Privacy Policy

Privacy information for your online application on our website

As of 01/11/2025

This information provides you with an overview of how your personal data is processed when you visit our website https://www.rewe-lieferservice. jobs and when you submit an application for a position you have selected by clicking on the ‘Apply now’ button on our website.
We hereby inform you about what data we collect from you and how we use it. We also explain your rights under applicable data protection law and tell you who to contact if you have any questions.

1. Who is responsible for data processing?

The REWE Group company to which you are applying is responsible for processing your personal data.

REWE Digital Fulfilment Services GmbH
Domstraße 20
50668 Cologne
Email: jobs-lieferservice@rewe-group.com

2. Who can you contact if you have questions about data processing?

You can contact the controller at any time if you have questions about the processing of your data.

REWE Digital Fulfilment Services GmbH
Data Protection Officer
Domstraße 20
50668 Cologne
Email: datenschutz@rewe.de

3. What data do we process about you?

We process your personal data when you visit our website https://www.rewe-lieferservice.jobs and click on the ‘Apply now’ button to submit your online application.

Specifically, this may include the following data:

Technical data that is generated when using our website https://www.rewe-lieferservice. jobs (pages accessed, the date and time of the page access, the duration of the visit, the identification data of the browser and operating system type used, and the website from which you access the data entry page, your IP address)
Data that you enter and upload in our application form:
Gender
Your name (first name, surname)
Your email address
Your telephone number
Date of birth
Street, postcode, town/city
Whether you have any knowledge of German, if applicable
Any comments you may have regarding your application, if applicable
Your application documents (CV, photo and references, if applicable)
Data we require to verify your consent, e.g. when adding you to the talent pool, provided you have consented to the extended use of your applicant data in our talent pool.

4. Is there an obligation to provide the data?

The provision of your data is not required by law. However, some of the data mentioned is necessary in order to submit an application and, if applicable, to be included in the talent pool. This data is marked as mandatory fields. If the required data is not provided, it will not be possible to submit an application on our website. Additional inclusion in the talent pool is voluntary and only takes place with your consent.

5. For what purposes do we process your data and on what legal basis?

5.1 Conducting application procedures
We process the applicant data you enter in your online application for the purpose of conducting the application procedure. Your data and any file attachments you send are transferred via an encrypted connection. Your data will be received by the Human Resources department at REWE Markt GmbH, which acts as the HR service provider for REWE Digital Fulfillment Services GmbH, and forwarded to the specialist department responsible for the advertised position or to the persons at REWE Digital Fulfillment Services GmbH who are responsible for handling the application process. The same applies if you send us an application by e-mail or post. All parties involved will treat your application documents with the necessary care and confidentiality. The legal basis for the data processing described is Art. 6 (1) (b) GDPR and § 26 (1) (1) BDSG (implementation of the application process, decision on the establishment of an employment relationship).

5.2 Talent pool

If you have given us your consent, we will process your data in our talent pool. This allows the controller, as an employer, to access the data as soon as a job vacancy arises that matches the profile of an applicant in the talent pool. This enables us to contact you and ask whether you are interested in the position. The legal basis for this data processing is Art. 6 (1) (a) GDPR (consent).

5.3 Execution of the employment relationship

If we conclude an employment contract with you, we will continue to process your data for the purposes of the employment relationship if this is necessary for its execution or termination. The legal bases for the data processing described are Art. 6 (1) (b) GDPR and § 26 (1) (1) BDSG (performance of the employment relationship).

5.4 Defence against legal claims

We process your data to the extent necessary to defend against legal claims asserted in connection with the application process. The legal basis for this is Art. 6 (1) (f) GDPR (balancing of interests, based on the interest of the controller to whom you have applied for a job in being able to defend claims in proceedings under the General Equal Treatment Act).

5.5 Web server logs

When you visit our websites, we process the connection data of the requesting computer, including the IP address, the websites you visit on our site, the date and duration of your visit, the identification data of the browser and operating system type used, and the website from which you visit us, in order to ensure the security of our IT systems. The legal basis for the data processing described is Art. 6 (1) (f) of the General Data Protection Regulation (balancing of interests, based on the interest of the controllers in ensuring the security of IT systems).
We also convert the IP address transmitted by your computer into geocoordinates and determine your approximate location. Your exact location is not determined. We process the data to compile statistics on how our website is used and to measure the success of our employer advertising campaigns in specific regions. The legal basis for the data processing described is Art. 6 (1) (f) GDPR (balancing of interests, based on REWE’s interest in measuring the success of employer advertising campaigns).

5.6 Cookies and other technologies (website analysis/tracking)

We use cookies and other technologies in some areas of our website, e.g. to recognise visitors’ preferences and to optimise the design of the website accordingly. This facilitates navigation and ensures a high level of user-friendliness. Cookies and other technologies help us to identify particularly popular areas of our website.

Cookies are small text files that are stored on the hard drive of your device. They allow information to be stored for a certain period of time and your device to be identified. We use permanent cookies to improve user guidance and individual performance display. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. Important: If you completely exclude the use of cookies, you may not be able to use individual functions of our website.

We distinguish between necessary, statistical and marketing cookies depending on the purpose of the cookies and other technologies.
The necessary cookies and other technologies are required to ensure the central functions of the website and the fulfilment of contracts with customers and cooperation partners. Their use is based on the legal basis of Section 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) (b) GDPR (contract initiation or fulfilment) and (f) GDPR (overriding legitimate interests). The latter interests are, in particular, the monitoring of the technical performance of the website. They cannot therefore be deactivated by you as a website user via our consent management system.
All cookies and other technologies are described in detail in the cookie banner under Services. You can view these at any time in the Privacy Settings in the footer of the website. Please ensure that you have disabled all privacy/pop-up blockers for the website in your browser so that the cookie banner can be displayed.
Statistical cookies and other technologies are needed to understand how our visitors use our portal, to identify errors and to continuously improve the portal. They are used on the legal basis of Section 25 (1) TDDDG (consent for setting or reading cookies) in conjunction with Art. 6 (1) (a) GDPR (consent for the subsequent data processing). Data processing only begins once you have given your opt-in (consent). You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the legality of the data processing carried out until the revocation.

