Privacy policy
Privacy policy for your online application on our website
(04.10.2022)
This information gives you an overview of the processing of your personal data when you submit an application after visiting our website https://www.rewe-digital.com/stellenangebote and clicking on the "Go to application form" button in our online application system.
We hereby inform you about the data we collect from you and how we use it. In addition, we inform you about your rights under applicable data protection law and tell you who you can contact if you have any questions.
1. Who is responsible for data processing?
The REWE Group company whose job advertisement you are applying for is responsible for processing your personal data when using our online application system. These can be:
REWE digital GmbH („REWE“), Domstraße 20, D-50668 Cologne or
REWE Wein Online GmbH, Domstraße 20, D-50668 Cologne or
ZooRoyal Petcare GmbH, Schanzenstraße 6-20, D-51063 Cologne or
OC fulfillment GmbH, Domstraße 20, D-50668 Cologne or
OC Payment GmbH, Domstraße 20, D-50668 Cologne
2. Who can you contact with questions about data processing?
You can address questions regarding the processing of your data to the data protection officer at any time. You can reach the data protection officer of the data controller at: e-mail: dsb-digital@rewe-group.com Phone: +49 221 149-0
3. What data do we process from you?
We process your personal data when you enter our online application system for online applications after visiting our website https://www.rewe-digital.com/stellenangebote and clicking on the "go to application form" button there. In detail, this can be the following data:
-
Technical data that is generated when you use our website https://rewe-digital.dvinci-hr.com/ (page viewed, the date and time of the page view, the duration of the visit, the recognition data of the browser and operating system type used, and the website from which you accessed the data entry page).
-
Data that you enter into our application form and upload there:
-
Your name (first name, last name)
-
Your e-mail address
-
Your telephone number
-
If applicable (optional) link to your online profile (e.g. XING, LinkedIn) and the profile data located there
-
Your salary expectations
-
Your English language skills (written and spoken) on a scale from 1 to 5
-
The quality of your German language skills (spoken and written) on a scale from 1 to 5.
-
Whether we have been recommended to you by our employees
-
Your comments on your application (optional):
-
Your application documents (e.g. CV and references)
-
Your application photo (optional)
-
How you became aware of us
-
-
Data that we need to prove your consent, e.g. when you join the talent pool
4. Is there an obligation to provide the data?
The provision of your data is not required by law. However, some of the data mentioned is required in order to be able to submit an application and, if applicable, to be included in the talent pool. This data is marked as mandatory. Failure to provide required data will result in an application not being able to be submitted on our website. We will – if the hiring company differs from REWE digital GmbH – pass on your applicant data to the REWE Group company that has advertised the position for which you are applying online in order to carry out the selection process and conclude the employment contract. Inclusion in the talent pool is voluntary and only takes place with your consent.
5. For what purposes do we process your data and what is the legal basis for this?
5.1 Implementation of the application process
We process your applicant data that you enter in the online application for the purpose of implementing the application process. The transmission of your data and the file attachments sent with the application is carried out via an encrypted connection. Your data will be received by the personnel department and forwarded to the specialist department responsible for the advertised position or to the persons entrusted with handling the application procedure at the responsible REWE Group companies. The same applies if you send us an application by e-mail or post. All parties involved will treat your application documents with due care and confidentiality. The legal basis for the data processing described above is Art. 6 Para. 1 Letter b DSGVO and Section 26 Para. 1 Sentence 1 BDSG (implementation of the application procedure, decision on the establishment of an employment relationship),
5.2 If you have given us your consent, we process your data in our talent pool so that the aforementioned responsible employer companies REWE digital GmbH, REWE Wein Online GmbH, ZooRoyal Petcare GmbH, OC fulfilment GmbH and OC Payment GmbH can access the data as soon as a job is offered that matches the profile of the applicant from the talent pool and we can contact you to find out whether you are interested in the job. The legal basis for this data processing is Art. 6 para. 1 a DSGVO (consent).
5.3 If we conclude an employment contract with you, we will process your data for the purpose of the employment relationship if this is necessary for its implementation or termination. The legal basis for the described data processing is Art. 6 para. 1 letter b DSGVO and § 26 para. 1 sentence 1 BDSG (implementation of the employment relationship).
