Privacy policy Data protection information for your online application on our website https://www.rewe-digital.com/en/jobs
Status 05.06.2023
This information provides you with an overview of the processing of your personal data when you visit our website and when you submit an application for a position you have selected by clicking on the "Apply now" button on our website. We hereby inform you about what data we collect from you and how we use it. We also inform you about your rights under applicable data protection law and tell you who you can contact if you have any questions.
1. Who is responsible for data processing?
Responsible for the processing of your personal data is REvisionsverband der WEstkauf-Genossenschaften digital Spain, S.L. Calle Iván Pavlov 8, Bloque 1, Alta H ▪ 29590 Málaga, Spain
2. Who can you contact if you have questions about data processing?
You can address questions about the processing of your data to the controller at any time. REvisionsverband der WEstkauf-Genossenschaften digital Spain, S.L. Calle Iván Pavlov 8, Bloque 1, Alta H ▪ 29590 Málaga, Spain Data security coordinator: Julio Sorroche Garcia E-mail: julio.sorrochegarcia@rewe-group.com
3. What data do we process from you?
We process your personal data when you visit our website https://www.rewe-digital.com/de/jobs?range=25&sort=distance&city[]=M%C3%A1laga&page=1 and click on the "Apply now" button for the online application. In detail, this can be the following data:
● Technical data that is generated when you use our website https://rewe-digital.dvinci-hr.com/ (the page accessed, the date and time the page was accessed, the duration of the visit, the identification data of the type of browser and operating system used and the website from which you accessed the data entry page)
● Data that you enter in our application form and upload there:
● Your name (first name, surname)
● Your e-mail address
● Your phone number
● If applicable (optional) link to your online profile (e.g. XING, LinkedIn) and the profile data located there o Your salary expectations
● Quality of your English language skills (written and spoken) on a scale of 1 to 5
● whether we have been recommended to you by our employees
● Your comment on your application (optional):
● Your application documents (e.g. CV and certificates)
● Your application photo (optional)
● how you became aware of us
● Data that we require as proof of your consent, e.g. for inclusion in the talent pool
4. Is there an obligation to provide the data?
The provision of your data is not required by law. However, some of the data mentioned is required in order to be able to submit an application and possibly be included in the talent pool. These data are marked as mandatory fields. If you do not provide the required data, you will not be able to submit an application on our website. The additional inclusion in the talent pool is voluntary and only takes place with your consent.
5. For what purposes do we process your data and on what legal basis does this take place?
5.1 Implementation of application procedures We process your applicant data, which you enter in the online application, for the purpose of carrying out the application procedure. The transmission of your data and the file attachments sent with it takes place via an encrypted connection. All parties involved will treat your application documents with due care and confidentiality. The legal basis for the data processing described is Art. 6 para. 1 letter b GDPR and § 26 para. 1 sentence 1 BDSG (implementation of the application procedure, decision on the establishment of an employment relationship).
5.2 If you have given us your consent, we will process your data in our talent pool so that the aforementioned controller can access the data as an employer as soon as a job is offered that matches the profile of the applicant from the talent pool and we can contact you to see if you are interested in the position. The legal basis for this data processing is Art. 6 para. 1 a GDPR (consent).
5.3 If we conclude an employment contract with you, we will continue to process your data for the purposes of the employment relationship if this is necessary for its implementation or termination. The legal basis for the data processing described is Art. 6 para. 1 letter b GDPR and Section 26 para. 1 sentence 1 BDSG (implementation of the employment relationship).
5.4 Defense against legal claims We process your data insofar as this is necessary to defend against legal claims asserted in the application process. The legal basis for this is Art. 6 para. 1 letter f GDPR (balancing of interests, based on the interest of the controller to whom you have applied for a job to be able to defend against claims in proceedings under the General Equal Treatment Act).
5.5 Web server logs When you visit our websites, we process the connection data of the requesting computer including the IP address, the websites you visit, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard to ensure the security of our IT systems.
The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (balancing of interests based on the interests of the controller to ensure the security of IT systems).
