Privacy policy
1. Who is responsible for data processing?
Responsible for the processing of your personal data is the:
REWE digital GmbH
Domstrasse 20
50668 Cologne
Phone: +49 221 149-0
E-mail: info@rewe-group.com
2. Who can you contact if you have questions about data processing?
You can reach the data protection officer of the controller at
REWE digital GmbH
Data Protection Officer
Domstraße 20
50668 Cologne
E-mail: dsb-digital@rewe-group.com
3. What data is processed for what purpose and on what legal basis?
3.1 Visit the website
Each time you visit our website, your browser automatically transmits data that is stored in the server's log files. This involves the following data ("log files data"):
• Information about the browser type and version used,
• the page that was accessed,
• the page from which the website was accessed,
• Scope of the transmitted data,
• Operating system of the user,
• Internet service provider and IP address of the user,
• Date and time of the call.
We have log file data analyzed anonymously in order to continuously improve the website, to adapt the website to the interests of our users and to rectify errors more quickly. These purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR.
In non-anonymized form, the log file data is used exclusively to investigate malfunctions and to ensure system security, including detecting and tracking unauthorized access attempts and attempts at fraud and misuse. This data processing is also carried out on the basis of a legitimate interest pursuant to Art. 6 (1) (f) GDPR.
3.2 Information, watch list and application
On our website rewe-digital.com you can find out about job opportunities and job offers at REWE digital. You can create a watch list with jobs that are of particular interest to you.
The list is saved locally in your browser and is available to you until you delete it in your browser settings. The watch list is your personal selection from REWE digital's wide range of job offers.
If you would like to apply for a job online, you will be directed to the website karriere.rewe-group.com or to the applicant portal within REWE digital https://rewe-digital.dvinci-hr.com/ weitergeleitet once you have clicked on the job. An online application system is available there, where you can also submit a speculative application. You will be informed separately about data processing on karriere.rewe-group.com or in the REWE digital applicant portal.
Due to the current situation, we also offer you the option of conducting the interview via Google Meet or Microsoft Teams.
We would like to point out that this is an offer and not an obligation. If you do not agree to the use of Google Meet or Microsoft Teams, this will have no negative impact on the application process.
With regard to data processing by Google Ireland Limited or Microsoft, we refer to the corresponding data protection notices: https://policies.google.com/privacy or https://docs.microsoft.com/de-de/microsoftteams/teams-privacy
If you have given your consent to this as part of the application process, we will save your application in our talent pool and contact you in the event of other vacancies that may match your profile.
If you have not withdrawn your consent, we will delete your data from the talent pool 3 years after receiving your consent. The legal basis for the data processing described is Art. 6 (1) (a) GDPR (consent of the data subject).
If you have allowed REWE digital to consider your data for further job offers, your data will be processed accordingly as part of this process.
In the case of applications for job advertisements of other REWE Group companies, such as REWE Wein Online GmbH, ZooRoyal Petcare GmbH, OC fulfillment GmbH and OC Payment GmbH, REWE digital Bulgaria, REWE digital GmbH processes your personal data on behalf of these companies by providing the online application systems for use by the HR employees of the above-mentioned companies.
Responsible for the application process is then the
REWE Wein Online GmbH, Domstraße 20, 50668 Cologne or
ZooRoyal Petcare GmbH, Schanzenstraße 6-20, D-51063 Cologne or
OC fulfillment GmbH, Domstraße 20, 50668 Cologne or
OC Payment GmbH, Domstraße 20, 50668 Cologne or
REWE digital Bulgaria, 83 Nikola Gabrovski str., build.B, fl.2, 1700 Sofia
The aforementioned data protection information on applicant data processing applies to the processing of your data.
The legal basis for the described data processing is Art. 6 para. 1 letter b) GDPR and § 26 para. 1 sentence 1 BDSG (decision on the establishment of an employment relationship) and Art. 6 para. 1 letter f) GDPR (legitimate interest of REWE digital to provide you with a user-friendly website and to facilitate your job search).
