Data protection information

5.1 Candidate profile
When you send us your application, we will create a candidate profile for you or you can create one yourself via our website under "My candidate profile". In your profile, you can manage your data and set up a job ticker. To register, enter your e-mail address in the registration field provided. You will then receive a one-time access link to your candidate profile at your e-mail address. Alternatively, your e-mail address together with the registration via one of our registration service providers (Google, LinkedIn, Microsoft and Apple) will be used for registration and identification in your candidate profile. In the case of applications by e-mail and post, we create a candidate profile for you as we transfer your application documents to our online application system. If you have provided us with a valid e-mail address, you will automatically receive access via the above-mentioned registration channels. The legal basis for the data processing described is Article 6(1)(b) of the General Data Protection Regulation (pre-contractual measures and performance of a contract).

5.2 Job ticker
You can also create a job ticker to be informed about open jobs in REWE Group companies that match your interests. It is not necessary to create a candidate profile to create a job ticker. You can change, update or delete this information and the job tickers you have created at any time or deactivate your job tickers. The legal basis for the data processing described is Article 6(1)(a) of the General Data Protection Regulation (consent).

5.3 Information about the company and invitations to events
You can receive up-to-date information about the company and invitations to events. The REWE Group companies (a list of companies can be found here) will send you content on current career topics (e.g. information on specialist areas/topics, entry opportunities within the Group as well as announcements and invitations to events) by e-mail. Based on your candidate profile, the e-mail notifications will be tailored to you personally. You can revoke your consent for personal career information at any time in your candidate profile in the "Personal data" tab under "Consents". The legal basis for the data processing described is Article 6(1)(a) of the General Data Protection Regulation (consent).

5.4 Conducting application procedures
You have the option of applying online for an advertised job or submitting a speculative application. The online application system is available for this purpose. Your data and the file attachments you send will be transmitted via an encrypted connection. Your data will be received by the HR department and forwarded to the specialist department responsible for the advertised job or to the persons entrusted with handling the application process. The same applies if you send us an application by e-mail or post. All parties involved will treat your application documents with due care and confidentiality.
We process your data that you send us in connection with an application in order to check your suitability for the job (or, if applicable, other open positions in the REWE Group company to which you are applying for a job or submitting an unsolicited application) and to carry out the application procedure. The legal basis for the data processing described is Article 6(1)(b) of the General Data Protection Regulation and Section 26(1) sentence 1 of the German Federal Data Protection Act (BDSG) (decision on the establishment of an employment relationship).
If we conclude an employment contract with you, we will continue to process your data for the purposes of the employment relationship if this is necessary for its implementation or termination. The legal basis for the data processing described is Art. 6 (1) (b) GDPR and Section 26 (1) sentence 1 BDSG (implementation of the employment relationship).

5.5 Application via WhatsApp
For some jobs, we offer you the opportunity to apply via WhatsApp (WhatsApp Ireland Limited). We also record the information you provide in the WhatsApp application in our applicant management system and create a candidate profile for you (see 5.1) and an application (see 5.4). If your data has been recorded in our applicant management system, we will send you a corresponding message to the e-mail address you have provided, giving you access to our online application system. Here you can enter further details and upload additional application documents. We also use WhatsApp to communicate with you in the context of your application, e.g. information on your application status, sending interim notifications and invitations or for follow-up requests for application documents.

Further information about data processing by WhatsApp as a telecommunications service, over which we have no further influence, can be found here.

The legal basis for the application via WhatsApp and the transfer of data to WhatsApp and companies affiliated with WhatsApp in a third country is Art. 6 (1) (a) in conjunction with Art. 49 (1) (a) GDPR (your consent to participate in messenger communication and use the WhatsApp service and transfer to a third country). Art. 49 para. 1 lit. a General Data Protection Regulation (your consent to participate in messenger communication and the use of the WhatsApp service as well as the transfer to a third country).

The legal basis for recording your data in our applicant management system is Article 6(1)(b) of the General Data Protection Regulation and Section 26(1) sentence 1 BDSG (decision on the establishment of an employment relationship).

If you do not wish to provide us with your personal application data via WhatsApp, you can alternatively apply via other channels such as our website, by email or in person.

5.6 Applying via the DEIN ERSTER TAG JobApp
We offer you the opportunity to apply for some training and dual study jobs via the YOUR FIRST DAY JobApp (Studio2B GmbH). Your data entered in the YOUR FIRST DAY JobApp will be forwarded to our online application system and a candidate profile (see 5.1) and an application will be created for you (see 5.4). We will then send you the relevant information with access to our online application system to the e-mail address you have provided. You can enter further details in your candidate profile and upload application documents.
 
Further information about data processing at Studi2B GmbH, over which we have no further influence, can be found here.

The legal basis for recording your data in our applicant management system is Article 6(1)(b) GDPR and Section 26(1) sentence 1 BDSG (decision on the establishment of an employment relationship).

