You are using an older browser. Please note that this site could possibly not be displayed correctly.
Share this article

The rewe-group.com website is owned and operated by REWE Group.
The intellectual property of all text, images, sound and software on this website lies with REWE Group, or are used with the permission of the respective owner of the appropriate rights.
It is permitted to view this page, print extracts, to save on the hard disk of your computer and pass it on to other people. However, it is neither permitted for commercial use, nor to use content or components in publications. Further rights are not linked to the use of this website.
REWE Group is not responsible for third party content of websites referenced by this page.

Important information concerning data protection when establishing contact in business


The respective responsible company within the REWE Group (hereinafter referred to as “REWE” or “we”) shall process your data, in order to establish contact with you. With this important information on data protection, we would like to inform you in particular about the extent and purpose of said processing, as well as your rights as the data subject (as of 01.01.2019).

1. The categories and purpose behind the processing of your personal data

1.1 Establishing contact in the context of a business relationship

In particular, we shall process your contact details (name, address, telephone number and email address), in order to initiate or conduct a business relationship.

The legal basis for the processing of your personal data is thus Art. 6 (1) a and b of the EU General Data Protection Regulation (your consent or pre-contractual measures respectively, the performance of contract) – if we receive the data directly from you or if we enter into a contractual obligation with you.

If you yourself are not an existing (or potential) business partner, we typically receive your contact details from our business partner, who named you as a contact person. In such a case, your data shall be processed on the basis of Art. 6 (1) f of the EU General Data Protection Regulation (the consideration of pertinent interests, based on our legitimate interest in establishing contact with existing or potential business partners).

 

1.2 Establishing contact in the context of our public relations work

We also maintain databases containing certain contact information, including those of political, media and press representatives, in order to be able to get in touch with these individuals with regard to relevant issues, events, etc. as part of our public relations work.

The processing of your personal data shall take place on the basis of your consent (Art. 6 [1] a GDPR), which you may provide us with by establishing contact in person (e.g. the presentation of your business card). With regard to your right to withdraw your consent, please see point 5.

We shall also collect contact data from public sources and maintain this information in our databases. The legal basis for data processing operations described here is Art. 6 (1) f of the General Data Protection Regulation (the consideration of pertinent interests, based on our legitimate interest in establishing contact with political, media and press representatives as part of our public relations work).

 

2. Recipients of your personal data

Your data as collected by us shall not be disclosed to third parties.

However, in certain cases, we shall task service providers with the processing of personal data, including the sending of emails, the storage of your data in a secure data centre, and the maintenance and analysis of databases.

Each and every data processor has: a) been carefully selected, b) been tasked with providing support to REWE as per strict instructions and c) only been granted access to your data to the necessary extent (and for the necessary amount of time), in order to render those services required, or to the extent that you have consented to the processing and use of your data.

We also use service providers located in third countries outside the European Union for the processing of your data. Countries outside the European Union manage the protection of personal data differently to those countries within the European Union. There is currently no decision in place by the EU Commission stipulating that these third countries should, in general, provide an adequate level of protection. We have therefore taken specific measures to ensure that your data is processed in third countries as securely as it would be within the European Union. With regard to those service providers situated in third countries, we conclude a data protection contract (containing standard data protection clauses) as provided by the EU Commission for the processing of personal data in third countries.  This ensures the appropriate guarantees for the protection of your data with those service providers located in a third country. You may request a copy of this data protection contract by availing yourself of the contact details above.

 

3. Retention periods, deletion time limits

In principle, we only store your processed data to the extent that a legal basis for said storage exists. When said legal basis no longer applies, your data will be deleted within 60 days. Your data shall also be stored / deleted for as long as a contractual or statutory retention period applies.

 

4. Automated decision-making; profiling

We shall not use your personal information for the purposes of automated decision-making or profiling.

 

5. Your rights as a data subject

To the extent that REWE processes your personal data, you shall – as the data subject – be entitled in particular to the following rights, in consideration of any and all pertinent data protection requirements.

Disclosure

You may request the disclosure of information concerning your personal data being processed by us.

Correction

Should your information not (or no longer) be accurate, you may request its correction. If your data is incomplete, you may request its supplementation.

Deletion

You shall have the right to request the deletion of your personal data. Please note that any claim to said deletion shall depend on the existence of a legitimate reason. Furthermore, there may be no overriding regulation stipulating that we retain your personal data.

Restriction of processing

You shall have the right to request the restriction of the processing of your personal data. Please note that any claim to said restriction of processing shall depend on the existence of a legitimate reason.

Objection

If data is recorded on the basis of Art. 6 (1) f GDPR (data processing for the protection of legitimate interests), you shall have the right to register your objection to the processing of your personal data for reasons that arise from your particular situation. In the event of your objection hereto, we shall no longer process your personal data unless we can demonstrate compelling legitimate reasons for its processing that outweigh your interests, rights and freedoms, or if said processing is for the purpose of enforcing, pursuing or defending legal claims.