3.3 Cookies and other technologies (website analysis / tracking)
We use cookies in some areas of our website, e.g. to recognize the preferences of visitors and to design the website accordingly. This facilitates navigation and a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website.
Cookies are small text files that are stored on the hard disk of your end device. They make it possible to store information for a certain period of time and to identify your end device. We use permanent cookies to improve user guidance and individual performance. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser so that it informs you about the placement of cookies.
This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use certain functions of our website.
Depending on the purpose of the cookies and other technologies, we differentiate between necessary, statistical and marketing cookies.
The necessary cookies and other technologies are required to ensure central functions of the website and the fulfillment of contracts with customers and cooperation partners. They are used on the legal basis of Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 para. 1 sentence 1 letter b) (contract initiation or fulfillment) and letter f) General Data Protection Regulation (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website. You can therefore not be deactivated by you as a website user via our Consent Management System. All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.
Statistical cookies and other technologies are required to understand the use of our portal by our visitors, to recognize errors and to continuously improve the portal. They are used on the legal basis of Section 25 (1) TDDDG (consent to the setting or reading of cookies) in conjunction with Art. 6 (1) sentence 1 lit. a) GDPR (consent to the use of cookies). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation. All cookies and other technologies are described in detail in the cookie banner under the services. You can view this at any time in the "Privacy settings" in the footer of the website or you can click directly here.
You can also revoke your consent at any time in the privacy settings.
The marketing cookies and other technologies are used to understand your interests and to display personalized content that is relevant to you. They are used on the legal basis of Section 25 (1) TDDDG (consent to the setting or reading of cookies) in conjunction with Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation.
All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.
You can also revoke your consent at any time in the privacy settings.
3.4 YouTube video embedding
Our website includes videos from YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which are not stored on our servers.
When you access our pages with embedded videos, the content of the third-party provider that makes the videos available is reloaded. As a result, YouTube receives, above all, the usage data technically required in this context. We have no influence on further data processing by the third-party provider. However, when embedding the videos, we have made sure to activate the extended data protection mode offered by YouTube. The extended data protection mode means that the third-party provider does not set any cookies unless the video is clicked on.
The embedding of YouTube videos takes place on the basis of Section 25 (2) No. 2 TDDDG in conjunction with Art. Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest in an appealing design of the site, in public relations and communication).
If you want to make sure that no cookies are set by YouTube, do not click on the embedded videos. You can find more information about YouTube/Google's privacy policy here: https://policies.google.com/privacy?hl=de&gl=de
3.5 Use of Google Maps
For the job search, we also use map material from Google Maps (Google Inc.) to display job vacancies on an interactive map. As a result, information about the use of our job search, including your IP address, is transferred to Google servers in the USA and stored there. This means that Google can store cookies on your computer as soon as you use the job search.
Cookies are small text files that can be stored on your computer and saved by your browser. This data will not be merged with other data sources unless this serves to fulfill a contract concluded with you, you have given your express permission for this or there is a legal or other justification. When you access a web page on our website that contains Google Maps, your browser can establish a direct connection with Google's servers. The map content is then transmitted by Google directly to your browser, which integrates it into the website. We have no influence on the data transmitted in this way and the scope that Google determines. You can find out more about this in Google's privacy policy.
In your browser settings, you can specify whether or not the cookies described may be set by Google. As a user, you therefore also have full control over the use of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically.
The provision and the corresponding processing of the data is carried out for us on the basis of § 25 para. 2 no. 2 TDDDG in conjunction with Art. 6 para. 1 sentence 1 lit. f) GDPR. Art. 6 para. 1 sentence 1 lit. f) General Data Protection Regulation. We need your above-mentioned data to provide the (technical) functionalities of the job search. Otherwise we cannot provide you with this functionality. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 (1) (f) GDPR.
If you leave the job search website and delete the cookies, the respective collection of information will be stopped immediately.
