Privacy policy of Lorenz Personal GmbH & Co. KG (Art. 13, 14 and 21 DS-GVO)

The protection of your data is very important for Lorenz Personal. We handle your data responsibly and comply with all data protection regulations. Before your data can be processed, please read the following data protection information carefully.

If we refer in this declaration to the processing of personal data, this means that we collect (request), store, use, transmit or delete this data.

By submitting your online application, you consent to the application process with the processing of your data until revoked. You assure that the information you provide is true and correct.

In addition we would like to inform you with this data protection explanation about kind, extent and purpose of the personal data processed by us. We would also like to make your rights more transparent.

With the DS-GVO (EU Data Protection Basic Regulation), the requirements, obligations and rights that have been applicable up to now have changed. We will therefore adapt this data protection declaration to the new findings (laws and jurisdiction) in due course. We therefore recommend that you take note of this declaration more often so that you are fully informed about your rights with regard to data protection and the handling of your personal data.


1. Contact data responsible person / Data protection commissioner

Lorenz Personal GmbH & Co. KG
Dr.-Kurt-Schumacher-Str. 16
90402 Nuremberg

Phone 0911 214666 0
fax 0911 214666 99
E-Mail personal[at]

You can reach us by mail or via our website:

Data Protection Officer:

Dr.-Kurt-Schumacher-Str. 16
90402 Nuremberg

Phone 0911 214666 0
fax 0911 214666 99
E-Mail: lorenz[at]

If you have any questions about data protection at Lorenz Personal GmbH & Co. KG or to your rights, then please contact our data protection officer.


2. Personal data that we process

2.1 Order data

We process the data that you provide when you instruct us.

2.2 Data that you store on our IT systems

We process the data that you store yourself when you use our services (e.g. applicant portal, contact form, e-mail or chat). This includes the creation of data backups in our systems.

2.3 Log data

The Lorenz Personal GmbH & Co. KG automatically processes log file information transmitted to us by your browser in its servers. This is:

  • Browser type/version
  • operating system used
  • Referrer URL (the previously visited page)
  • hostname of the accessing computer (IP address)
  • time of the server request.


Lorenz Personal GmbH cannot assign this data to specific or identifiable persons. This data will not be merged with other data sources and will be deleted after a statistical evaluation.


2.4 Cookies

2.4.1 Use of Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so- called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser during your next visit (persistent cookies). This also includes our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DS-GVO.

You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or generally. If cookies are not accepted, the functionality of our website may be restricted.

2.4.2 Analysis Cookies

We use cookies on our website to analyse your usage behaviour. The following information is processed and stored:

  • Time of visit
  • Time zone difference to Greenwich Mean Time (GMT)
  • Browser used
  • Language and version of the browser software
  • Operating system used
  • Reference, if any, to the website from which you accessed our website
  • IP address used (in anonymous form)
  • Amount of data transferred in each case

The storage of the IP address is encrypted, so that it is not possible to deduce the individual visitor. The collected data is never merged with other data, for example to establish a personal reference.

You can object to the processing with the analysis cookies at any time and with effect for the future.

2.5 Analysis tools and advertising, Matomo (formerly Piwik)

This website uses the open source web analysis service Matomo. Matomo uses so-called "cookies". These are text files which are stored on your computer and enable an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymised before it is stored.

Matomo cookies remain on your terminal until you delete them.

The storage of Matomo-Cookies takes place on basis of art. 6 Abs. 1 lit. f DS-GVO. The website operator has a justified interest in the anonymous analysis of user behaviour in order to optimise both his website and his advertising.

The information generated by the cookie about the use of this website is not passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

2.6 Applicant data

We process the data we receive from you during the application process. That is:

  • name, first name
  • date of birth
  • address
  • phone numbers
  • e-mail addresses as well as all
  • other data you provide us with (e.g. certificates, job references, previous income, etc.)


2.7 E-mail contact

If you contact us by e-mail, we store your details for processing the enquiry and in the event that follow-up questions arise. We only process further personal data if you give your consent or if this is legally permissible without special consent. The provider expressly points out that data transmission on the Internet (e.g. communication by e-mail) is subject to security gaps and cannot be completely protected against access by third parties.