Right of appeal

You may lodge an appeal with the relevant data protection supervisory authority if you disagree with the processing of your data.

Data portability

You shall have the right to receive the personal data you have provided to us in an electronic format.

Revocation of your consent

You shall have the right to revoke your consent (Art. 6 [1] a GDPR) at any time to the processing of any personal data you have provided to us. This shall also apply to the revocation of any declaration of consent, which you have submitted to us prior to the legal validity of the General Data Protection Regulation, i.e. before 25.05.2018. The easiest way to revoke your consent is to contact us by email using the contact details above. The revocation of your consent shall not affect the legality of any and all processing of your personal data executed up until the point in time of said revocation.

 

6. The responsible companies of the REWE Group and their points of contact regarding data protection issues          

The following contains an alphabetical listing of those processing companies and their points of contact pertaining to data protection. The responsible authority for data processing refers to the legal entity where said processing takes place.

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Tel.: +49 (0) 421 69 66 32 0

rewe-group@datenschutz-nord.de

Contact partner for the following companies within the REWE Group:

Dienstleistungszentrum Südmarkt GmbH & Co. OHG
Rewestraße 1  
01683 Ketzerbachtal-Starbach  

Gebrüder Mayer Produktions- und Vertriebs GmbH
Mayflorstraße 1 - 3
29399 Wahrenholz

Glockenbrot Bäckerei GmbH & Co. oHG             
Domstraße 20  
50668 Köln

HLS Handel und Lager Service GmbH
Stolberger Str. 92           
50933 Köln

Penny Dienstleistung GmbH
Domstraße 20  
50668 Köln         

Penny Markt GmbH
Domstraße 20
50668 Köln

Penny Spedition GmbH
Domstraße 20  
50668 Köln

PRO-DATA Steuerberat.ges. mbH
Domstraße 20
50668 Köln

REWE Berlin Logistik GmbH
Altes Gaswerk Mariendorf 31
12105 Berlin

REWE Deutscher Supermarkt AG & Co. KGaA
Domstraße 20
50668 Köln

REWE Digital GmbH
Domstraße 20
50668 Köln

REWE Digital Fulfilment GmbH
Domstraße 20
50668 Köln

REWE Group Buying GmbH
Domstr. 20
50668 Köln

REWE Group Fruchtlogistik GmbH
Domstraße 20
50668 Köln

REWE Markt GmbH
Domstraße 20
50668 Köln

REWE Partner GmbH
Domstraße 20
50668 Köln

REWE Regiemarkt GmbH
Domstraße 20
50668 Köln

REWE Spedition und Logistik GmbH      
August-Horch-Straße 11
56070 Koblenz

REWE Südmarkt GmbH
Domstraße 20
50668 Köln

REWE Systems GmbH
Domstraße 20
50668 Köln

REWE-Versicherungsdienst GmbH
Domstraße 20
50668 Köln

REWE Wein online GmbH
Domstraße 20
50668 Köln

REWE-Zentral-Aktiengesellschaft
Domstraße 20                                                                 
50668 Köln                                                                       

REWE Zentrale – Business Organisation GmbH
Domstraße 20
50668 Köln

REWE-Zentrale-Dienstleistungsgesellschaft mbH
Domstraße 20
50668 Köln

REWE-Zentralfinanz eG               
Domstraße 20
50668 Köln

Südmarkt Olching GmbH & Co. KG OHG
Domstraße 20  
50668 Köln

Supermärkte Nord Vertriebs GmbH & Co. KG
Benzstr. 10
24148 Kiel

toom Baumarkt GmbH
Humboldtstraße 140-144
51149 Köln

Wilhelm Brandenburg GmbH & Co. oHG
Domstraße 20
50668 Köln

ZooRoyal GmbH
Schanzenstraße 6-20
51063 Köln

_________________________

Responsible authority for data processing:

Campina Verde Deutschland GmbH
Domstraße 20 
50668 Köln

Point of contact for any questions relating to data protection

Steinberg Rechtsanwälte
Kaiser Wilhelm Ring 3 - 5
50672 Köln
Tel.: 0221 944 0360
Datenschutz@EurogroupDe.de  

_________________________

Responsible authority for data processing:

REWE-Beteiligungs-Holding International GmbH
Domstraße 20
50668 Köln

Point of contact for any questions relating to data protection:

KINAST Rechtsanwaltsgesellschaft mbH
Hohenzollernring 54
50672 Köln
dpo-penny@kinast-partner.de

_________________________

Responsible authority for data processing:

REWE Group Card Service GmbH
Domstraße 20
50668 Köln

Point of contact for any questions relating to data protection:

REWE Group Card Service GmbH
Domstraße 20
50668 Köln
Datenschutz-CardService@rewe-group.com