Information on Processing of Personal Data in accordance with Art. 13, 14, 21 GDPR:

 Recruitment of Applicants for our Clients

Dear applicant,

The protection of your personal data is our utmost priority. Therefore, we process your data in accordance with the EU General Data Protection Regulation (GDPR). Below, we inform you according to Art. 12 et seq. GDPR about the processing of your data.

Who is responsible for the data processing? (Art. 13 para. 1(a), (b) GDPR)

CompanyData Protection Officer
Konen & Lorenzen GmbH & Co.KG

Kaiserswerther Str. 282

40474 Düsseldorf

Phone: +49 (0) 211 239554 0



Thorsten Werning


Zeppelinstraße 321

45470 Mülheim

Phone: +49 (0) 208 69 609 0



For what purposes and on what legal basis do we process your personal data? (Art. 13 para. 1(c), (d), Art. 6 GDPR)

We process your data that you have made available to us as part of your application for a job offer or on your own initiative or that we have received from generally accessible sources in accordance with Art. 6 para. 1(b) GDPR.

We process your personal data only if we have a legitimate interest in storing it in accordance with Art. 6 para. 1(f) GDPR, e.g. during an internal analysis of an application process.

Konen & Lorenzen is one of the leading companies in the field of recruitment consulting for the hotel, catering and tourism industry internationally. There are no standard requirements for the cooperation with our clients and applicants because every partner requires individual solutions that can only be developed with extraordinary dedication. This is the basis for the entire recruitment process of Konen & Lorenzen Recruitment Consultants, from needs assessment to follow-up support, specifically tailored to the needs of our applicants and clients.

Based on years of experience within the hotel industry at home and abroad, Konen & Lorenzen today has a team of qualified consultants in five locations, which displays a high level of expertise, flexibility and competence in a variety of fields.

By registering and sending your application documents, you will be added to our database. At the same time, you have the opportunity to apply for job advertisements on our website. The purpose of our database and the job board is to match employers and potential employees and to achieve the best possible solution for the positioning of qualified personnel within a company.

With your registration, you give your consent to Konen & Lorenzen in accordance with Art. 6 para. 1(a) GDPR to enter your personal data and other particulars into our database. In order for you to be able to use our service without restrictions and for our staff to process your request with regard to your application in the best possible way, we firstly collect important CV related information by means of our registration form.

The personal data that we store regarding your job application together with your application documents (CV, cover letter, certificates) includes information such as name, address, telephone number, mobile phone number, e-mail address, photo, gender, nationality, date of birth, marital status, education, additional qualifications and language skills. After your data has been entered into our system, one of our consultants will contact you promptly to coordinate your individual wishes with our vacancies. In this context, we will ask for further information concerning your professional environment, which includes information on salary, training, career, expectations, reference information and other skills.

Apart from address and contact data, date of birth, marital status and education as well as a current version of your CV, providing any other information is of course completely optional. However, without such information, Konen & Lorenzen cannot guarantee you to be able to use its entire service during the continuing placement process. Your data will only be transmitted to Konen & Lorenzen via SSL encrypted connections.

In case of a successful placement, the following details of the employment contract will also be sent by our client to Konen & Lorenzen: The agreed annual gross salary plus special payments and bonuses, the start date of the contract and the exact position.

Who gets your personal data? (Art. 13 para. 1 (e), (f) GDPR)

All your personal data is treated as strictly confidential and is never passed on to third parties unless you have given your consent or it is required by a statutory regulation.

Due to the fact that our database is located on internal servers, only Konen & Lorenzen employees can access it. By registering, you also agree that companies associated with Konen & Lorenzen may also process your personal data for the purpose for which it is intended.

If we have engaged a service provider who could possibly gain insight into your personal data, we have concluded a contract for order processing.

Furthermore, it should be noted that Konen & Lorenzen also has branches and businesses outside the European Union and some recipients are located in countries, which may not have an adequate level of data protection within the meaning of the European Data Protection Regulation (GDPR). For this reason, all affiliated companies outside the European Union are contractually bound by the standard data protection clauses enacted by the commission in accordance with the review procedure under Art. 93 para. 2 GDPR. Among the affiliated companies of Konen & Lorenzen are Konen & Lorenzen GmbH & Co. KG, Konen & Lorenzen International GmbH & Co. KG and Konen & Lorenzen Management & Real Estate Solutions GmbH in Germany and Konen & Lorenzen International AG in Switzerland.

How long is your data stored? (Art. 13 para. 2(a) GDPR)

Since Konen & Lorenzen would also like to accompany your further career planning, your data will be stored even after the application procedure has been completed in order to contact you regarding future job offers. By registering, you agree to the inclusion of your personal data in our applicant database and its storage until revoked.

What are your rights and obligations? (Art. 13 para. 2(b), (c), (d), (e) GDPR)

Any data subject has the following rights. According to:

  • Art. 15 GDPR you have the right to information. This means that you may require us to confirm whether personal data concerning your person is processed by us.
  • Art. 16 GDPR you have the right to correction. This means that you may require us to correct any inaccurate personal data concerning your person.
  • Art. 17 GDPR you have the right to deletion (“right to be forgotten”). This means that you may require us to delete personal data concerning your person immediately, unless we cannot delete your data, for example, because we have to observe legal retention obligations.
  • Art. 18 GDPR you have the right to restrict processing. This means that we are not allowed to process your personal data any more, apart from storing it.
  • Art. 20 GDPR you have the right to data portability. This means that you have the right to receive the personal data concerning your person that you have provided us in a structured, common and machine-readable format and to communicate this data to another person in charge.
  • Art. 7 para. 3 GDPR you have the right to revoke your consent for the future at any time.
  • Art. 13 GDPR you have a right of appeal to the competent supervisory authority.

Furthermore, you have the right of objection that we explain in more detail at the end of this privacy information.

If you wish to exercise your rights, please contact our data protection officer (for contact details see above).

Competent supervisory authority

Landesbeauftragte für Datenschutz (Privacy officer for North Rhine Westphalia)


to top