Privacy Policy

Last updated: June 2026

We are pleased that you are interested in KVN-International. Protecting your personal data is important to us. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, use our services, interact with us on social media, or participate in recruitment and talent acquisition processes managed by us.

1. Controller

The controller responsible for data processing on this website is:

KVN-International GmbH
Flughafenstr. 59
70629 Stuttgart
Germany

Email: datenschutz@kvn-international.com
General contact: hello@kvn-international.com

Managing Director: Kevin Bednar
Commercial Register: Amtsgericht Stuttgart, HRB 778302
VAT ID: DE341170790

Where services are provided together with affiliated entities, including KVN-International US Inc., we will inform you where another entity is involved in the processing of your personal data.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

visits to our website;

contact requests by email, contact form, phone, scheduling tool or social media;

consulting, recruitment, executive search and talent acquisition services;

candidate, client and business partner communications;

newsletter and marketing communications, where applicable;

our social media profiles and external online presence.

3. Personal data we process

Depending on your interaction with us, we may process the following categories of personal data:

Website usage data
IP address, browser type, device information, operating system, referrer URL, pages visited, date and time of access, technical log files, cookie preferences and similar technical information.

Contact and communication data
Name, email address, phone number, company, job title, message content, meeting requests, call notes and correspondence.

Client and business partner data
Company details, contact persons, role, communication history, project information, contract data, billing information and service-related documentation.

Candidate and recruitment data
Name, contact details, CV/resume, LinkedIn or professional profile information, employment history, qualifications, skills, compensation expectations, availability, location preferences, interview notes, assessment results, references and communication history.

Marketing data
Newsletter subscription data, consent records, email engagement data, preferences and interaction with our content.

We ask you not to provide sensitive personal data, such as health data, religious beliefs, political opinions or other special category data, unless this is strictly necessary and requested for a specific lawful purpose.

4. Website access, hosting and server log files

When you visit our website, certain technical data is automatically processed to ensure the secure and stable operation of the website. This may include your IP address, access time, browser type, operating system, referrer URL and requested files.

The legal basis is our legitimate interest in providing a secure, technically functional and user-friendly website under Art. 6(1)(f) GDPR.

Hosting and website infrastructure may be provided by external service providers acting on our behalf. These providers process data only as necessary to deliver, secure and maintain the website.

5. Contact requests and communication

When you contact us by email, contact form, phone, LinkedIn, scheduling tool or another communication channel, we process the data you provide in order to respond to your inquiry, prepare a potential business relationship or provide requested information.

The legal basis is usually:

Art. 6(1)(b) GDPR, where your request relates to a contract or pre-contractual measures;

Art. 6(1)(f) GDPR, where we have a legitimate interest in responding to business inquiries;

Art. 6(1)(a) GDPR, where you have given consent.

We store communication data only as long as necessary for the relevant purpose, unless legal retention obligations apply.

6. Recruitment, executive search and talent acquisition services

KVN-International provides recruitment, executive search, talent acquisition and international hiring advisory services. In this context, we may process personal data of candidates, prospects, client contacts and business partners.

We may collect candidate data directly from you, from professional networks, publicly available professional sources, referrals, client communications or previous contact with you.

We process recruitment-related data for the following purposes:

identifying suitable candidates for client roles;

contacting candidates regarding potential opportunities;

assessing professional suitability, experience and expectations;

coordinating interviews and recruitment processes;

presenting candidate profiles to clients, where appropriate;

maintaining talent pools for future relevant opportunities;

supporting international hiring and market-entry projects.

The legal basis may be:

Art. 6(1)(b) GDPR, where processing is necessary for pre-contractual steps with you;

Art. 6(1)(f) GDPR, based on our legitimate interest in professional recruitment and talent acquisition services;

Art. 6(1)(a) GDPR, where we request and receive your consent;

Art. 6(1)(c) GDPR, where processing is necessary to comply with legal obligations.

We do not intentionally share candidate profiles with clients in a misleading or uncontrolled manner. Where appropriate, we will inform candidates before presenting their profile to a client or obtain consent, depending on the specific process and applicable legal basis.

7. Client services and business operations

When we work with clients, suppliers or business partners, we process business contact data and project-related information to perform our services, manage contracts, issue invoices, coordinate projects and maintain business relationships.

The legal basis is:

Art. 6(1)(b) GDPR for contract performance and pre-contractual measures;

Art. 6(1)(c) GDPR for legal and accounting obligations;

Art. 6(1)(f) GDPR for legitimate business interests, including client management and service delivery.

8. Newsletter and direct marketing

If you subscribe to our newsletter or agree to receive marketing communications, we process your email address and related subscription data to send you updates, insights, invitations or service-related information.

The legal basis is your consent under Art. 6(1)(a) GDPR.

You may unsubscribe at any time by using the unsubscribe link in the email or by contacting us at datenschutz@kvn-international.com.

We may also contact existing business contacts with relevant B2B information where legally permitted and where we have a legitimate interest under Art. 6(1)(f) GDPR. You may object to such communication at any time.

