Privacy policy

1. Who is responsible for data processing?

 

Responsible for the processing of your personal data is:

 

REWE digital GmbH

Domstrasse 20

50668 Cologne

 

Telephone: +49 221 149-0

E-mail: info@rewe-group.com

 

2. Who can you contact if you have questions about data processing?

 

You can reach the data protection officer of the data controller at:

 

REWE digital GmbH
Data Protection Officer
Domstraße 20

50668 Cologne

 

E-mail: dsb-digital@rewe-group.com

 

3. What data is processed for what purpose and on what legal basis?

 

3.1 Visiting the website

Each time you visit our website, your browser automatically transmits data that is stored in the server's log files. This involves the following data ("log files data"):

 

- Information about the browser type and browser version used,

- the page that was called up

- the page from which the website was accessed,

- Scope of the transmitted data,

- operating system of the user,

- Internet service provider and IP address of the user,

- date and time of the call.

 

We analyze log file data anonymously in order to continuously improve the website, to adapt the website to the interests of our users and to correct errors more quickly. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 letter f DSGVO.

 

In non-anonymized form, the log file data is used exclusively to identify malfunctions and to ensure system security, including the detection and tracking of unauthorized access attempts and attempts at fraud and abuse. This data processing is also carried out on the basis of a legitimate interest according to Art. 6 para. 1 letter f DSGVO.

 

3.2 Information, watch list and application

On our website rewe-digital.com you can find out about job opportunities and job offers at REWE digital. You can create a watch list with jobs that are of particular interest to you.

The list is saved locally in your browser and is available to you until you delete it in your browser settings. The watchlist is your personal selection from the diverse job offers of REWE digital.

 

If you would like to apply for a job online, you will be forwarded to the website karriere.rewe-group.com or to the applicant portal within REWE digital once you have clicked on the job. There you will find an online application system where you can also submit a speculative application. You will be informed separately about the data processing on karriere.rewe-group.com or in the REWE digital applicant portal.

 

Due to current circumstances, we also offer you the option of conducting the interview via Google Meet or Microsoft Teams.

 

We would like to point out that this is an offer and not an obligation. If you do not agree to the use of Google Meet or Microsoft Teams, this will not have any negative impact on the application process.

 

With regard to data processing by Google Ireland Limited or Microsoft, please refer to the corresponding data protection notices: https://policies.google.com/privacy or https://docs.microsoft.com/de-de/microsoftteams/teams-privacy.

 

If you have given your consent to this during the application process, we will store your application in our talent pool and contact you in the event of other vacancies that may match your profile.

If you have not revoked your consent, we will delete your data from the talent pool after 3 years from receipt of your consent. The legal basis for the described data processing is Art. 6 para. 1 letter a) DSGVO (consent of the data subject).

 

If you have given REWE digital permission to consider your data for further job offers, your data will be processed accordingly as part of this process.

 

In the case of applications for job advertisements of other REWE Group companies, such as REWE Wein Online GmbH, ZooRoyal Petcare GmbH, OC fulfillment GmbH and OC Payment GmbH, REWE digital Bulgaria processes your personal data on behalf of these companies by providing the online application systems for use by the HR employees of the above-mentioned companies.

 

Responsible for the application process is then

 

REWE Wein Online GmbH, Domstraße 20, 50668 Cologne, Germany or

ZooRoyal Petcare GmbH, Schanzenstraße 6-20, D-51063 Cologne or

OC fulfillment GmbH, Domstrasse 20, 50668 Cologne, Germany or

OC Payment GmbH, Domstrasse 20, 50668 Cologne, Germany or

REWE digital Bulgaria, 83 Nikola Gabrovski str., build.B, fl.2, 1700 Sofia

 

The aforementioned data protection information on applicant data processing applies to the processing of your data.

 

 

Legal bases for the described data processing are Art. 6 para. 1 letter b) DSGVO and § 26 para. 1 sentence 1 BDSG (decision on the establishment of an employment relationship) and Art. 6 para. 1 letter f) DSGVO (legitimate interest of REWE digital to provide you with a user-friendly website and to facilitate your job search).

