Data protection information for your online application on our website
(15.08.2024)
This information provides you with an overview of the processing of your personal data when you click on the "Go to application form" button after visiting our website and submit your application in our online application system.
We hereby inform you about what data we collect from you and how we use it. We will also inform you of your rights under applicable data protection law and tell you who you can contact if you have any questions.
1. Who is responsible for data processing?
The REWE Group company whose job advertisement you are applying for is responsible for processing your personal data when you use our online application system. This may be:
REWE digital GmbH ("REWE"), Domstraße 20, 50668 Cologne or
REWE Wein online GmbH, Domstr 20, 50668 Cologne or
OC fulfillment GmbH, Domstraße 20, 50668 Cologne or
OC Food Solutions GmbH, Domstraße 20, 50668 Cologne or
Revisionsverband der WEstkauf-Genossenschaften digital Spain, S.L,. Calle Iván Pavlov 8, Bloque 1, Alta H, 29590 Málaga
2. Who can you contact if you have questions about data processing?
You can address questions about the processing of your data to the data protection officer at any time.
You can reach the data protection officer of the controller at
REWE digital GmbH ("REWE"), Domstraße 20, 50668 Cologne:
E-mail: rewe-group@datenschutz-sued.de
REWE Wein online GmbH, Domstraße 20, 50668 Cologne, Germany
E-mail: rewe-group@datenschutz-sued.de
OC fulfillment GmbH, Domstraße 20, 50668 Cologne
E-mail: rewe-group@datenschutz-sued.de
OC Food Solutions GmbH, Domstraße 20, 50668 Cologne
E-mail: info@loql.com
Revisionsverband der WEstkauf-Genossenschaften digital Spain, S.L,. ,. Calle Severo Ochoa 21, Complejo I+D 6, Edificio Sur, primera planta, 29590 Malaga
E-mail: julio.sorrochegarcia@rewe-group.com
3. What data do we process from you?
We process your personal data when you click on the "Go to application form" button in our online application system after visiting our website and enter your data for the online application.
This may include the following data:
- Technical data that is generated when you use our website (page accessed, date and time of the page view, duration of the visit, identification data of the browser and operating system type used and the website from which you access the data entry page)
- Data that you enter in our application form and upload there:
- Your name (first name, surname)
- Your e-mail address
- Your phone number
- If applicable (optional) link to your online profile (e.g. XING, LinkedIn) and the profile data located there
- Your salary expectations
- Quality of your English language skills (written and spoken) on a scale of 1 to 5
- Quality of your German language skills (written and spoken) on a scale of 1 to 5
- whether we have been recommended to you by our employees
- Your comment on your application (optional):
- Your application documents (e.g. CV and certificates)
- Your application photo (optional)
- how you became aware of us
- Data that we require as proof of your consent, e.g. for inclusion in the talent pool
4. Is there an obligation to provide the data?
The provision of your data is not required by law. However, some of the data mentioned is required in order to submit an application and, if applicable, to be included in the talent pool. These data are marked as mandatory fields. If you do not provide the required data, you will not be able to submit an application on our website. Inclusion in the talent pool is voluntary and only takes place with your consent.
5. For what purposes do we process your data and on what legal basis does this take place?
5.1 Implementation of application procedures
We process your applicant data, which you enter in the online application, for the purpose of carrying out the application process. The transmission of your data and the file attachments sent with it takes place via an encrypted connection. Your data will be received by the HR department of REWE Deutscher Supermarkt AG & Co KGaA as HR service provider and forwarded to the specialist department responsible for the advertised position or to the persons of the REWE Group company responsible for handling the application process. The same applies if you send us an application by e-mail or post. All parties involved will treat your application documents with due care and confidentiality. The legal basis for the described data processing is Art. 6 para. 1 sentence 1 lit. b) GDPR and § 26 para. 1 sentence 1 BDSG (implementation of the application procedure, decision on the establishment of an employment relationship).
5.2 Talent pool
If you have given us your consent, we will process your data in our talent pool so that the responsible employer companies mentioned in section 1 above can access the data as soon as a job is offered that matches the profile of the applicant from the talent pool and we can contact you to ask whether you are interested in the position. The legal basis for this data processing is Art. 6 para. 1 a GDPR (consent).
5.3 Employment contract
If we conclude an employment contract with you, we will continue to process your data for the purposes of the employment relationship if this is necessary for its implementation or termination. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. b) GDPR and Section 26 para. 1 sentence 1 BDSG (implementation of the employment relationship).
5.4 Defense against legal claims
We process your data insofar as this is necessary to defend against legal claims asserted in the application process. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, based on the interest of the REWE Group company to which you have applied for a job, to be able to defend against claims in legal proceedings - e.g. concerning the General Equal Treatment Act).
5.5 Web server logs
When you visit our websites, we process the connection data of the requesting computer including the IP address, the websites you visit, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard to ensure the security of our IT systems. The legal basis for the described data processing is § 25 para. 2 no. 2 TDDDG in conjunction with. Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, based on REWE's interest in ensuring the security of IT systems).
We also convert the IP address transmitted by your computer into geo-coordinates and determine your approximate location. Your exact location is not determined. We process the data to compile statistics on how our website is used and to measure the success of our employer advertising campaigns in certain regions. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, based on REWE's interest in measuring the success of employer advertising campaigns).
5.6 Cookies and other technologies (website analysis/tracking)
We use cookies in some areas of our website, e.g. to recognize visitor preferences and to be able to design the website accordingly. This facilitates navigation and a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website.
Cookies are small text files that are stored on the hard disk of your end device. They make it possible to store information for a certain period of time and to identify your end device. We use permanent cookies to improve user guidance and individual performance. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser so that it informs you about the placement of cookies.
This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use certain functions of our website.
Depending on the purpose of the cookies and other technologies, we distinguish between necessary, statistical and marketing cookies.
The necessary cookies and other technologies are required to ensure central functions of the website and the fulfillment of contracts with customers and cooperation partners. They are used on the legal basis of Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 para. 1 sentence 1 lit. b) GDPR (contract initiation or fulfillment) and lit. f) GDPR (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website. These can therefore not be deactivated by you as a website user via our consent management system. All cookies and other technologies are described in detail in the cookie banner under the services. You can view this at any time in the privacy settings in the footer of the website or you can click directly here.
Statistical cookies and other technologies are required to understand the use of our portal by our visitors, to recognize errors and to continuously improve the portal. They are processed on the legal basis of Section 25 (1) TDDDG (consent to the setting or reading of cookies) in conjunction with Art. 6 (1) sentence 1 lit. a) GDPR (consent to the use of cookies). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation. All cookies and other technologies are described in detail in the cookie banner under the services. You can view this at any time in the privacy settings in the footer of the website or you can click directly here.
You can also revoke your consent at any time in the privacy settings.
The marketing cookies and other technologies are used to understand your interests and to display personalized content that is relevant to you. They are used on the legal basis of Section 25 (1) TDDDG (consent to the setting or reading of cookies) in conjunction with Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation.
All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.
You can also revoke your consent at any time in the privacy settings.
6. Who has access to your data and for what reason?
Within the REWE Group company to which you are applying for a job, only persons who need your data to carry out the tasks assigned to them will have access to it. This mainly concerns employees of the HR department.
If you apply to one of the companies named in section 1 and REWE Deutscher Supermarkt AG & Co. KGaA acts as a service provider for these REWE Group companies, they will have access to your data for the purpose of providing the online application system and managing the talent pool. If you have given your consent to be included in the talent pool, all REWE Group companies named in section 1 can access your data in order to contact you if a suitable job is available. In addition, service providers who support us in the fulfillment of our tasks may have access to your data. These are service providers in the following categories:
- Hosting service provider for the operation of our servers, websites and the application tool
- Development service provider for programming, development, maintenance and support of software applications, in particular the online application system
- IT service providers to support and provide our services
- Personnel service provider to support the selection of applicants
Service providers used by us must meet special confidentiality requirements. They will only have access to your data to the extent and for the period of time required to fulfill their tasks.
7. Where do we receive your data from?
We collect your applicant data directly from you.
8. Is data processed outside the European Union?
Your applicant data will not be transferred to third countries.
9. How long will the data be stored?
We only store your data for as long as we need it for the respective processing purposes. If the data is no longer required for the fulfillment of the processing purposes stated in this data protection information, it will be deleted, unless its retention is still necessary to fulfill commercial or tax retention obligations.
As a rule, we delete your data after these periods or determine the deletion period according to these criteria:
- We store your IP address for 7 days and then delete it. Log file data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified
- If an employment relationship is not established, we will store the application data for six months after notification of the rejection decision, after which it will be deleted, unless longer storage is required due to legal disputes or is legitimized with your consent in the talent pool. If we conclude an employment contract with you, we will transfer your data from the online application system to our personnel management system.
- We store your consent data, such as type of consent given, time stamp of submission, time stamp of revocation, for 3 years in our applicant pool/talent pool as proof of the legal basis of the data processing carried out until revocation.
- We generally delete data from the services, technologies and cookies mentioned in section 5.6 after six years at the latest. We also store e-mail or written correspondence relating to your withdrawal of consent, assertion of data subject rights, including correspondence with the personal data contained therein, for three years as proof of the proper implementation of the data subject rights. This data will be deleted after three years.
- We automatically delete the data in the talent pool after 3 years. In the event of an earlier revocation of the declaration of consent after receipt of the revocation within one week.
10. What rights do you have?
10.1 Information
You can request information about your personal data processed by us.
10.2 Correction
If your details are not (or are no longer) correct, you can request that your data be corrected. If your data is incomplete, you can request that it be completed.
10.3 Deletion
You have the right to request the deletion of your data. Please note that a right to erasure depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to retain your data.
10.4 Restriction of processing
You have the right to request the restriction of the processing of your data. Please note that a right to restriction of processing depends on the existence of a legitimate reason.
10.5 Objection
You have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data. An objection is also only possible if we process your data on the legal basis of our overriding legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR)
10.6 Right to lodge a complaint
You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
10.7 Data portability
You have the right to receive personal data that you have provided to us in an electronic format.
10.8 Revocation of your consent
You have the right to withdraw your consent to the processing of your data that you have given us at any time. This also applies to the revocation of declarations of consent that you gave us before the General Data Protection Regulation came into force, i.e. before May 25, 2018. The easiest way to withdraw your consent is to send an email to the contact details given above. Withdrawing your consent does not affect the lawfulness of the processing of your data up to the point of withdrawal.