2.8 Contact form

If you wish to use the contact form for your enquiry, we will process the personal data you enter in the contact form, name, e-mail address and, if applicable, telephone number. In addition, we save the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of being able to answer your enquiry or request.

You can decide for yourself what information you send us via the contact form. The legal basis for the processing of your data is your consent according to Art. 6 para. 1 lit. a DS-GVO. We do not pass on your personal data to third parties unless, for example, you are required to process business transactions. The transmitted data is limited to the necessary minimum.

After the matter has been dealt with, the data will initially be stored for any queries you may have. You can request that the data be deleted at any time, otherwise it will be deleted after the process has been completed.


3. Legal basis for the processing

We process and use your information to perform the contract and provide our services, to improve and customize our services and our websites to your needs, to provide updates and upgrades and to send you notifications regarding the service, as well as to prepare billing statements and collect our receivables. Art. 6 para. 1 lit. a DS-GVO serves us as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the fulfilment of a contract, the processing is based on Art. 6 para. 1 lit. b DS-GVO. The same applies to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of inquiries regarding our products or services. If we are subject to a legal obligation requiring the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 para. 1 lit. c DS-GVO. Ultimately, processing operations could be based on Art. 6 para. 1 lit. f DS-GVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard our legitimate interests or those of a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not predominate. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. As a rule, a legitimate interest is to be assumed if the person concerned is a customer of the person responsible.

If the processing of personal data is based on Article 6 para. 1 lit. f DS-GVO, our legitimate interest is the performance of our business activities.

Applicant data will be processed in accordance with Art. 88 DS-GVO and § 26 Data Protection Adaptation and Implementation Act EU (DSAnpUG-EU).


4. Categories of beneficiaries

4.1 Alliance partners

In order to optimally fulfill your order, we may forward your personal data to the following affiliated partners:

Lorenz Office GmbH & Co. KG
Dr.-Kurt-Schumacher-Str. 16
90402 Nuremberg
Phone 0911 214666 0
fax 0911 214666 55
E-Mail: office-nbg[at]

Lorenz Technik GmbH & Co. KG
Dr.-Kurt-Schumacher-Str. 16
90402 Nuremberg
Phone 0911 214 666 70
fax 0911 214 666 77
E-Mail: technik-nbg[at]

Lorenz Projekte GmbH & Co. KG
Dr.-Kurt-Schumacher-Str. 16
90402 Nuremberg
Phone 0911 214666 31
fax 0911 214666 99
E-Mail: projekte[at] 


4.2 Potential clients/ employers

Lorenz Personal GmbH & Co. KG takes extensive precautions to ensure the security of your data. Please note that when transmitting data via the Internet, access by unauthorised third parties cannot be excluded. Lorenz Personal GmbH & Co. KG uses an encrypted transmission procedure for the transmission and processing of your data. Lorenz Personal GmbH & Co. KG cannot be held liable for the protection against unauthorized access. Lorenz can, however, only assume liability to the extent that this can be attributed to it and is foreseeable. Please note that as an alternative to the online application tool it is possible to send us your applications by post or e-mail. In order to be able to comply with your request for placement, we pass on your data in anonymous form to potential/suitable interested parties.


4.3 Order processors

Various service providers process personal data on our behalf. The security of your data is guaranteed with the help of corresponding contracts in accordance with Art. 28 DS-GVO.

These contract processors are:

  • Companies in the IT sector
  • tax consultant
  • data media destruction companies


4.4 Authorities

Under certain circumstances, we may be required to disclose information to government authorities as a result of legal requirements (e.g. to prosecute criminal offences).

These are for example:

  • Court order (e.g. search warrant)
  • public prosecutors' offices (or equivalent authorities)
  • Police on behalf of a public prosecutor's office


5. Transfer of data to third countries

A transfer to third countries (states outside the EU) does not take place.


6. Duration of storage

Data that we receive from you will only be stored for the duration of the purpose (e.g. fulfillment of a mediation).