5.4 Defence of legal claims
We process your data insofar as this is necessary for the defence of asserted legal claims from the application process. The legal basis for this is Art. 6 para. 1 letter f DSGVO (balancing of interests, based on the interest of the REWE Group company to which you have applied for a job, to be able to defend claims in proceedings under the General Equal Treatment Act).
5.5 Web server logs
When you visit our websites, we process the connection data of the requesting computer including the IP address, the websites you visit, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard to ensure the security of our IT systems. The legal basis for the data processing described above is Article 6 (1) (f) of the General Data Protection Regulation (balancing of interests, based on REWE's interest in ensuring the security of IT systems).
We also convert the IP address transmitted by your computer into geo-coordinates and determine your approximate location. We do not determine your exact location. We process the data to compile statistics on how our website is used and to measure the success of our employer advertising campaigns in certain regions. The legal basis for the data processing described above is Article 6(1)(f) of the General Data Protection Regulation (balancing of interests, based on REWE's interest in measuring the success of employer advertising campaigns).
5.6 Cookies and other technologies (website analysis/tracking)
We use cookies in some areas of our website, e.g. in order to recognise visitors' preferences and to be able to optimally design the website accordingly. This enables easier navigation and a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website.
Cookies are small text files that are stored on the hard drive of your terminal device. They allow us to retain information for a certain period of time and to identify your end device. We use permanent cookies for better user guidance and individual performance presentation. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser so that it informs you about the placement of cookies.
This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use certain functions of our website.
5.6.1 Necessary technologies
These services, technologies and cookies are necessary to ensure central functions of the portal as well as the fulfilment of contracts with customers and cooperation partners. They are used on the legal basis of § 25 para. 2 no. 2 TTDSG in conjunction with. Art. 6 para. 1 sentence 1 letter b) (contract initiation or fulfilment) and letter f) of the General Data Protection Regulation (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website as well as our interest in the economic use of partner sales channels. They can therefore not be deactivated via our Consent Management System or by you as a website user. These are the following services.
5.6.1.1 Tag Management System
The processing operations within this category control the playout of services, technologies and cookies without storing the data collected as part of these services. Similarly, no data is collected or stored by the tag management systems themselves. The system is used to technically implement your choice regarding privacy settings.
The following technologies and service providers are used:
e.g. Adobe Launch (https://www.adobe.com/de/privacy/policy.html)
5.6.1.2 Consent Management Platform (CMP)
The processing procedures within this category enable the user to individually control his or her data transfer. The Consent Management Platform is used to query and document the user's decision and to transfer it to other systems.
The following technologies and service providers are used:
Usercentrics (https://usercentrics.com/de/datenschutzerklaerung/)
5.6.1.3 Basic web analytics
The processing operations within this category are used for the following purposes: for non-personal traffic analysis, incident monitoring, alerting, fraud detection, IT management, reach measurement, product development and improvement, and navigation tracking.
The following technologies and service providers are used:
e.g. Adobe Analytics (https://www.adobe.com/de/privacy/policy.html)
5.6.2 Statistical technologies
These services, technologies and cookies are needed to understand how our visitors use our portal, to detect errors and to continuously improve the portal. They are used on the basis of the legal basis § 25 para. 1 TTDSG (consent for the setting or reading of cookies) in conjunction with. Art. 6 para. 1 p. 1 lit. a) DSGVO (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke the data processing at any time with effect for the future (see privacy settings). The revocation does not affect the lawfulness of the data processing carried out until the revocation.
The following technologies and service providers are used:
e.g. Google AdWords (https://policies.google.com/privacy?hl=de)
5.6.2.1 Measuring success and optimising marketing measures
The processing procedures within this category are used to measure the success of specific marketing measures and to make deductions for optimised control.
The following technologies and service providers are used for this purpose:
e.g. Google Adwords Conversion Tag (https://policies.google.com/privacy?hl=de)
5.6.2.2 Cross domain analysis within the career websites of REWE Group
We use web analytics tools to design our websites to meet the needs of our customers. Adobe Analytics creates usage profiles on the basis of pseudonyms. For this purpose, cookies are stored on your end device and read by us. In this way, we are able to recognise returning visitors and count them as such. Furthermore, we combine this data with that of other career websites of REWE Group (REWE Markt GmbH, PENNY Markt GmbH, REWE digital GmbH, REWE Zentralfinanz eG, REWE Deutscher Supermarkt AG & Co. KGaA) together. This serves the purpose of being able to track your applicant journey across all websites within REWE Group, to further optimise our career websites and to be able to offer you a better application process.