 

3.3 Cookies and other technologies (website analysis / tracking)

We use cookies in some areas of our website, e.g. in order to recognize visitor preferences and to be able to design the website optimally accordingly. This enables easier navigation and a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website.

 

Cookies are small text files that are stored on the hard drive of your terminal device. They allow us to retain information for a certain period of time and to identify your terminal device. For better user guidance and individual performance presentation, we use permanent cookies. Furthermore, we use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies.

This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use certain functions of our website.

 

3.3.1 Necessary technologies

These services, technologies and cookies are necessary to ensure central functions of the portal and the fulfillment of contracts with customers and cooperation partners. They are used on the legal basis of § 25 para. 2 no. 2 TTDSG in conjunction with. Art. 6 para. 1 sentence 1 letter b) (contract initiation or fulfillment) and letter f) of the General Data Protection Regulation (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website as well as our interest in the economic use of partner sales channels. They can therefore not be deactivated via our Consent Management System and by you as a website user. These are the following / following services.

 

3.3.1.1 Tag Management System

The processing procedures within this category control the playout of services, technologies and cookies, without storing the data that is collected as part of these services. Similarly, no data is collected or stored by the tag management systems themselves. The system is used to technically implement your choice regarding privacy settings.

 

The following technologies and service providers are used for this purpose:

(e.g. Adobe Launch https://www.adobe.com/de/privacy/policy.html)

 

3.3.1.2 Consent Management Platform (CMP)

The processing procedures within this category allow users to individually control their data disclosure. The Consent Management Platform is used to query and document the user's decision and to transfer it to other systems.

 

The following technologies and service providers are used for this purpose:

 

Usercentrics (https://usercentrics.com/de/datenschutzerklaerung/)

 

3.3.1.3 Basic Web Analytics

The processing operations within this category are used for the following purposes: for non-personal traffic analysis, incident monitoring, alerting, fraud detection, IT management, reach measurement, product development and improvement, and navigation tracking.

 

The following technologies and service providers are used for this purpose:

 

e.g., Adobe Analytics (https://www.adobe.com/de/privacy/policy.html).

 

3.3.2 Statistics technologies

These services, technologies and cookies are needed to understand how our visitors use our portal, to detect errors and to continuously improve the portal. They are used on the basis of the legal basis § 25 para. 1 TTDSG (consent for the setting or reading of cookies) in conjunction with. Art. 6 para. 1 p. 1 lit. a) DSGVO (consent for the data processing based on it). The data processing only begins when you have given the corresponding opt-in. You can revoke the data processing at any time with effect for the future (see privacy settings). The revocation does not affect the lawfulness of the data processing carried out until the revocation.

 

The following technologies and service providers are used:

 

e.g. Google AdWords (https://policies.google.com/privacy?hl=de).

 

3.3.2.1 Performance measurement and optimization of marketing measures

The processing operations within this category are used to measure the success of specific marketing measures and to make deductions for optimized targeting.

 

The following technologies and service providers are used for this purpose:

 

E.g., Google Adwords Conversion Tag (https://policies.google.com/privacy?hl=de).

 

3.3.2.2 Cross domain analysis within the career websites of REWE Group

We use web analytics tools to tailor the design of our websites to meet the needs of our customers. Adobe Analytics creates usage profiles based on pseudonyms. For this purpose, cookies are stored on your terminal device and read by us. In this way, we are able to recognize returning visitors and count them as such. Furthermore, we combine this data with that of other career websites of REWE Group (REWE Markt GmbH, PENNY Markt GmbH, REWE digital GmbH, REWE Zentralfinanz eG, REWE Deutscher Supermarkt AG & Co. KGaA) together. This serves the purpose of being able to track your applicant journey across websites within REWE Group, to further optimize our career websites and to be able to offer you a better application process.