We also convert the IP address transmitted by your computer into geo-coordinates and determine your approximate location. Your exact location is not determined. We process the data in order to compile statistics on how our website is used and to measure the success of our employer advertising campaigns in certain regions. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (balancing of interests based on REWE's interest in measuring the success of employer advertising campaigns).
5.6 Cookies and other technologies (website analysis/tracking) We use cookies in some areas of our website, e.g. to recognize visitor preferences and to be able to design the website accordingly. This facilitates navigation and a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website.
Cookies are small text files that are stored on the hard disk of your end device. They make it possible to store information for a certain period of time and to identify your end device. We use permanent cookies to improve user guidance and individual performance. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use individual functions of our website.
5.6.1 Necessary technologies
These services, technologies and cookies are necessary to ensure central functions of the portal and the fulfillment of contracts with customers and cooperation partners. They are used on the legal basis of Section 25 (2) no. 2 TTDSG in conjunction with Art. 6 para. 1 sentence 1 letter b) (contract initiation or fulfillment) and letter f) General Data Protection Regulation (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website and our interest in the economic use of partner sales channels. They can therefore not be deactivated via our consent management system or by you as a website user. These are the following services.
5.6.1.1 Tag Management System
The processing operations within this category control the delivery of services, technologies and cookies without storing the data collected as part of these services. At the same time, no data is collected or stored by the tag management systems themselves. The system is used to technically implement your choice regarding privacy settings.
The following technologies and service providers are used: e.g. Adobe Launch (https://www.adobe.com/de/privacy/policy.html)
5.6.1.2 Consent Management Platform (CMP)
The processing procedures within this category allow users to individually control their data transfer. The Consent Management Platform is used to query and document the user's decision and transfer it to other systems.
The following technologies and service providers are used: Usercentrics (https://usercentrics.com/de/datenschutzerklaerung/)
5.6.1.3 Basic web analytics
The processing operations within this category are used for the following purposes: non-personal traffic analysis, incident monitoring, alerting, fraud detection, IT management, reach measurement, product development and improvement and navigation tracking.
The following technologies and service providers are used: e.g. Adobe Analytics (https://www.adobe.com/de/privacy/policy.html)
5.6.2 Statistical technologies
These services, technologies and cookies are required to understand the use of our portal by our visitors, to recognize errors and to continuously improve the portal. They are processed on the legal basis of Section 25 (1) TTDSG (consent to the setting or reading of cookies) in conjunction with Art. 6 (1) sentence 1 lit. a) GDPR (consent to the use of cookies). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future (see privacy settings). The revocation does not affect the legality of the data processing carried out until the revocation.
The following technologies and service providers are used: e.g. Google AdWords (https://policies.google.com/privacy?hl=de)
5.6.2.1 Performance measurement and optimization of marketing measures The processing procedures within this category are used to measure the success of specific marketing measures and to make deductions for optimized targeting.
The following technologies and service providers are used: e.g. Google Adwords Conversion Tag (https://policies.google.com/privacy?hl=de)
5.6.2.2 Cross domain analysis within the REWE Group career websites We use web analysis tools to design our websites in line with requirements. Adobe Analytics creates user profiles based on pseudonyms. For this purpose, cookies are stored on your end device and read by us. In this way, we are able to recognize returning visitors and count them as such. Furthermore, we merge this data with that of other career websites of the REWE Group (REWE Markt GmbH, PENNY Markt GmbH, REWE digital GmbH, REWE Zentralfinanz eG, REWE Deutscher Supermarkt AG & Co. KGaA). This serves the purpose of being able to track your applicant journey across websites within the REWE Group, to further optimize our career websites and to be able to offer you a better application process.
The following technologies and service providers are used: e.g. Adobe Analytics (https://www.adobe.com/de/privacy/policy.html)
5.6.3 Marketing technologies These services, technologies and cookies are used to understand your interests and to provide you with personalized content that is relevant to you. They are used on the legal basis of Section 25 (1) TTDSG (consent to the setting or reading of cookies) in conjunction with Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You have the right to withdraw your consent(s) at any time with effect for the future (see privacy settings). The revocation does not affect the legality of the data processing carried out up to the revocation.