The following technologies and service providers are used:
e.g. Adobe Analytics (https://www.adobe.com/de/privacy/policy.html)
5.6.3 Marketing technologies
These services, technologies and cookies are used to understand your interests and to play you individual content that is relevant to you. The use is based on the legal basis § 25 para. 1 TTDSG (consent for the setting or reading of cookies) in conjunction with. Art. 6 para. 1 p. 1 lit. a) DSGVO (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You have the right to revoke your consent(s) at any time with effect for the future (see privacy settings).
The revocation does not affect the lawfulness of the data processing carried out until the revocation.
The following technologies and service providers are used:
e.g. Google Adwords (https://policies.google.com/privacy?hl=de)
5.6.3.1 Session Monitoring
The processing operations within this category are used to understand the scrolling and clicking behaviour of our visitors and to identify website usage problems and display errors.
The following technologies and service providers are used for this purpose:
e.g. Mouseflow (https://mouseflow.com/de/privacy/)
5.6.3.2 Personal advertising and remarketing on third-party sites, social channels, search engines or sites of cooperation partners
The processing operations within this category are used to play interest-based advertising to the user on third-party sites, social media, search engines or sites of cooperation partners. This is to increase the content relevance of the advertising for our visitors.
The following technologies and service providers are used for this purpose:
Google Ads Tag (https://policies.google.com/privacy?hl=de)
Adform (https://site.adform.com/policies/policies-and-guidelines/)
6. Who has access to your data and for what reason?
Within the REWE Group company to which you are applying for a job, only persons who need your data to carry out the tasks assigned to them will have access to it. This mainly concerns employees in the personnel department.
If you apply to REWE Wein Online GmbH, ZooRoyal Petcare GmbH, OC fulfilment GmbH and OC Payment GmbH and REWE digital acts as a service provider for these REWE Group companies, REWE digital GmbH has access to your data for the purpose of providing the online application system and managing the talent pool. If you have given your consent to be included in the talent pool, all the aforementioned REWE Group companies can access your data in order to contact you if a suitable job is available. In addition, service providers who support us in the fulfilment of our tasks may have access to your data. These are service providers in the following categories:
- Hosting service providers for the operation of our servers
- Development service providers for programming, development, maintenance and support of software applications, in particular the online application system
- IT service providers for the support and provision of our services
- Personnel service providers to assist in the selection of applicants
Service providers used by us must comply with special confidentiality requirements. They will only have access to your data to the extent and for the period of time that is necessary for the fulfilment of their tasks.
7. Where do we get your data from?
We collect your applicant data directly from you.
8. Is data processed outside the European Union?
Your applicant data will not be transferred to third countries.
9. How long will the data be stored?
- We store your data for as long as is necessary for the decision on your application. If an employment relationship does not materialise, we store the application data for six months after notification of the rejection decision, after which it is deleted, unless longer storage is required due to legal disputes or is legitimised with your consent in the talent pool. If we conclude an employment contract with you, we transfer your data from the online application system to our personnel management system. We automatically delete the data in the talent pool after 3 years.
In the event of an earlier revocation of the declaration of consent, the data will be deleted within one week of receipt of the revocation.
10. What rights do you have?
10.1 Information
You can request information about your personal data processed by us.
10.2 Correction
If your details are not (or no longer) correct, you can request that your data be corrected. If your data is incomplete, you can request that it be completed.
10.3 Deletion
You have the right to request the deletion of your data. Please note that a claim for deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to retain your data.
10.4 Restriction of processing
You have the right to request the restriction of the processing of your data. Please note that a claim to restriction of processing depends on the existence of a legitimate reason.
10.5 Objection
You have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data. Furthermore, an objection is only possible if we process your data on the legal basis of our overriding legitimate interests (Art. 6 para. 1 lit. f DSGVO).
10.6 Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
10.7 Data portability
You have the right to receive personal data that you have provided to us in an electronic format.
10.8 Withdrawal of your consent
You have the right to withdraw your consent to the processing of your data, which you have given us, at any time. This also applies to the revocation of declarations of consent that you gave to us before the General Data Protection Regulation came into force, i.e. before 25 May 2018. The easiest way to revoke your consent is to send an email to the contact details above. The revocation of consent does not affect the lawfulness of the processing of your data carried out until the revocation.