The following technologies and service providers are used for this purpose:

 

e.g. Adobe Analytics (https://www.adobe.com/de/privacy/policy.html).

 

3.3.3 Marketing technologies

These services, technologies and cookies are used to understand your interests and to play you individual content that is relevant to you. The use is based on the legal basis § 25 para. 1 TTDSG (consent for the setting or reading of cookies) in conjunction with. Art. 6 para. 1 p. 1 lit. a) DSGVO (consent for the data processing based on it). The data processing only begins when you have given the corresponding opt-in. You have the right to revoke your consent(s) at any time with effect for the future (see privacy settings).

The revocation does not affect the lawfulness of the processing of the data carried out until the revocation.

 

The following technologies and service providers are used:

 

e.g. Google Adwords (https://policies.google.com/privacy?hl=de).

 

3.3.3.1 Session monitoring

The processing operations within this category are used to understand the scrolling and clicking behavior of our visitors and to identify problems with the use of the website and display errors.

 

The following technologies and service providers are used for this purpose:

 

E.g. Mouseflow (https://mouseflow.com/de/privacy/).

 

3.3.3.2 Personal advertising and remarketing on third-party sites, social channels, search engines or sites of cooperation partners

The processing operations within this category are used to play interest-based advertising to the user on third-party sites, social media, search engines or sites of cooperation partners. This is intended to increase the content relevance of the advertising for our visitors.

 

The following technologies and service providers are used for this purpose:

 

Google Ads Tag (https://policies.google.com/privacy?hl=de)

 

3.4 YouTube video embedding

Videos from YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which are not stored on our servers, are embedded on our website.

 

Calling up our pages with embedded videos results in content being reloaded from the third-party provider that provides the videos. In this way, YouTube receives the usage data that is technically necessary in this context. We have no influence on the further data processing by the third-party provider. However, when embedding the videos, we made sure to activate the extended data protection mode offered by YouTube. The extended data protection mode means that the third-party provider does not set any cookies as long as the video is not clicked on.

 

The embedding of YouTube videos takes place on the basis of § 25 para. 2 no. 2 TTDSG in conjunction with. Art. 6 para. 1 p. 1 lit. f DSGVO (legitimate interest in an appealing design of the site, public relations and communication).

 

If you want to make sure that no cookies are set by YouTube, do not click on the embedded videos. For more information about the privacy policy of YouTube/Google, please click here: https://policies.google.com/privacy?hl=de&gl=de

 

3.5 Use of Google Maps

For the job search, we also use map material from Google Maps (Google Inc.) to display vacancies on an interactive map. As a result, information about the use of our job search, including your IP address, is transmitted to Google servers in the USA and stored there. This means that Google can store cookies on your computer as soon as you use the job search.

 

Cookies are small text files that are stored on your computer and can be saved by your browser. This data will not be merged with other data sources, unless this serves the fulfillment of a contract concluded with you, you have given your express permission for this or there is a legal or other basis for justification. If you call up a web page on our website that contains Google Maps, your browser can establish a direct connection with Google's servers. The map content is then transmitted by Google directly to your browser, which integrates it into the website. We have no influence on the data thus transmitted and the extent to which Google determines this. You can find out more about this in Google's privacy policy.

 

In your browser settings, you can determine whether the cookies described may be set by Google or not. Therefore, you as a user also have full control over the use of cookies. Already stored cookies can be deleted at any time. This can also be done automatically.

 

The provision and the corresponding processing of the data is carried out for us on the basis of § 25 para. 2 no. 2 TTDSG in conjunction with. Art. 6 para. 1 p. 1 letter f) of the General Data Protection Regulation. For the provision of the (technical) functionalities of the job search, we need your above-mentioned data. Otherwise, we cannot provide you with this functionality. These purposes are also our legitimate interest in processing the data according to Art. 6 (1) letter f DSGVO.

 

If you leave the website with the job search and delete the cookies, the respective collection of information or the collection of information will be stopped immediately.