Not in all cases the termination of the contract is to be equated with the deletion of your data, since we must fulfill legal retention periods (e.g. by the tax code, AO). They will be deleted after expiry of the respective period.

You can delete the data stored by you on our systems yourself. We delete the data from our systems at the end of the contract. Backups are automatically deleted after the specified period.

During the application process, data that we receive from you is stored for 6 months (according to the activity report of BayLDA 2011/2012).


7. Your rights

Under the applicable laws, you have various rights with respect to your personal information. If you wish to exercise these rights, please send your request by e-mail or post, clearly identifying yourself, to the above-mentioned data protection officer. Below you will find an overview of your rights.


7.1 Right to information

Pursuant to Art. 15 DS-GVO, you have the right to obtain confirmation as to whether the person responsible is processing your personal data. You can obtain from us free of charge information on the personal data stored about you.


7.2 Right of rectification

According to Art. 16 DS-GVO you have the right to demand the immediate correction of incorrect personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration - taking into account the purposes of the processing.


7.3 Rights of cancellation

According to Art. 17 DS-GVO, you have the right to have your personal data deleted immediately if one of the following reasons applies and if processing is not necessary:

  • The personal data have been collected for purposes or processed in any other way for which they are no longer necessary.
  • You revoke the consent on which the processing was based and there is no other legal basis for the processing.
  • You object to the processing pursuant to Art. 21 (1) DS-GVO and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 (2) DS-GVO.
  • The personal data have been processed unlawfully.
  • The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject.
  • The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 DS-GVO.


7.4 Right to limitation of processing

Pursuant to Art. 18 DS Block Exemption Regulation, the right has to demand the restriction of processing if one of the following conditions is fulfilled:

  • The accuracy of the personal data is disputed by you for a period of time which enables us to verify the accuracy of the personal data.
  • The processing is unlawful, you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data.
  • We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
  • You have lodged an objection against the processing pursuant to Art. 21 (1) DS-GVO and it is not yet clear whether our legitimate reasons outweigh yours.


7.5 Right to data transferability

Pursuant to Art. 20 DS-GVO, you have the right to receive the personal data concerning you which you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another data controller without our obstruction, provided that the processing is based on the consent pursuant to Art. 6 para. 1 lit. a DS-GVO or Art. 9 para. 2 lit. a DS- GVO or on a contract pursuant to Art. 6 para. 1 lit. b DS-GVO and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority assigned to the data controller.

Furthermore, when exercising your right to data transferability pursuant to Art. 20 para. 1 DS-GVO, you have the right to obtain that the personal data be transferred directly from one responsible party to another responsible party, insofar as this is technically feasible and insofar as this does not impair the rights and freedoms of other persons.


7.6 Rights to object to processing

Pursuant to Art. 21 DS-GVO, you have the right to object at any time to the processing of your personal data that takes place on the basis of Art. 6 para. 1 lit. e or f DS-GVO.

In the event of an objection, we will no longer process the personal data unless we can prove compelling reasons for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

You have the right to object at any time to the processing of personal data for the purpose of direct marketing.


7.7 Right to revoke consent under data protection law

According to Art. 7 DS-GVO you have the right to revoke your consent to the processing of personal data at any time. This revocation is valid for the future.


7.8 Right of appeal to the supervisory authority

You have the right to appeal to the BayLDA in the event of a complaint. However, we would appreciate it if you contact us first (see point 1).

The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach, Germany
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
E-mail: poststelle[at]


8. Automated decision incl. profiling

We do not apply automated individual decisions including profiling (Art. 22 DS-GVO).


9. Use of Google Maps

This website uses Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using this service will show you our location and make it easier for you to reach us.

When you visit the page on which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers in the United States. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in at Google, your data will be directly assigned to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Processing takes place in accordance with Art. 6 Para. 1 lit. f DS- GVO on the basis of Google's legitimate interests in placing online advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

We, as the operator of this website, have no influence on this data transmission.

If you do not agree with the future data transfer through the use of Google Maps, there is the possibility to completely deactivate the web service of Google Maps by switching off the application JavaScript in your browser. This means that Google Maps and the map display on this website can no longer be used.

