Data protection information

5.1    Candidate profile
When you send us your application, we will create a candidate profile for you or you can create one yourself via our website under "View Profile". In your profile, you can manage your data and set up a job ticker. To register, enter your e-mail address in the registration field provided at. You will then receive a one-time access link to your candidate profile at your e-mail address. Alternatively, your email address together with the registration via one of our registration service providers (Google, LinkedIn, Microsoft and Apple) will be used to register and identify you in your candidate profile. In the case of applications by email and post or if your application is sent to us by a third party, we will create a candidate profile for you as we transfer your application documents to our online application system. If you have provided us with a valid e-mail address, you will automatically receive access via the above-mentioned registration channels. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. b) GDPR (pre-contractual measures and contract fulfillment).

5.2    Job ticker
You can also create a job ticker to be informed about open jobs in REWE Group companies that match your interests. It is not necessary to create a candidate profile to create a job ticker. You can change, update or delete this information and the job tickers you have created at any time or deactivate your job tickers. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).

5.3    Information about the company and invitations to events
You can receive up-to-date information about the company and invitations to events. The REWE Group companies (a list of companies can be found at https://hr.rewe-group.com/PRIMUS/Recruiting/Dokumente/datenschutzhinweise_firmierungen.pdf) will send you content on current career topics (e.g. information on specialist areas/topics, entry opportunities within the Group as well as announcements and invitations to events) by e-mail. Based on your candidate profile, the e-mail notifications will be tailored to you personally. You can revoke your consent for personal career information at any time in your candidate profile in the "Personal data" tab under "Consents". The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).

5.4    Implementation of application procedures
You have the option of applying for an advertised job via various channels or submitting a speculative application. The online application system is available for this purpose. Your data and the file attachments you send will be transmitted via an encrypted connection. Your data will be received by the HR department and forwarded to the specialist department responsible for the advertised job or to the persons entrusted with handling the application process. The same applies if you send us an application by e-mail or post. All parties involved will treat your application documents with due care and confidentiality.

For selected jobs, we offer you the opportunity to apply via WhatsApp (WhatsApp Ireland Limited) or via chat. In these cases, we record the information you provide there in our application management system and create a candidate profile and an application. We also use WhatsApp to communicate with you in the context of your application, e.g. information on your application status, sending interim notifications and invitations or for follow-up requests for application documents. If you apply via WhatsApp or chat, we store the information provided in the chat in text logs, which we attach to your application

If you apply in person directly in one of our stores or in logistics (so-called direct recruitment), the above-mentioned persons responsible will collect personal data such as your name, address, date of birth and contact details and, if applicable, further information such as bank details, tax and social security number, health insurance, number of children, information on secondary employment, work permit, residence permit.

If you have applied via WhatsApp or chat or have been hired directly and have provided us with your e-mail address, we will send you corresponding information with access to your candidate profile so that you can provide further information about yourself (not about the application already submitted). Further information about data processing by WhatsApp as a telecommunications service, over which we have no further influence, can be found at https://www.whatsapp.com/legal/privacy-policy-eea.

We process your data that you send us in connection with an application in order to check your suitability for the job (or, if applicable, other open positions in the REWE Group company to which you are applying for a job or submitting an unsolicited application) and to carry out the application procedure. The legal basis for the described data processing is Art. 6 para. 1 sentence 1 lit.) b) GDPR and § 26 para. 1 sentence 1 BDSG (decision on the establishment of an employment relationship).

The legal basis for the application via WhatsApp and the transfer of data to WhatsApp and companies affiliated with WhatsApp in a third country is Art. 6 para. 1 sentence 1 lit. a) in conjunction with Art. 49 para. 1 lit. a) GDPR (your consent to participate in messenger communication and use the WhatsApp service and transfer to a third country). Art. 49 para. 1 lit. a) GDPR (your consent to participate in messenger communication and the use of the WhatsApp service as well as the transfer to a third country).

If we conclude an employment contract with you, we will continue to process your data for the purposes of the employment relationship if this is necessary for its implementation or termination. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. b) GDPR and Section 26 para. 1 sentence 1 BDSG (implementation of the employment relationship).