All cookies and other technologies are described in detail in the cookie banner under Services. You can view these at any time in the Privacy Settings in the footer of the website. Please ensure that you have disabled all privacy/pop-up blockers for the website in your browser so that the cookie banner can be displayed.

You can also revoke your consent at any time in the ‘Privacy Settings’.

Marketing cookies and other technologies are used to understand your interests and to be able to display individual content that is relevant to you. Their use is based on the legal basis of Section 25 (1) TDDDG (consent for setting or reading cookies) in conjunction with Art. 6 (1) (a) GDPR (consent for the subsequent data processing). Data processing only begins once you have given your opt-in (consent). You can revoke your consent to data processing at any time with future effect. The revocation does not affect the legality of the data processing carried out until the revocation.

You can also revoke your consent at any time in the ‘Privacy Settings’.

5.7 Forwarding to social media services

You will find links to social media services on our website. Links to the websites of social media services can be identified by the respective company logo. If you follow these links, you will be taken to the REWE delivery service’s company profile on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This transmits to the servers of the social media service that you have visited our website. In addition, further data is transferred to the provider of the social media service. This includes, for example:

Address of the website where the activated link is located
Date and time when the website was accessed or the link was activated
Information about the browser and operating system used
IP address

If you are already logged in to the relevant social media service when you activate the link, the provider of the social media service may be able to determine your user name and, in some cases, even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can prevent this association with your personal user account by logging out of your user account beforehand.

The servers of the social media services are located in the United States and other countries outside the European Union. The data may therefore also be processed by the social media service provider in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as in the Member States of the European Union.

We have no influence on the scope, type and purpose of data processing by the social media service provider. For more information on how your data is used by the social media services integrated into our website, please refer to the privacy policy of the respective social media service.

6. Is automated processing carried out for profiling purposes?

Your personal data will not be used for automated decision-making or profiling.

7. Who has access to your data and for what reason?

Within the responsible party, REWE Digital Fulfillment Services GmbH, where you are applying for a job, only persons who need your data to perform their assigned tasks will have access to it. This mainly concerns employees in the human resources department. If you have given your consent to be included in the talent pool, the HR department of the responsible party may access your data in order to contact you if a suitable job becomes available. In addition, other service providers who support us in performing our tasks may also have access to your data. These are service providers in the following categories:

Hosting service providers for the operation of our servers, our website and our applicant tool
Development service providers for the programming, development, maintenance and support of software applications, in particular the online application system
IT service providers for the support and provision of our services
IT service providers who supply us with our applicant tool and talent pool
Where applicable, personnel service providers to support us in selecting applicants
Website technology service providers, which you can view in the privacy settings (cookie banner)

Service providers used by us must meet special confidentiality requirements. They only have access to your data to the extent and for the period necessary to perform their tasks.

8. Where do we obtain your data from?

We collect your applicant data directly from you when you enter it in the application form on our website.

9. Is data processed outside the European Union?

Your applicant data is not transferred to third countries.

10. How long is the data stored?

We store your data for as long as is necessary to make a decision about your application. If an employment relationship is not established, we store the application data for six months after notification of the rejection decision. After this period has expired, it will be deleted unless longer storage is necessary due to legal disputes or is legitimised with your consent in the talent pool. If we conclude an employment contract with you, we will transfer your data from the online application system to our personnel management system.
We store your consent data, such as the type of consent given, the time stamp of submission, and the time stamp of revocation, for three years as proof of the legal basis for data processing in our applicant pool/talent pool until revocation.
We automatically delete your data from the talent pool after 3 years. In the event of earlier withdrawal of the declaration of consent, we will delete it within one week of receiving the withdrawal.
We also store e-mails or correspondence relating to your withdrawal of consent and correspondence regarding the assertion of your rights as a data subject, including the personal data contained therein, for three years as proof of the proper exercise of your rights as a data subject. This data will be deleted three years after the end of the year in which you exercised your right(s) or withdrew your consent.

11. What rights do you have?

11.1 Information

You may request information about your personal data processed by us.

11.2 Correction

If your information is no longer accurate, you may request that your data be corrected. If your data is incomplete, you can request that it be completed.

11.3 Erasure

You have the right to request the erasure of your data. Please note that a claim for erasure depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to retain your data.

11.4 Restriction of processing

You have the right to request the restriction of the processing of your data. Please note that a claim for restriction of processing depends on the existence of a legitimate reason.

11.5 Right to object

You have the right to object to the processing of your data for reasons arising from your particular situation. In the event of a justified objection, we will no longer process your data. An objection is also only possible if we process your data on the legal basis of our overriding legitimate interests (Art. 6 (1) (f) GDPR). An objection to advertising is not subject to any justification.

11.6 Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

11.7 Data portability

You have the right to receive personal data that you have provided to us in an electronic format.

11.8 Revocation of your consent

You have the right to revoke your consent(s) to the processing of your data, which you have given to us, at any time. The easiest way to revoke your consent is to contact us by e-mail using the contact details above. The withdrawal of consent does not affect the lawfulness of the processing of your data carried out until the withdrawal.
You can easily withdraw the consent given in our consent management system, in the cookie banner of the website (privacy settings), at the same place.