You can find further information on how your data is handled in Google's privacy policy:


10. Use of social media plug-in Facebook

The protection and careful handling of your data is important to us.

If you actively click on the Facebook button, direct contact is established between Facebook and you. As a result, you have full control over your data.

There is a Facebook button on our website with which you can recommend us to your friends and acquaintances.

This website uses plug-ins provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Users of our website are advised that the plugin establishes a connection to Facebook. It is transmitted to your browser so that the plug-in appears on the website. We have no influence on the data collected, nor are we aware of the full scope of data collection, the purposes of processing or the storage period. We also do not have any information on the deletion of the collected data by the plug-in provider. The plug-in provider Facebook stores the collected data as user profiles and uses them for advertising, market research and the needs-based design of its website. Such an evaluation takes place in particular (also for users who are not logged in) in order to present demand-oriented advertising and to inform other users of the social network about your activities on our website.

The following data may be transmitted to the provider by clicking on the Facebook plug-in in accordance with Art. 6 Para. 1 lit. a DS-GVO:

  • IP address
  • browser information
  • operating system
  • screen resolution
  • installed browser plug-ins, such as Adobe Flash Player
  • previous page, if you followed a link (referrer)
  • the URL of the current website, etc. 

Logged-in Facebook users are assigned to your personal Facebook account and can publicly link and comment on the corresponding content using the "Like" button.

The processing operations are carried out in accordance with Art. 6 Para. 1 lit. f DS-GVO on the basis of Facebook's legitimate interests. If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website.

Facebook Inc, based in the USA, is certified for the EU-U.S. Privacy Shield. The Privacy Agreement ensures compliance with EU privacy standards.

If you use the Facebook plug-in through our website, our privacy rights will no longer apply. For further information regarding the use of data by Facebook, please refer to the data protection regulations on Facebook at


11. Use of social media plug-in Twitter

If you actively click on the Twitter button, the direct contact between Twitter and you will be established. As a result, you have full data control.

On our website the social media service Twitter is integrated. This is provided by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter offers the so-called "Tweet" function. This allows you to publish spa news with website links in your own Twitter account. If you use the "Tweet" function of Twitter on our websites, the respective website will be linked to your account on Twitter and publicly announced there.

By activating the Twitter plug-in, according to Art. 6 para. 1 lit. a DS-GVO, the following data can be transmitted to the provider:

  • IP address
  • browser type
  • operating system
  • Information about the previously visited website
  • Location
  • mobile operators
  • Device information (including device ID and application ID),
  • search terms
  • cookie information


We are not aware of the content of the transmitted data and its use by Twitter. The processing operations are carried out in accordance with Art. 6 Para. 1 lit. f DS-GVO on the basis of the legitimate interests of Twitter. 

When using the Twitter plug-in via our website, our data protection rights no longer apply.

Twitter Inc, based in the USA, is certified for the EU-U.S. Privacy Shield Privacy Agreement. The data protection agreement guarantees compliance with the EU data protection level.

Twitter offers you the possibility to define your own data protection settings under the following link:

For further information regarding data protection, please contact Twitter:


12. Use of social media plug-in Xing

We would like to inform you here about the processing of personal data via the function of the XING Share-Button.

The "XING Share Button" is used on this website. This is provided by XING SE, Dammtorstraße 30 in 20354 Hamburg. When you access this website, your browser establishes a short-term connection to servers of XING SE ("XING"), which provide the "XING Share Button" functions (in particular the calculation/display of the meter value). XING does not store any personal data about you when you access this website. In particular, XING does not store any IP addresses. Nor does XING evaluate your usage behavior through the use of cookies in connection with the "XING Share" button. You can access the latest data protection information on the "XING Share Button" and additional information on this website:


13. Safety note

We protect your personal data by taking all possible technical and organisational measures in order to comply with the protection goals.

We cannot guarantee data security when communicating by e-mail, so we recommend that you send confidential information by post.


14. Up-to-dateness and amendment of this data protection declaration

This data protection declaration is currently valid from 30 July 2019.

We reserve the right to adapt the data protection declaration in accordance with current legal requirements in the event of changes to our website.


Nürnberg, 30.07.2019