Data Privacy Statement
for the REWE Group
Annual Report 2021

(As of: May 2022)

REWE-ZENTRALFINANZ eG (hereinafter referred to as “REWE”) is the operator of the website www.rewe-group-geschaeftsbericht.de (hereinafter referred to as “website”), where the Annual Report of REWE Group is posted. In the following Data Privacy Statement, REWE will inform you about the amount of your personal data that is collected during your visit to and use of the website and the purpose for which this data is used.

Furthermore, REWE will explain the rights to which you are entitled in this regard.

1. RESPONSIBILITY FOR PROCESSING YOUR PERSONAL DATA

Details of the person responsible and data protection officer:

Responsible person:
REWE-ZENTRALFINANZ eG
Domstrasse 20
50668 Cologne
Germany
Phone: +49 (0)221 149-0

The data protection officer of REWE-ZENTRALFINANZ eG can be reached via the following contact details:

REWE-ZENTRALFINANZ eG
Data protection officer
Domstrasse 20
50668 Cologne
Germany
Email: datenschutz[at]rewe-group.com

2. WHAT IS PERSONAL DATA?

The term “personal data” refers to specific information about the personal or material circumstances of an identified or identifiable natural person. This includes such information as your correct name, address, telephone number and date of birth (if provided). Anonymous statistical information that cannot be directly or indirectly connected to you – including the popularity of individual websites we offer or the number of visitors to a page – is not considered to be personal data.

On this website, personal data becomes relevant especially in the context of the contact form (see section 5).

3. GENERAL INFORMATION REGARDING THE PROCESSING AND USE OF PERSONAL DATA DURING VISITS TO THE WEBSITE

To ensure system security, when you visit our website the Web servers store the connection data of the inquiring computer by default. The data is processed in accordance with Section 6 (1) lit. b) and f) of the General Data Protection Regulation (GDPR) and with the purpose of ensuring system security and of analysing the availability of the website.

The collected data set consists of

  • the page that was visited,
  • the date and time of the request,
  • the volume of data transmitted,
  • the IP address of the inquiring computer,
  • the browser and the operating system from which the page was visited,
  • the page from which the visit was started and
  • the status code of the page visit.

This data is stored for seven days.

4. WEBSITE ANALYSIS/TRACKING:

We use no website analysis, tracking tool or cookies on this website.

5. CONTACTFORM

You can send an email to presse[at]rewe-group.com, write us a letter or get in touch with us via phone. We will process your data to answer your request and to send you some information, if requested. Your data can be transmitted to the unit responsible for your request. The legal basis for the above-mentioned data processing is Article 6 Paragraph 1 Sentence 1 Letters b, f GDPR (entering into or performance of a contract, balancing of interests, based on REWE Group’s interest to answer requests by interested persons, stakeholders and other persons). You have the right to object to the processing of your data due to legitimate interests for reasons that evolve from your personal situation.

6. FACEBOOK, TWITTER, XING, LINKEDIN, INSTAGRAM, YOUTUBE

On our website, you will find links to the social media sites Facebook, Twitter, Xing, LinkedIn, Instagram and YouTube. The links are marked with the logos of the social media services. Clicking on one of these links will take you to REWE’s corporate page on the respective social media service. And you will then be connected to the server of that site. This informs the server of the social media services that you have visited our website. Additional data is also transmitted to the provider of the social media services. The information includes:

  • The address of the website on which the activated link is located
  • The date and time when the website was called up or the link was activated
  • Information about the browser and operating system being used
  • IP address

If you were already logged into the social networking site when the link was activated, the transmitted data may enable the network to identify your user name and perhaps even your real name, and to connect that information to your personal account on the social networking site. You can prevent such assignment to your personal user account by logging out from your account beforehand.

The servers of the social media sites are located in the United States and other countries outside the European Union. As a result, the data may be handled by providers of social media services in countries outside the European Union. Please remember that data protection laws that can govern companies in these countries generally provide less protection for personal data than do the laws in force in the European Union’s member states.

Note also that REWE has no influence over the scope, type or purpose of the data processing conducted by providers of social media services. More detailed information about the use of your data by the social media service providers that are linked to our website can be found in the privacy policy of each respective social media service.

7. AUTOMATED DECISION-MAKING; PROFILING

On our website, automated decision-making and profiling concerning your personal data do not take place.

8. STORAGE AND DELETION PERIODS

Your personal data is stored for the period of time necessary to fulfil the above-mentioned purposes and as long as there are no obligations or periods of retention to the contrary. Please find the relevant deletion periods in the corresponding paragraphs in this data privacy statement.

9. REQUESTING INFORMATION, CORRECTING AND DELETING DATA

9.1 Requesting information

You can request information about your personal data processed by us.

9.2 Correcting data

If your data is not correct (any more), you have the right to request the correction of your data. If your data is incomplete, you have the right to request the completion of the data.

9.3 Deletion of data

You have the right to have your data deleted. Please note that the right to deletion depends on the existence of a legitimate reason. Moreover, regulations that oblige us to store your data must not exist.

9.4 Restriction of data processing

You have the right to request the restriction of the processing of your data. Please note that the right to restriction of processing depends on the existence of a legitimate reason.

9.5 Objection

You have the right to object to the processing of your data for reasons that arise from your particular situation with effect for the future. In case of a justified objection, we will no longer process your data. Until effective objection, the processing of your personal data will remain legitimate.

9.6 Right to complaint

You have the right to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

9.7 Data portability

You have the right to receive the personal data you have submitted to us in an electronic format.