The following technologies and service providers are used: e.g. Google Adwords (https://policies.google.com/privacy?hl=de)
5.6.3.1 Session monitoring
The processing operations within this category are used to understand the scrolling and clicking behavior of our visitors and to identify problems with the use of the website and display errors.
The following technologies and service providers are used: e.g. Mouseflow (https://mouseflow.com/de/privacy/)
5.6.3.2 Personal advertising and remarketing on third-party sites, social channels, search engines or sites of cooperation partners.
The processing operations within this category are used to display interest-based advertising to the user on third-party websites, social media, search engines or websites of cooperation partners. This is intended to increase the relevance of the content of the advertising for our visitors.
The following technologies and service providers are used: Google Ads Tag (https://policies.google.com/privacy?hl=de) Adform (https://site.adform.com/policies/policies-and-guidelines/)
6. Who has access to your data and for what reason?
Within the controller to whom you are applying for a job, only people who need your data to carry out the tasks assigned to them will have access to it. This mainly concerns employees in the HR department and managers. If you have given your cons of REWE Deutscher Supermarkt AG & Co. KGaA can access your data in order to contact you if a suitable job is available. In addition, other service providers who support us in the fulfillment of our tasks may have access to your data. These are service providers in the following categories:
● Hosting service provider for the operation of our servers, our website, our applicant tool
● Development service provider for programming, development, maintenance and support of software applications, in particular the online application system
● IT service provider to support and provide our services
● IT service providers who supply us with our applicant tool and talent pool
● If necessary, personnel service providers to support the selection of applicants
● Website technology service providers that you can view in the privacy settings (cookie banner) Service providers used by us must meet special confidentiality requirements. They will only have access to your data to the extent and for the period of time required to fulfill their tasks.
7. Where do we receive your data from?
We collect your applicant data directly from you by entering it in our application form on our website.
8. Is data processed outside the European Union?
Your applicant data will not be transferred to third countries.
9. How long will the data be stored?
● We store your data for as long as is necessary for the decision on your application. If an employment relationship is not established, we will store the application data for six months after notification of the rejection decision, after which it will be deleted, unless longer storage is required due to legal disputes or is legitimized with your consent in the talent pool. If we conclude an employment contract with you, we will transfer your data from the online application system to our personnel management system.
● We store your consent data, such as type of consent given, time stamp of submission, time stamp of revocation, for 3 years in our applicant pool/talent pool as proof of the legal basis of the data processing carried out until revocation.
● We automatically delete your data in the talent pool after 3 years. If you withdraw your consent earlier, we will delete it within one week of receiving your withdrawal.
● We also store e-mail or written correspondence relating to your withdrawal of consent and the assertion of data subject rights with the personal data contained therein for 3 years as proof of the proper implementation of the data subject rights. This data will be deleted after three years.
10. What rights do you have?
10.1 Information You can request information about your personal data processed by us.
10.2 Correction If your details are not (or are no longer) correct, you can request that your data be corrected. If your data is incomplete, you can request that it be completed.
10.3 Deletion You have the right to request the deletion of your data. Please note that a right to erasure depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to retain your data.
10.4 Restriction of processing You have the right to request the restriction of the processing of your data. Please note that a right to restriction of processing depends on the existence of a legitimate reason.
10.5 Right to object You have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data. An objection is also only possible if we process your data on the legal basis of our overriding legitimate interests (Art. 6 para. 1 lit. f GDPR). An objection to advertising is not bound to any justification.
10.6 Right to lodge a complaint You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
10.7 Data portability You have the right to receive personal data that you have provided to us in an electronic format.
10.8 Revocation of your consent You have the right to revoke your consent(s) to the processing of your data, which you have given us, at any time. This also applies to the revocation of declarations of consent that you may have given us before the General Data Protection Regulation came into force, i.e. before May 25, 2018. The easiest way to withdraw your consent is to send an email to the contact details given above. Withdrawing your consent does not affect the lawfulness of the processing of your data up to the point of withdrawal. You can easily revoke the consent given in our Consent Management System, in the cookie banner of the website (privacy settings) at the same place.