5.7 Defense of legal claims
We process your data insofar as this is necessary to defend against legal claims asserted in the application process. The legal basis for this is Art. 6 para. 1 letter f GDPR (balancing of interests, based on the interest of the REWE Group company to which you are applying for a job or submitting an unsolicited application, to be able to defend against claims in proceedings under the General Equal Treatment Act).

5.8 Candidate pool
If your application does not match the job profile we are looking for, but appears suitable for other jobs, you can agree to be included in our candidate pool.
If you agree to be included in our candidate pool, your data from the candidate profile (5.1) and from specific application procedures (5.4) will also be processed by other REWE Group companies for their recruitment procedures. The storage period will not be extended. The REWE Group companies are the companies listed here.
This allows recruiters to contact you with new jobs from REWE Group companies that match your personal qualifications and interests as long as the data is stored with us. You will only be considered in such a new application process with your consent. You can edit, change or delete the information you have provided at any time. Your consent to the candidate pool is valid for as long as your candidate profile (see 5.1) exists. However, you have the option to withdraw your consent at any earlier point in time by unchecking the box "Consent to inclusion in the candidate pool" in your candidate profile in our online application system under "Consents" in the "Personal data" tab.
The legal basis for the data processing described is Article 6(1)(a) of the General Data Protection Regulation (consent).

5.9 Webserver protocols
When you visit our websites, we process the connection data of the requesting computer including the IP address, the websites you visit, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard to ensure the security of our IT systems. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (balancing of interests, based on REWE's interest in ensuring the security of IT systems).
We also convert the IP address transmitted by your computer into geo-coordinates and determine your approximate location. Your exact location is not determined. We process the data in order to compile statistics on how our website is used and to measure the success of our employer advertising campaigns in certain regions. The legal basis for the data processing described is Article 6(1)(f) of the General Data Protection Regulation (balancing of interests based on REWE's interest in measuring the success of employer advertising campaigns).

5.10 Cookies and other technologies (website analysis/tracking)
We use cookies and other technologies in some areas of our website, e.g. to recognize visitors' preferences and design the website accordingly. This facilitates navigation and a high degree of user-friendliness. Cookies and other technologies help us to identify particularly popular areas of our website.

Cookies are small text files that are stored on the hard disk of your end device. They make it possible to store information for a certain period of time and to identify your end device. We use permanent cookies to improve user guidance and individual performance. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use individual functions of our website.

Depending on the purpose of the cookies and other technologies, we distinguish between necessary, statistical and marketing cookies.

The necessary cookies and other technologies are required to ensure central functions of the website and the fulfillment of contracts with customers and cooperation partners. They are used on the legal basis of Section 25 (2) No. 2 TTDSG i.V.m. Art. 6 para. 1 sentence 1 letter b) (contract initiation or fulfillment) and letter f) General Data Protection Regulation (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website. They can therefore not be deactivated by you as a website user via our Consent Management System.

All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.

Statistical cookies and other technologies are required to understand how our visitors use our portal, to recognize errors and to continuously improve the portal. They are processed on the legal basis of Section 25 (1) TTDSG (consent to the setting or reading of cookies) in conjunction with Art. 6 (1) sentence 1 lit. a) GDPR (consent to the use of cookies). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins once you have given the corresponding opt-in (consent). You can withdraw your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation.

All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.

You can also revoke your consent at any time in the "Privacy settings".

Marketing cookies and other technologies are used to understand your interests and to be able to show you personalized content that is relevant to you. They are used on the legal basis of Section 25 (1) TTDSG (consent to the setting or reading of cookies) in conjunction with Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation.

All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.

You can also revoke your consent at any time in the "Privacy settings".

5.11 Candidate survey
In order to ensure and improve the quality of our application process in the long term, we contact selected applicants after the application process has been completed to ask them about the application process. Applicants are contacted by us no later than six months after completion of the application process.

We automatically survey candidates directly via their contact details in the candidate profile on the basis of consent given by the candidates. The legal basis for this candidate survey is Article 6(1)(a) of the General Data Protection Regulation (consent).
You can withdraw your consent for the application process surveys at any time in your candidate profile under "Data protection information". 

In addition, we send invitations to evaluate the application process of REWE Group companies on external portals to specially selected candidates manually by the persons involved in the application process. The legal basis for this candidate survey is Article 6(1)(f) of the General Data Protection Regulation (legitimate interests). We consider our legitimate interests to be the desire to continuously improve the application process and to improve our external image on business and application platforms. Since we only send out these surveys in close temporal connection with the application process and only once per process, without there being an obligation to respond, we do not see any interests of the respective applicant that conflict with our surveys.