3.6 Forwarding to social media services
On our website you will find links to the social media services of Facebook, Instagram, YouTube, kununu, Vimeo, Spotify, GitHub, Twitter, Meetup, LinkedIn and Xing. You can recognize links to the websites of the social media services by the respective company logo. If you follow these links, you will reach REWE digital's corporate presence on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This tells the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example
• Address of the website on which the activated link is located
• Date and time the website was accessed or the link was activated
• Information about the browser and operating system used
• IP address
If you are already logged in to the relevant social media service when you activate the link, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.
The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries may be subject to data protection laws that do not generally protect personal data to the same extent as is the case in the Member States of the European Union.
We have no influence on the scope, type and purpose of data processing by the provider of the social media service. You can find more information on the use of your data by the social media services integrated on our website in the privacy policy of the respective social media service.
4. Is there an obligation to provide the data?
The provision of your data is not required by law. However, some of the data mentioned is required to (technically) enable the use of our website.
5. Is there automated processing for profiling?
Your personal data will not be used for automated decision-making or profiling.
6. Who has access to your data and for what reason?
Within REWE digital, only persons who need your data to carry out the tasks assigned to them will have access to it. Outside of REWE digital, service providers who support us in the fulfillment of our tasks may have access to your data. These are service providers in the following categories:
• Hosting service provider for the operation of our servers
• Development service provider for programming, development, maintenance and support of software applications
• Analysis service provider for the evaluation of data and analysis of the use of electronic media
• The vendors/recipients of data mentioned in this privacy policy usually cookies and other technologies
• Postal service provider for the verification, correction or completion of address data
• E-mail dispatch service provider for sending e-mails
• Service provider for the provision of survey tools
• HR service provider to support the selection of applicants
• Service providers whose application tool we have integrated on our website for online applications
Service providers used by us must meet special confidentiality requirements. They will only have access to your data to the extent and for the period of time required to fulfill their tasks.
If a criminal offense is suspected, we may pass on your data to law enforcement authorities (police, public prosecutor's office).
7. Is data processed outside the European Union?
We may also use service providers located in third countries outside the European Union to process your data. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection. We have therefore taken special measures to ensure that your data is processed just as securely in third countries as it is within the European Union. We conclude the data protection contract (standard data protection clauses) provided by the Commission of the European Union for the processing of personal data in third countries with service providers in third countries. This provides suitable guarantees for the protection of your data with service providers in the third country. For further information, please get in touch with the contact persons listed under 2.
8. How long will the data be stored?
We only store your data for as long as we need it for the respective processing purposes. If the data is no longer required for the fulfillment of the processing purposes stated in this data protection information, it will be deleted, unless its retention is still necessary to fulfill commercial or tax retention obligations. As a rule, we delete your data after these periods or determine the deletion period according to these criteria:
• We store your IP address for 7 days and then delete it. Log file data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified
• Data relating to an application for an advertised position six months after completion of the application process in our online application tools
• data of the services, technologies and cookies mentioned under 3.3 after six years at the latest.
9. What rights do you have?
9.1 Information
You can request information about your personal data processed by us.
9.2 Correction
You can request the correction of your data if your details are not (or are no longer) correct. If your data is incomplete, you can request that it be completed.
9.3 Deletion
You have the right to request the deletion of your data. Please note that a right to erasure depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to store your data.
9.4 Restriction of processing
You have the right to request the restriction of the processing of your data. Please note that a right to restriction of processing depends on the existence of a legitimate reason.
9.5 Contradiction
You have the right to object, on grounds relating to your particular situation, to processing of your data which is based on point (f) of Article 6(1) sentence 1 or point (e) of Article 6(1) sentence 1 GDPR. In the event of a justified objection, we will no longer process your data.
9.6 Right of appeal
You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
9.7 Data portability
You have the right to receive personal data that you have provided to us in an electronic format.
9.8 Revocation of your consent
You can revoke your consent to data processing at any time with effect for the future (see privacy settings). The revocation does not affect the legality of the data processing carried out until the revocation.