9. Cookies and similar technologies

Our website may use cookies and similar technologies. Cookies are small text files stored on your device. Some cookies are technically necessary for the website to function. Others may be used for analytics, performance measurement, embedded content or marketing, depending on your consent.

Technically necessary cookies are processed on the basis of our legitimate interest in operating the website under Art. 6(1)(f) GDPR.

Non-essential cookies and tracking technologies are used only where legally required consent has been obtained under Art. 6(1)(a) GDPR.

You can change or withdraw your cookie consent at any time through the cookie settings provided on the website.

10. Analytics and website optimization

We may use analytics tools to understand how visitors use our website and to improve content, structure, performance and user experience. Analytics tools may process IP addresses, device information, browser data, pages visited, interaction data and approximate location data.

Where analytics involves non-essential cookies or similar tracking technologies, processing is based on your consent under Art. 6(1)(a) GDPR. Where analytics is strictly privacy-friendly and does not require consent, processing may be based on our legitimate interest under Art. 6(1)(f) GDPR.

11. Embedded content and third-party services

Our website may include embedded content or links to third-party services, such as scheduling tools, video platforms, social media profiles, map services, analytics providers or external websites.

When you interact with such third-party services, personal data may be processed by the respective provider. The provider may be independently responsible for its own data processing. Please review the privacy policies of the respective third-party providers.

Examples of third-party services that may be used include:

website hosting and content delivery providers;

consent management tools;

analytics providers;

scheduling tools;

Google services;

LinkedIn;

YouTube or other embedded media providers;

CRM, email and communication tools.

12. Social media

KVN-International maintains profiles on social media platforms, including LinkedIn and other professional networks. When you visit or interact with our social media profiles, the respective platform provider may process your personal data for analytics, advertising and platform operation purposes.

We may process your public profile information, messages, comments or interaction data when you engage with our profiles.

The legal basis is our legitimate interest in communication, professional visibility and business development under Art. 6(1)(f) GDPR, unless consent or another legal basis applies.

13. Service providers and recipients of data

We may share personal data with external service providers where necessary for website operation, communication, CRM, recruitment management, hosting, analytics, scheduling, accounting, legal services, IT security or business operations.

These service providers are contractually bound to process personal data only according to our instructions where they act as processors.

Recipients may include:

hosting and website providers;

CRM and applicant tracking systems;

email and communication providers;

scheduling tools;

IT and software providers;

analytics and consent management providers;

accounting, tax and legal advisors;

clients in recruitment or consulting projects, where necessary and lawful;

affiliated entities, where required for cross-border service delivery.

14. International data transfers

As an international consultancy, we may work with service providers, clients, platforms or affiliated entities located outside the European Economic Area, including in the United States.

Where personal data is transferred outside the EEA, we ensure that an appropriate transfer mechanism is in place. This may include:

an adequacy decision by the European Commission;

certification under the EU-U.S. Data Privacy Framework, where applicable;

Standard Contractual Clauses approved by the European Commission;

additional contractual, technical or organizational safeguards where required.

The European Commission adopted the EU-U.S. Data Privacy Framework adequacy decision for transfers to certified U.S. organizations, and Standard Contractual Clauses remain an established mechanism for other international transfers. (European Commission)

15. Retention periods

We store personal data only for as long as necessary for the purposes described in this Privacy Policy, unless legal retention obligations or legitimate interests require a longer retention period.

Typical retention periods include:

website log data: only as long as necessary for security and technical operation;

contact inquiries: until the inquiry has been completed, plus a reasonable follow-up period;

client and contract data: for the duration of the business relationship and statutory retention periods;

invoice and accounting records: according to applicable commercial and tax retention obligations;

candidate data: for as long as necessary for the recruitment purpose, talent pool relationship or legal defense purposes, unless you request deletion earlier and no legal grounds require continued storage;

newsletter data: until you unsubscribe or withdraw consent.

16. Your rights

Under the GDPR, you have the following rights, subject to the legal requirements:

the right of access under Art. 15 GDPR;

the right to rectification under Art. 16 GDPR;

the right to erasure under Art. 17 GDPR;

the right to restriction of processing under Art. 18 GDPR;

the right to data portability under Art. 20 GDPR;

the right to object under Art. 21 GDPR;

the right to withdraw consent at any time under Art. 7(3) GDPR;

the right to lodge a complaint with a supervisory authority under Art. 77 GDPR.

To exercise your rights, contact us at:

datenschutz@kvn-international.com

17. Right to object

Where we process personal data based on legitimate interests under Art. 6(1)(f) GDPR, you may object to this processing at any time for reasons arising from your particular situation.

If your personal data is processed for direct marketing purposes, you may object at any time without giving reasons. We will then stop processing your personal data for direct marketing purposes.

18. Data security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. These measures include access controls, secure systems, confidentiality obligations and data minimization practices.

However, no internet-based transmission or storage system can be guaranteed to be completely secure.

19. No automated decision-making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, website, technologies or legal requirements. The current version is always available on our website.

Before publishing, I would have a data protection lawyer quickly verify the exact tools used on the site, especially Jimdo/hosting, Google Analytics, Calendly, LinkedIn, YouTube embeds, CRM/ATS and newsletter tools, because the policy should match the real tracking and processor setup exactly.