5.5    Carrying out aptitude and recruitment tests
As part of your application, we may invite you to take part in an aptitude assessment procedure or an assessment center to determine your suitability for the target position. We process the following data for this process: Surname, first name, date of birth, e-mail address, competence-related assessments by observers with reference to the position, results report of the observed behavior including a recommendation for recruitment as well as results of digital self-assessments and performance tests. The legal basis for the implementation of the procedures is Art. 6 para. 1 sentence 1 lit. b) (contract initiation).

If we conclude an employment contract with you, we will continue to process your data for the purposes of the employment relationship if this is necessary for its establishment, implementation or termination. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. b) GDPR and Section 26 para. 1 sentence 1 BDSG (implementation of the employment relationship).

5.6    Application via an external platform
You have the opportunity to apply for jobs at REWE Group companies via external platforms. The operator of the respective platform is responsible for data protection. As soon as your application documents have been sent from there to the relevant REWE Group company where the job you have applied for is advertised, your application documents and data will be processed as part of our standard application processes. The processing serves the sole purpose of checking the application documents for the specific job advertised as part of our application process. The relevant REWE Group company is solely responsible for this process, possibly together with the recruiting department of REWE Deutscher Supermarkt AG & Co KGaA.

We offer you the opportunity to apply for some jobs for training and dual studies via the DEIN ERSTER TAG JobApp (Studio2B GmbH).

Otherwise, these are external platforms of HeyJobs GmbH and The Stepstone Group Deutschland GmbH.

The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b) GDPR (implementation of pre-contractual measures regarding a possible employment relationship).

If your application documents and data have been transmitted via the HeyJobs GmbH platform, we will inform HeyJobs GmbH about the status of the respective application on a daily basis. We are jointly responsible with HeyJobs GmbH for this transmitted information and the objectives pursued with it. The main agreements and breakdown of data protection obligations can be found at https://hr.rewe-group.com/PRIMUS/Recruiting/Dokumente/datenschutzhinweise_verantwortlichkeit_heyjobs.pdf. Our aim is to make the application process more efficient and effective. We would like to use findings from the application status to adapt and further develop the application process on the external platform and in REWE Recruiting in order to create ever more suitable job advertisements and application questions that lead to higher recruitment rates. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR (our legitimate interest in making the application process more efficient in order to achieve higher recruitment rates for applicants and recruiters).

5.7    Defense of legal claims
We process your data from the application process and from your candidate profile settings and declarations of consent to the extent and as long as this is necessary to defend against legal claims asserted in the application process. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, based on the interest of the REWE Group company to which you are applying for a job or submitting an unsolicited application, to be able to defend against claims in proceedings under the General Equal Treatment Act).

5.8    Candidate pool
If your application does not match the job profile we are looking for, but appears suitable for other jobs, you can agree to be included in our candidate pool.

If you agree to be included in our candidate pool, your data from the candidate profile (5.1) and from specific application procedures (5.4) will also be processed by other REWE Group companies for their recruitment procedures. The storage period will not be extended. The REWE Group companies are the companies listed at https://hr.rewe-group.com/PRIMUS/Recruiting/Dokumente/datenschutzhinweise_firmierungen.pdf.

This allows recruiters to contact you with new jobs from REWE Group companies that match your personal qualifications and interests for as long as the data is stored with us. Consideration in such a new application process will only take place with your consent. You can edit, change or delete the information you have provided at any time. Your consent to the candidate pool is valid as long as your candidate profile (see 5.1) exists. However, you have the option of revoking your consent at any earlier point in time by unchecking the "Consent to inclusion in the candidate pool" box in your candidate profile in our online application system under "Consents" in the "Personal data" tab. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).

5.9    Interviewing candidates
In order to ensure and improve the quality of our application process in the long term, we contact selected applicants after the application process has been completed to ask them about the application process. Applicants are contacted by us shortly after completion of the application process. The results of the survey are stored without personal reference.

We automatically survey candidates directly via their contact details in the candidate profile on the basis of consent given by the candidates. The legal basis for this survey is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).

You can revoke your consent to the surveys for the application process at any time in your candidate profile under "Data protection information".

In addition, we send invitations to evaluate the application process of REWE Group companies on external portals to specially selected candidates manually by the persons involved in the application process. The legal basis for this survey is Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interests). We consider our legitimate interests to be the desire to continuously improve the application process and to improve our external image on business and application platforms. Since we only send out these surveys in close temporal connection with the application process and only once per process, without there being an obligation to respond, we do not see any interests of the respective applicant that conflict with our surveys.

5.10    Contact support
If you contact us via our application hotline or by e-mail via bewerbung@rewe-group.com, we will process the data you provide us with when you contact us (name, address, e-mail address and/or telephone number, information regarding the specific contact including job ID if you contact us about a specific advertised job). We process this data in order to process and answer the request and, if necessary, forward the request to the responsible department in our company. If you have questions about a specific application or an advertised job, we may forward your request to the internal departments in the relevant REWE Group companies. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. b) GDPR (pre-contractual measure and/or contract fulfillment) and/or Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, based on our legitimate interest in examining inquiries from applicants and other persons, forwarding them to the responsible internal department for clarification and, if this is not done by the responsible internal department, answering them).

If you contact us by telephone, you will be informed before the call that we would like to record calls for learning purposes. We will only record the call if you consent to this. The legal basis for the recording of our telephone conversation is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

5.11    Web server protocols
When you visit our websites, we process the connection data of the requesting computer including the IP address, the websites you visit, the date and duration of the visit, the identification data of the browser and operating system type used and the website from which you visit us as standard to ensure the security of our IT systems. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, based on our interest in ensuring the security of IT systems).

We also convert the IP address transmitted by your computer into geo-coordinates and determine your approximate location. Your exact location is not determined. We process the data in order to compile statistics on how our website is used and to measure the success of our employer advertising campaigns in certain regions. The legal basis for the data processing described is Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, based on our interest in measuring the success of employer advertising campaigns).

5.12    Cookies and other technologies (website analysis/tracking)
We use cookies and other technologies in some areas of our website, e.g. to recognize visitors' preferences and design the website accordingly. This makes navigation easier and ensures a high degree of user-friendliness. Cookies and other technologies help us to identify particularly popular areas of our website.

Cookies are small text files that are stored on the hard disk of your end device. They make it possible to store information for a certain period of time and to identify your end device. We use permanent cookies for better user guidance and individual performance presentation. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use individual functions of our website.

Depending on the purpose of the cookies and other technologies, we differentiate between necessary, statistical and marketing cookies.

The necessary cookies and other technologies are required to ensure central functions of the website and the fulfillment of contracts with customers and cooperation partners. They are used on the legal basis of Section 25 (2) no. 2 TDDDG in conjunction with Art. 6 para. 1 sentence 1 letter b) (contract initiation or fulfillment) and letter f) General Data Protection Regulation (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website. They can therefore not be deactivated by you as a website user via our Consent Management System.

All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.

Statistical cookies and other technologies are required to understand the use of our portal by our visitors, to recognize errors and to continuously improve the portal. They are processed on the legal basis of Section 25 (1) TDDDG (consent to the setting or reading of cookies) in conjunction with Art. 6 (1) sentence 1 lit. a) GDPR (consent to the use of cookies). Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins once you have given the corresponding opt-in (consent). You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation.

All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.

You can also revoke your consent at any time in the "Privacy settings".

Marketing cookies and other technologies are used to understand your interests and to be able to show you personalized content that is relevant to you. They are used on the legal basis of Section 25 (1) TDDDG (consent to the setting or reading of cookies) in conjunction with Art. 6 para. 1 sentence 1 lit. a) GDPR (consent for the data processing based on this). Data processing only begins when you have given the corresponding opt-in. You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation.

All cookies and other technologies are described in detail in the cookie banner under the services. You can view these at any time in the "Privacy settings" in the footer of the website or you can click directly here.

You can also revoke your consent at any time in the "Privacy settings".

5.13    Forwarding to social media services
On our website you will find links to the social media services of Facebook, Twitter, Xing, LinkedIn, YouTube and Instagram. You can recognize links to the websites of the social media services by the respective company logo. If you follow these links, you will reach REWE Group's corporate presence on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This tells the servers of the social media service that you have visited our website. No further information is transmitted to the servers of the social media services.