 

 

3.6 Forwarding to social media services

On our website you will find links to the social media services of Facebook, Instagram, YouTube, kununu, Vimeo, Spotify, GitHub, Twitter, Meetup, LinkedIn and Xing. You can recognize links to the websites of the social media services by the respective company logo. If you follow these links, you will reach REWE digital's corporate presence on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This transmits to the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example:

- Address of the website on which the activated link is located.

- Date and time when the website was called up or the link was activated

- Information about the browser and operating system used

- IP address

 

If you are already logged in to the corresponding social media service at the time the link is activated, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.

 

The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as they do in the member states of the European Union.

 

We have no influence on the scope, type and purpose of data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service.

 

4. Is there an obligation to provide the data?

 

The provision of your data is not required by law. However, some of the aforementioned data is required to (technically) enable the use of our website.

 

 

5. Is there any automated processing for profiling?

 

Your personal data will not be used for automated decision making or profiling.

 

 

6. Who has access to your data and for what reason?

 

Within REWE digital, only persons who need your data to perform the tasks assigned to them will have access to it. Outside of REWE digital, service providers who support us in fulfilling our tasks may have access to your data. These are service providers in the following categories:

 

- Hosting service providers for the operation of our servers

- Development service providers for programming, development, maintenance and support of software applications

- Analysis service providers for the evaluation of data and analysis of the use of electronic media

- Vendors/recipients of data mentioned in this privacy policy usually cookies and other technologies

- Postal service providers for verification, correction or completion of address data

- E-mail delivery service providers for sending e-mails

- Service providers for the provision of survey tools

- HR service providers for support in the selection of applicants

- Service providers whose application tool we have integrated on our website for online applications

 

Service providers used by us must meet special confidentiality requirements. They are only granted access to your data to the extent and for the period of time required to perform their tasks.

 

In case of suspicion of a criminal offense, we may disclose your data to law enforcement authorities (police, public prosecutor's office).

 

 

7. Is data processed outside the European Union?

 

For the processing of your data, we may also use service providers located in third countries outside the European Union. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection. We have therefore taken special measures to ensure that your data is processed in the third countries as securely as within the European Union. With service providers in third countries, we conclude the data protection contract (standard data protection clauses) provided by the Commission of the European Union for the processing of personal data in third countries. This provides appropriate safeguards for the protection of your data with service providers in the third country. For further information, please contact the contact persons mentioned under 2.

 

 

8. How long will the data be stored?

 

In principle, we store your data only as long as we need them for the respective processing purposes. If the data is no longer required for the fulfillment of the processing purposes stated in this data protection information, it will be deleted, unless its retention is still necessary for the fulfillment of commercial or tax retention obligations. As a rule, we delete your data after these periods or determine the deletion period according to these criteria:

 

- We store your IP address for 7 days and then delete it. Log file data whose further storage is necessary for evidentiary purposes are exempt from deletion until final clarification of the respective incident.

- Data relating to an application for an advertised position six months after completion of the application process in our online application tools.

- Data of the services, technologies and cookies mentioned under 3.3 usually after six years at the latest.

 

9 What rights do you have?

 

9.1 Information

You can request information about your personal data processed by us.

 

 

9.2 Correction

You can request the correction of your data if your information is not (or no longer) correct. If your data is incomplete, you can request that it be completed.

 

 

9.3 Deletion

You have the right to demand the deletion of your data. Please note that a claim for deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to retain your data.

 

 

9.4 Restriction of processing

You have the right to request the restriction of the processing of your data. Please note that a claim to restriction of processing depends on the existence of a legitimate reason.

 

 

9.5 Objection

You have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data.

 

 

9.6 Right of complaint

You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

 

 

9.7 Data portability

You have the right to receive personal data that you have provided to us in an electronic format.

 

 

9.8 Revocation of your consent

You can revoke your consent to data processing at any time with effect for the future (see privacy settings, among other things). The revocation does not affect the lawfulness of the processing of the data carried out until the revocation.