REWE-ZENTRALFINANZ eG (hereinafter referred to as "REWE") would like to inform you in the following data protection declaration about the extent to which personal data is collected from you when you participate in competitions and for what purpose this data is used. Furthermore, REWE will point out which rights you are entitled to in this context. Please also inform your accompanying persons about the conditions of participation and this data protection notice.
1. Details of the controller and data protection officer
Responsible party:
REWE-ZENTRALFINANZ eG
Domstrasse 20
50668 Cologne
Telephone: 0221 149-0
The data protection officer of REWE-ZENTRALFINANZ eG can be reached at the following contact details:
REWE-ZENTRALFINANZ eG
Data Protection Officer
Domstr. 20
50668 Cologne
E-mail: datenschutz@rewe-group.com
2. What is personal data?
Personal data are individual details about personal or factual circumstances of an identified or identifiable natural person. This includes information such as your real name, your address, your telephone number and your date of birth (if provided). Statistical anonymous information that cannot be directly or indirectly linked to you - such as the popularity of individual web pages on our website or the number of users of a page - is not personal data.
3. What data do we process from you?
Data that we receive when you participate in a competition organised by us (details of the competition, answers, name, personnel number, postal address, department/specialist area, REWE Group company; e-mail address, telephone number).
We only process the aforementioned data to the extent that we actually receive it. We do not use your data for other advertising purposes. With your consent, we may send information that you provide to us in the context of competitions to the cooperation partners selected by us. If you have won, we will publish your name on our websites and intranet pages.
4. Is there an obligation to provide the data?
The provision of your data is not mandatory. However, all of the aforementioned data is required in order to organise our competition safely and reliably. We will inform you when you enter data if the provision is required for the respective service or function.
5. For what purposes do we process your data and what is the legal basis for this?
Competitions
We process your data (name, personnel number, email address, (shipping) address and any other data required for the competition) in order to organise a competition. We process your data to check eligibility to participate, determine and notify the winner, send the prize and, if applicable, publish the winner. The legal basis for the data processing described is Article 6(1)(b) of the General Data Protection Regulation (organisation of the competition).
6. Who has access to your data and for what reason?
Within REWE Group, only persons who need your data to fulfil the tasks assigned to them will have access to it. Occasionally, especially in the case of ticketing for home matches of 1. FC Köln, persons from other REWE Group companies who are involved in ticket allocation may be given access to data. This serves the purpose of making better use of ticket quotas in order to enable a more efficient allocation of tickets. In addition, service providers who support us in the fulfilment of our tasks may be given access to your data. These are service providers in the following categories
- Supporting agency in the organisation of competitions: brands and emotions GmbH, Balanstr. 73, Building 9, 81541 Munich
- Sponsoring partner / partner of the REWE Group for individual competitions
- ProData Steuerberatungsgesellschaft mbH
- Human resources department of the responsible company
7.how long will the data be stored?
All data will be deleted 6 months after the end of the competition. Winners' data will be deleted after 10 years for tax law reasons.
Please also refer to the conditions of participation.
8.information, correction and deletion of your data
8.1 Information
You can request information about your personal data processed by us.
8.2 Correction
If your data is not (or is no longer) correct, you can request that your data be corrected. If your data is incomplete, you can request that it be completed.
8.3 Erasure
You have the Legal right to request the deletion of your data. Please note that a right to erasure depends on the existence of a legitimate reason. In addition, there must be no regulations that oblige us to retain your data.
8.4 Restriction of processing
You have the Legal right to request the restriction of the processing of your data. Please note that a right to restriction of processing depends on the existence of a legitimate reason.
8.5 Objection
You have the Legal right to object to the future processing of your data on grounds relating to your particular situation. In the event of a justified objection, we will no longer process your data. The processing of your personal data remains lawful until an effective objection is made.
8.6 Right to lodge a complaint
You are entitled to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
8.7 Data portability
You have the Legal right to receive personal data that you have provided to us in an electronic format.
8.8 Withdrawal of your consent
You have the Legal right to withdraw your consent to the processing of your data that you have given us at any time. This also applies to the revocation of declarations of consent that you gave us before the General Data Protection Regulation came into force, i.e. before 25 May 2018. The easiest way to withdraw your consent is to send an email to the contact details above. Withdrawing your consent does not affect the lawfulness of the processing of your data up to the point of withdrawal.