If you are already logged in to the relevant social media service when you activate the link, the provider of the social media service may be able to determine your username and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.

The servers of the social media services may be located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as is the case in the Member States of the European Union.

We have no influence on the scope, type and purpose of data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service.

5.14    Social sharing function
We use plugins from the Pentos service (Pentos AG, Landsberger Str. 110, 80339 Munich, Germany) on our website. The social sharing function is intended to make it easier for website visitors to share the job offers on our website with other Internet users by e-mail or in social networks. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR (our interest in optimizing the use of our website and increasing its reach). No cookies or similar are set when using the social sharing buttons.

The plugins establish a connection with the Pentos servers. You can recognize the plugins by the integrated buttons for sharing via "E-Mail", "WhatsApp", "LinkedIn", "Xing" and "Facebook". When you use the social sharing buttons, your internet browser establishes a direct connection to the selected social network. If you send content from our website to social networks, a connection can be established between your visit to the website and your user profile on the relevant social network. No personal data is processed or stored at any time in the connection to the Pentos servers or on the Pentos servers.

5.15    YouTube, Vimeo and whatchado
Our website uses plugins from the video portals YouTube and Vimeo. The providers are YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA and Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

Data processing by us:
The data you enter on YouTube, e.g. via comments, likes, and the share function, etc., will be published by YouTube and will not be used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. We may share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent). Further information on the data protection provisions applicable to YouTube/Google can be found at https://policies.google.com/privacy?hl=de.

When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA after you have given your consent. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent). If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account. You have the right to object at any time for reasons arising from your particular situation. Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy. Vimeo Inc. is also certified in accordance with the EU-US and Swiss-US Privacy Shield. Further information can be found at https://vimeo.com/de.

If you send us an inquiry on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the required response. You always have the option of sending us confidential inquiries to the address given under "Controller".

You can set your browser so that it informs you about the use of cookies and, if necessary, prevent the setting of cookies there. 

Data processing by "YouTube":
It cannot be ruled out that web tracking methods are used on YouTube. Web tracking can also take place regardless of whether you are logged in or registered with YouTube. Unfortunately, we cannot influence YouTube's web tracking methods. Please be aware that it cannot be ruled out that your profile and behavior data will be used on YouTube, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence whatsoever on the processing of your data. We have no influence whatsoever on the processing of your data by YouTube. You can find more information on data processing by YouTube in their privacy policy at https://policies.google.com/privacy?hl=de.

Our website also uses plugins from the career guidance platform whatchado GmbH, Möllwaldplatz 4/39, 1040 Vienna, Austria. We do not process any personal data in this context. You can find more information on data processing by whatchado in their privacy policy at https://www.whatchado.com/de/terms/users/.

5.16    Use of Google Maps
For the job search, we also use map material from Google Maps (Google Inc.) to display job vacancies on an interactive map. As a result, information about the use of our job search, including your IP address, is transferred to Google servers in the USA and stored there. This means that Google can store cookies on your computer as soon as you use the job search.

When you access a web page on our website that contains Google Maps, your browser can establish a direct connection with Google's servers after you have given your consent. The map content is then transmitted by Google directly to your browser, which integrates it into the website. We have no influence on the data transmitted in this way and the scope that Google determines. You can find out more about this in Google's privacy policy: https://policies.google.com/privacy?hl=de 

In your browser settings, you can specify whether or not the cookies described may be set by Google. As the user, you therefore have full control over the use of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically.

The provision and the corresponding processing of the data is carried out for us on the basis of Art. 6 para. 1 sentence 1 a) GDPR (consent). If you leave the website with the job search and delete the cookies, the respective collection of information or the collection of information is stopped immediately.

5.17    Campaign success measurement
In order to be able to measure the success of our campaigns on the job portals we use (e.g. StepStone), we collect one-time data on the job portal from which the applicants clicked on a specific job offer to reach the online application system. For this purpose, we include the so-called source in the specific URL of the job.

The legal basis for measuring campaign success is Article 6(1)(f) of the General Data Protection Regulation (predominantly legitimate interest in measuring the efficiency of campaigns on job portals).