone number (optional)
- Subject of inquiry
- Message content
2.3 Technical Data
- IP address (anonymized where possible)
- Browser type and version
- Device type and operating system
- Referring URL
- Pages visited and time spent
3. How We Collect Your Data
We collect data through:
- Direct submission: When you fill out the candidate application form or the contact form on our website.
- Communication: When you email us, call us, or message us via WhatsApp.
- Automatic collection: Technical data collected automatically through your browser when you visit our website (see Section 10: Cookies).
4. Why We Collect Your Data
We use your personal data for the following purposes:
- To process and review your candidate application
- To match your profile with verified German healthcare employers
- To communicate with you about your application status
- To provide guidance on language, documents, visa, and Anerkennung
- To connect you with BARMER for Day 1 health insurance
- To respond to your contact form inquiries
- To improve our website functionality and user experience
- To comply with legal obligations
- To prevent fraud and protect the integrity of our services
5. Legal Basis for Processing
We process your personal data based on the following legal grounds under the Kenya Data Protection Act, 2019 and GDPR principles (where applicable for data transferred to or from the EU):
- Consent: You provide explicit consent when submitting the candidate application form or contact form (including ticking the consent checkboxes).
- Contractual necessity: Processing necessary to assess and facilitate your potential employment placement.
- Legitimate interest: Improving our services, fraud prevention, and ensuring the security of our website.
- Legal obligation: Compliance with Kenyan and German legal requirements.
6. How We Store Your Data
- Your data is stored on secure servers hosted via our cPanel hosting provider.
- Uploaded documents (CVs, certificates, etc.) are stored in a protected directory with restricted access.
- Access to your data is limited to authorized NileBridge Group staff only.
- Database passwords are hashed. Admin access is protected by secure login.
Data Retention
- Candidate applications: Retained for up to 24 months from submission date, unless you request earlier deletion or your application results in placement (in which case data is retained for the duration of the placement relationship).
- Contact form messages: Retained for up to 12 months.
- Technical/analytics data: Retained for up to 12 months.
You may request deletion of your data at any time by contacting us (see Section 9: Your Rights).
7. Data Sharing & Third Parties
We may share your personal data with:
- Verified German employers (clinics, hospitals, nursing homes, Ausbildung providers) — only with your consent and only when matching your profile with a potential employer.
- BARMER — our health insurance partner, to facilitate your Day 1 insurance enrollment in Germany.
- Translation service providers — only the specific documents requiring translation, with your consent.
- Legal advisors — as necessary for legal compliance review.
- Hosting provider — our web hosting provider processes data on our behalf as a data processor.
We do not sell, rent, or trade your personal data to any third party for marketing purposes. Ever.
8. International Data Transfers
As part of the recruitment process, your personal data may be transferred to organizations located in Germany (EU). When this happens, we ensure that appropriate safeguards are in place in accordance with the Kenya Data Protection Act, 2019, and EU GDPR requirements, including:
- Ensuring the receiving party operates under adequate data protection standards
- Obtaining your explicit consent for the transfer
- Limiting the data transferred to what is strictly necessary for the stated purpose
9. Your Rights
Under the Kenya Data Protection Act, 2019, and GDPR principles (where applicable), you have the following rights:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data ("right to be forgotten").
Request temporary or permanent restriction of processing your data.
Request your data in a structured, commonly used format.
Withdraw your consent at any time without affecting prior processing.
To exercise any of these rights, please contact us at info@nilebridgegroup.co.ke. We will respond within 30 days.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.
10. Cookies & Analytics
Our website may use cookies — small text files stored on your device — to improve functionality and user experience.
Types of Cookies We May Use
- Essential cookies: Required for basic website functionality (e.g., form submissions, navigation).
- Analytics cookies: Help us understand how visitors use our website (page views, time on site, etc.). This data is anonymized and aggregated.
We do not use cookies for advertising, tracking, or profiling purposes. You may disable cookies in your browser settings at any time, though this may affect website functionality.
11. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 18, we will delete it immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will update the "Last updated" date at the bottom of this page. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, please contact us: