Identity and Access Management Engineer (m/f/d)

Data protection information for your online application on our website

(16.05.2024)

This information provides you with an overview of the processing of your personal data when you submit your application in our online application system after visiting our website https://www.rewe-digital.com/stellenangebote and clicking on the "Go to application form" button.

We hereby inform you about what data we collect from you and how we use it. We will also inform you of your rights under applicable data protection law and tell you who you can contact if you have any questions.

1. Who is responsible for data processing?

The REWE Group company whose job advertisement you are applying for is responsible for processing your personal data when you use our online application system. These can be:
REWE digital GmbH („REWE“), Domstraße 20, 50668 Köln oder
REWE Wein Online GmbH, Domstraße 20, 50668 Köln or
ZooRoyal Petcare GmbH, Schanzenstraße 6-20, D-51063 Köln or
OC fulfillment GmbH, Domstraße 20, 50668 Köln or
OC Payment GmbH, Domstraße 20, 50668 Köln or
Auditing association of the WEstkauf cooperatives digital Spain, S.L,. Calle Severo Ochoa 21, Complejo I+D 6, Edificio Sur, 29590 Málaga

2. An wen kannst Du Dich bei Fragen zur Datenverarbeitung wenden?

You can address questions about the processing of your data to the data protection officer at any time.

You can reach the data protection officer of the controller at

REWE digital GmbH ("REWE"), Domstraße 20, 50668 Cologne
E-Mail: rewe-group@datenschutz-sued.de

REWE Wein Online GmbH, Domstraße 20, 50668 Cologne
E-Mail: rewe-group@datenschutz-sued.de

ZooRoyal Petcare GmbH, Schanzenstraße 6-20, D-51063 Cologne
E-Mail: rewe-group@datenschutz-sued.de

OC fulfillment GmbH, Domstraße 20, 50668 Cologne
E-Mail: rewe-group@datenschutz-sued.de

Auditing association of the WEstkauf cooperatives digital Spain, S.L,. ,. Calle Severo Ochoa 21, Complejo I+D 6, Edificio Sur, primera planta, 29590 Malaga
E-Mail: julio.sorrochegarcia@rewe-group.com

3. What data do we process from you?

We process your personal data when you enter your data for the online application after visiting our website https://www.rewe-digital.com/stellenangebote and clicking on the "Go to application form" button in our online application system.
This may include the following data:

Technical data that is generated when you use our website https://rewe-digital.dvinci-hr.com/ (the page accessed, the date and time the page was accessed, the duration of the visit, the identification data of the type of browser and operating system used and the website from which you accessed the data entry page)
Data that you enter in our application form and upload there:
- Your name (first name, surname)
- Your e-mail address
- If applicable (optional) link to your online profile (e.g. XING, LinkedIn) and the profile data located there
- Your salary expectations
- Güte Deiner deutschen Sprachkenntnisse (in Wort und Schrift) auf einer Scala von 1 bis 5
- Quality of your English language skills (written and spoken) on a scale of 1 to 5
- Quality of your German language skills (written and spoken) on a scale of 1 to 5
- whether we have been recommended to you by our employees
- Your comment on your application (optional)
- Your application documents (e.g. CV and certificates)
- Your application photo (optional)
- how you became aware of us
- Data that we require as proof of your consent, e.g. for inclusion in the talent pool

4. Is there an obligation to provide the data?

The provision of your data is not required by law. However, some of the data mentioned is required in order to submit an application and, if applicable, to be included in the talent pool. These data are marked as mandatory fields. If you do not provide the required data, you will not be able to submit an application on our website. If the hiring company differs from REWE digital GmbH, we will forward your applicant data to the REWE Group company that has advertised the position for which you are applying online in order to carry out the selection process and conclude the employment contract. Inclusion in the talent pool is voluntary and only takes place with your consent.

5. For what purposes do we process your data and on what legal basis does this take place?

5.1 Implementation of application procedures
We process your applicant data, which you enter in the online application, for the purpose of carrying out the application process. The transmission of your data and the file attachments sent with it takes place via an encrypted connection. Your data will be received by the HR department and forwarded to the specialist department responsible for the advertised position or to the persons of the REWE Group companies responsible for handling the application process. The same applies if you send us an application by e-mail or post. All parties involved will treat your application documents with due care and confidentiality. The legal basis for the described data processing is Art. 6 para. 1 letter b GDPR and § 26 para. 1 sentence 1 BDSG (implementation of the application procedure, decision on the establishment of an employment relationship.

5.2 If you have given us your consent, we will process your data in our talent pool so that the aforementioned responsible employer companies REWE digital GmbH, REWE Wein Online GmbH, ZooRoyal Petcare GmbH, OC fulfillment GmbH and OC Payment GmbH can access the data as soon as a job is offered that matches the profile of the applicant from the talent pool and we can contact you to see if you are interested in the position. The legal basis for this data processing is Art. 6 para. 1 a GDPR (consent).

5.3 If we conclude an employment contract with you, we will continue to process your data for the purposes of the employment relationship if this is necessary for its implementation or termination. The legal basis for the data processing described is Art. 6 para. 1 letter b GDPR and Section 26 para. 1 sentence 1 BDSG (implementation of the employment relationship).

5.4 We process your data insofar as this is necessary to defend against legal claims asserted in the application process. The legal basis for this is Art. 6 para. 1 letter f GDPR (balancing of interests, based on the interest of the REWE Group company to which you have applied for a job, to be able to defend against claims in proceedings under the General Equal Treatment Act).

5.5 Webserverprotokolle
When you visit our websites, we process the connection data of the requesting computer including the IP address, the websites you visit, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard to ensure the security of our IT systems. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (balancing of interests, based on REWE's interest in ensuring the security of IT systems).

We also convert the IP address transmitted by your computer into geo-coordinates and determine your approximate location. Your exact location is not determined. We process the data to compile statistics on how our website is used and to measure the success of our employer advertising campaigns in certain regions. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (balancing of interests based on REWE's interest in measuring the success of employer advertising campaigns).

5.6 We use cookies in some areas of our website, e.g. to recognize visitor preferences and to be able to design the website accordingly. This facilitates navigation and a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website.

Cookies are small text files that are stored on the hard disk of your end device. They make it possible to store information for a certain period of time and to identify your end device. We use permanent cookies to improve user guidance and individual performance. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser so that it informs you about the placement of cookies.

This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use certain functions of our website.

Depending on the purpose of the cookies and other technologies, we differentiate between necessary, statistical and marketing cookies.

The necessary cookies and other technologies are required to ensure central functions of the website and the fulfillment of contracts with customers and cooperation partners. They are used on the legal basis of Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 para. 1 sentence 1 letter b) (contract initiation or fulfillment) and letter f) General Data Protection Regulation (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website. You can therefore not be deactivated by you as a website user via our Consent Management System. All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here

Statistical cookies and other technologies are required to understand the use of our portal by our visitors, to recognize errors and to continuously improve the portal. They are used on the legal basis of Section 25 (1) TDDDG (consent to the setting or reading of cookies) in conjunction with Art. 6 (1) sentence 1 lit. a) GDPR (consent to the use of cookies). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation. All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here. You can also revoke your consent at any time in the privacy settings.

The marketing cookies and other technologies are used to understand your interests and to display personalized content that is relevant to you. They are used on the legal basis of Section 25 (1) TDDDG (consent to the setting or reading of cookies) in conjunction with Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation.

All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here. You can also revoke your consent at any time in the privacy settings.

6. Who has access to your data and for what reason?

Within the REWE Group company to which you are applying for a job, only people who need your data to carry out the tasks assigned to them will have access to it. This mainly concerns employees of the HR department.

If you apply to REWE Wein Online GmbH, ZooRoyal Petcare GmbH, OC fulfillment GmbH and OC Payment GmbH and REWE digital acts as a service provider for these REWE Group companies, REWE digital GmbH has access to your data for the purpose of providing the online application system and managing the talent pool. If you have given your consent to be included in the talent pool, all of the aforementioned REWE Group companies can access your data in order to contact you if a suitable job is available. In addition, service providers who support us in the fulfillment of our tasks may have access to your data. These are service providers in the following categories:

Hosting service provider for the operation of our servers

Development service provider for programming, development, maintenance and support of software applications, in particular the online application system

IT service provider to support and provide our services

• Personnel service provider to support the selection of applicants

Service providers used by us must meet special confidentiality requirements. They will only have access to your data to the extent and for the period of time required to fulfill their tasks.

7. Where do we recieve your data from?

We collect your applicant data directly from you.

8. Is data processed outside the European Union?

Your applicant data will not be transferred to third countries.

9. How long will the data be stored?

We only store your data for as long as we need it for the respective processing purposes. If the data is no longer required for the fulfillment of the processing purposes stated in this data protection information, it will be deleted, unless its retention is still necessary to fulfill commercial or tax retention obligations. As a rule, we delete your data after these periods or determine the deletion period according to these criteria:

We store your IP address for 7 days and then delete it. Log file data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.

If an employment relationship is not established, we will store the application data for six months after notification of the rejection decision, after which it will be deleted, unless longer storage is required due to legal disputes or is legitimized with your consent in the talent pool. If we conclude an employment contract with you, we will transfer your data from the online application system to our personnel management system.

Data of the services, technologies and cookies mentioned under 5.6 generally after six years at the latest.

We automatically delete the data in the talent pool after 3 years. In the event of an earlier revocation of the declaration of consent after receipt of the revocation within one week.

10. What rights do you have?

10.1 Information
You can request information about your personal data processed by us.

10.2 Correction
If your details are not (or no longer) correct, you can request that your data be corrected. If your data is incomplete, you can request that it be completed.

10.3 Deletion
You have the right to request the deletion of your data. Please note that a right to erasure depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to retain your data.

10.4 Restriction of processing
You have the right to request the restriction of the processing of your data. Please note that a right to restriction of processing depends on the existence of a legitimate reason.

10.5 Objection
You have the right to object to the processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data. An objection is also only possible if we process your data on the legal basis of our overriding legitimate interests (Art. 6 para. 1 lit. f GDPR)

10.6 Right to lodge a complaint
You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

10.7 Data portability
You have the right to receive personal data that you have provided to us in an electronic format.

10.8 Revocation of your consent
You have the right to withdraw your consent to the processing of your data that you have given us at any time. This also applies to the revocation of declarations of consent that you gave us before the General Data Protection Regulation came into force, i.e. before May 25, 2018. The easiest way to withdraw your consent is to send an email to the contact details given above. Withdrawing your consent does not affect the lawfulness of the processing of your data up to the point of withdrawal.

REWE digital GmbH

Domstraße 20

50668 Köln

Telefon: +49 221 149-0

Telefax: +49 221 149-9280

Mail: info@rewe-group.com

Geschäftsführer:
Thomas Friedl, Dr. André Marburger, Stefan Matzelle, Dr. Robert Zores

Handelsregister: Amtsgericht Köln HRB 78670

Umsatzsteuer-Identifikationsnummer: DE 290 605 450

Die Europäische Kommission stellt eine Plattform zur Online-Streitbeilegung (OS) bereit, die Sie hier finden https://ec.europa.eu/consumers/odr/. Zur Teilnahme an einem Streitbeilegungsverfahren vor einer Verbraucherschlichtungsstelle sind wir nicht verpflichtet und nicht bereit.

Nach §18 MStV Verantwortlicher:

Felipe Moroder-Bendyk

Domstraße 20

50668 Köln

Presse:

Andreas Wegner

Mail: presse@rewe-group.com

Konzept, Gestaltung und Realisierung

SEVN Agentur GmbH

https://sevn.de/

Technische Umsetzung

VOLL digital GmbH