5.12 Forwarding to social media services
On our website you will find links to the social media services of Facebook, Twitter, Xing, LinkedIn, YouTube and Instagram. You can recognize links to the websites of the social media services by the respective company logo. If you follow these links, you will reach REWE's corporate presence on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This tells the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are in particular

• Address of the website on which the activated link is located
• Date and time of accessing the website or activating the link
• Information about the browser and operating system used
• IP address

If you are already logged in to the relevant social media service when you activate the link, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.
The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the member states of the European Union.
Please note that we have no influence on the scope, type and purpose of data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service.

5.13 Social sharing function
We use plugins from the Pentos service (Pentos AG, Landsberger Str. 110, 80339 Munich, Germany) on our website. The social sharing function is intended to make it easier for website visitors to share the job offers on our website with other Internet users by e-mail or in social networks. The legal basis is Article 6(1)(f) of the General Data Protection Regulation. The data processing is carried out in the interest of optimizing the use of our website and increasing its reach. No cookies or similar are set when using the social sharing buttons.
The plugins establish a connection with the Pentos servers. You can recognize the plugins by the integrated buttons for sharing via "E-Mail", "WhatsApp", "LinkedIn", "Xing" and "Facebook". When you use the social sharing buttons, your internet browser establishes a direct connection to the selected social network. If you send content from our website to social networks, a connection can be established between your visit to the website and your user profile on the relevant social network. No personal data is processed or stored at any time in the connection to the Pentos servers or on the Pentos servers.

5.14 YouTube and whatchado
Our website uses plugins from the video portal YouTube. The provider is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

Data processing by us:
The data you enter on YouTube, e.g. via comments, likes, and the share function, etc., will be published by YouTube and will not be used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. We may share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Article 6(1)(f) of the General Data Protection Regulation. Data processing is carried out in the interests of our public relations work and communication.

If you wish to object to specific data processing, please use the contact details provided under "Controller". We will then check your objection.

If you send us an inquiry on the social media platform, we may also refer you to other, secure communication channels that guarantee confidentiality, depending on the required response. You always have the option of sending us confidential inquiries to the address given under "Controller".

You can set your browser so that it informs you about the use of cookies and, if necessary, prevent the setting of cookies there. Further information on the data protection provisions applicable to YouTube/Google can be found here.

Data processing by "YouTube":
It cannot be ruled out that web tracking methods are used on YouTube. Web tracking can also take place regardless of whether you are logged in or registered with YouTube. Unfortunately, we cannot influence YouTube's web tracking methods.

Please be aware that your profile and behavioral data may be used on YouTube, for example to evaluate your habits, personal relationships, preferences, etc. We have no control over the processing of your data by YouTube. We have no influence whatsoever on the processing of your data by YouTube.

You can find more information on data processing by YouTube in their privacy policy.

Our website also uses plugins from the career guidance platform whatchado GmbH, Möllwaldplatz 4/39, 1040 Vienna, Austria. We do not process any personal data in this context.

You can find more information on data processing by whatchado in their privacy policy.

5.15 Use of Google Maps 
For the job search, we also use map material from Google Maps (Google Inc.) to display vacancies on an interactive map. As a result, information about the use of our job search, including your IP address, is transferred to Google servers in the USA and stored there, which means that Google can store cookies on your computer as soon as you use the job search.

Cookies are small text files that can be stored on your computer and saved by your browser. This data will not be merged with other data sources unless this serves to fulfill a contract concluded with you, you have given your express permission for this or there is a legal or other justification. When you access a web page on our website that contains Google Maps, your browser can establish a direct connection with Google's servers. The map content is then transmitted by Google directly to your browser, which integrates it into the website. We have no influence on the data transmitted in this way and the scope that Google determines. You can find out more about this in Google's privacy policy.

In your browser settings, you can specify whether or not the cookies described may be set by Google. As a user, you therefore also have full control over the use of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. 
The provision and the corresponding processing of the data is carried out for us on the basis of Art. 6 para. 1 f) GDPR. We need your above-mentioned data to provide the (technical) functionalities of the job search. Otherwise we will not be able to provide you with this functionality. These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 (1) f) GDPR. 
If you leave the job search website and delete the cookies, the respective collection of information will be stopped immediately.

5.16 Use of Vimeo
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA. The legal basis for the processing of your personal data is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR for the purpose of presenting our company in an appealing way.
If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account. You have the right to object at any time for reasons arising from your particular situation.
Further information on the handling of user data can be found in Vimeo's privacy policy at https://vimeo.com/privacy. Vimeo Inc. is also certified in accordance with the EU-US and Swiss-US Privacy Shield. Further information can be found here.

5.17 Campaign success measurement
In order to be able to measure the success of our campaigns on the job portals we use, such as StepStone, we collect a one-off record of the job portal from which the applicant accessed the online application system by clicking on a specific job offer. For this purpose, we include the so-called source in the specific URL of the job. 
The legal basis for measuring campaign success is Article 6(1)(f) of the General Data Protection Regulation (predominantly legitimate interest in measuring the efficiency of campaigns on job portals).