Back to Data & Privacy

Privacy Policy

Data Protection Notices

1. General Information

a) Introduction

With this Data Protection Notices, we want to inform you about data processing and data privacy in connection with your application at METRO Digital GmbH via our portal for job seekers and candidates. This website you are visiting is used to support our METRO Digital GmbH in recruiting and job placement activities by allowing job search, online application, and communication and notification functionalities. Respecting your privacy and ensuring that you are informed about how your data is used for these recruiting and hiring purposes is important to us. We do our utmost to make sure that your personal information provided is kept confidential and in compliance with all applicable data protection laws. We therefore ask you to inform yourself by reading the following Data Protection Notices or contacting us if you have any further questions on data privacy or our job placement process.

b) Controller

METRO Digital GmbH, Metro-Straße 1, 40235 Düsseldorf (in the following also described as “METRO” or “we”) is the controller according to the GDPR and therefore responsible for the data processing explained herein. For questions or requests concerning the data processing, please contact our data protection officer, whose contact details you can find below.

c) Data Protection Officer

You can contact our data protection officer at any time by using the following contact details:

  • E-Mail: datenschutz@metro.digital
  • The right to receive information about the data processing and a copy of the processed data (right to access, Art. 15 GDPR),
  • The right to demand the rectification of inaccurate data or the completion of incomplete data (right to rectification, Art. 16 GDPR),
  • The right to demand the erasure of personal data and, in case the personal data have been made public, the information towards other controllers about the request of erasure (right to erasure, Art. 17 GDPR),
  • The right to demand the restriction of the data processing (right to restriction of processing, Art. 18 GDPR),
  • The right to receive the personal data concerning the data subject in a structured, commonly used and machine-readable format and to request the transmittance of these data to another controller (right to data portability, Art. 20 GDPR),
  • The right to withdraw a given consent at any time to stop a data processing that is based on your consent. The withdrawal will not affect the lawfulness of the processing based on the consent before the withdrawal (right to withdraw consent, Art. 7 GDPR), and
  • the right of objection Art. 21 GDPR

2. Information Regarding The Processing

a) Online applications for Jobs

In order to send us your online application for jobs you must use our online portal for job seekers and candidates.

When submitting your application you can complete your personal profile data also by using your LinkedIn® or Facebook account. With a one-time registration, and by confirming your email and password saved with LinkedIn or Facebook, selected information is copied into your application via the online job portal, this might include the information stored in your LinkedIn® or Facebook Profile: name, last name, professional experience, applied studies, skills and knowledge or recommendation. You can choose which information you can transfer from LinkedIn® or Facebook to your application. You may also provide a link to any online social media profile (for example GitHub, Portfolio or others) that belongs to you. In this case, we will process the data provided on such online social media profile which is relevant for your application.

The personal data which you enter during the application process will be processed for recruiting and management purposes. The provision of your personal data concerning your nationality, professional experience, studies, as well as your certificates or other documents (for example your CV or a cover letter) is voluntarily. You are neither obliged to provide these personal data to us, nor is this provision necessary to fulfill a statutory or contractual requirement during the application process or a requirement necessary to enter into a contract. If you do not provide these personal data to us during the application process, this will not result in any consequences for you. The provision of the remaining categories of your personal data within the application process is necessary to enable us to perform the application process, to decide about entering into a contract with you and for administration purposes in connection with completing a hiring process.  This processing is legally based on Art. 6 paragraph 1 sentence 1 letter b) GDPR and Article 88 GDPR in connection with Section 26 para. 1 sentence 1 of the German Federal Data Protection Act (FDPA). The provision of your application data is required to enable us to enter into a contract with you. Where required by law, your personal data will also be used to fulfill legal obligations. This processing is legally based on Art. 6 paragraph 1 sentence 1 letter c) GDPR. If you do not provide these personal data to us, we will not be able to process and consider your application. If you do not wish to use this online service, you will still be able to send applications in written form by post to METRO.

Submitting your application through our career portal, employees of these companies with access rights include authorized operators, such as members of the Information Technology departments, Human Resources departments and responsible approvers of job vacancies and employee hiring have access to your data. This processing is necessary for the purpose of operating the application process and to decide about entering into a contract with you. It is legally based on Art. 6 paragraph 1 sentence 1 letter b) GDPR Article 88 GDPR in connection with Section 26 para. 1 sentence 1 of the German Federal Data Protection Act (FDPA). The provision of your data is required to enable us to decide about your application and about entering into a contract with you.

During the job application process, especially if you decide to postpone your application, you have to opportunity to be reminded of the job ad later on via email (“remind me later” option). This processing is only performed with your prior consent after entering your email address and clicking the “remind me later” button and is legally based on Art. 6 paragraph 1 sentence 1 letter a) GDPR.  You will be able to unsubscribe at any time through the unsubscribe function in your remind me later  notification.

The application documents may contain special categories of personal data. According to Article 9 GDPR, special categories of personal data are personal data which reveal racial and ethnic origin, political opinion, religious (e.g. information on religion/denomination) or ideological beliefs or trade union membership, as well as the processing of biometric data for unique identification, health data (e.g. information on the degree of severe disability) or data on sex life or sexual orientation. If your CV contains special categories of personal data, we do not process them intentionally, unless required for the individual position. We expressly ask you not to send us such data, unless required for the individual position. If, as part of your application documents, you voluntarily and contrary to our express request, send us special categories of personal data subject to Article 9 paragraph 1 GDPR (e.g. information on your political opinion or trade union membership), we will process these on the basis of your consent. This also applies if you provide us with further special personal data in the course of the application procedure.  By voluntarily submitting this data, you agree to the storage of this special personal data as part of the application process. In these cases, the information is always voluntary and is provided with your express consent, which you provide by voluntarily submitting this data. If we are required by law to process special categories of data subject to Article 9 paragraph 1 GDPR (e.g. information on religious affiliation/denomination or disabilities) we process your data accordingly to the lawful purpose (e.g. tax collecting or compliance with labour law, social security law and social protection law) only. We do not take this special personal data into account when making a selection decision, unless it is required by law to take this special personal data into account. It is possible, for example, in some job advertisements that people with disabilities may receive preferential treatment in accordance with the applicable laws.   The legal basis for the processing of (i) voluntarily provided data results from Article 88 paragraph 1 GDPR in connection with Section 26 paragraph 3 sentence 2 FDPA; (ii) legally required data results from Article 88 paragraph 1 GDPR in connection with Section 26 paragraph 3 sentence 1 FDPA.

Our job portal is provided through third party technical web-based solutions which help us manage applications. Because of this, also our service providers have access to your personal data. Our service providers act as data processors on our behalf according to Art. 28 GDPR. METRO and its service providers use technical and organizational security measures to protect your data from manipulation, loss, destruction or access by unauthorized persons. Any personal data that is provided to METRO or its service providers will be transmitted and stored in an encrypted form. The data you provide during application process will be stored in this solution on a server located in the European Union. Your personal data will be disclosed to support teams in Europe, which have access to the solutions for the purpose of providing support for candidates, METRO AG and the METRO affiliated companies. This processing is necessary to pursue our legitimate interests of granting support and is legally based on Art. 6 paragraph 1 sentence 1 letter f) GDPR.

During the job application process, you may be invited to voluntarily participate in a video interview. In this case, your name, E-mail address and jobcode will be disclosed to the online platform of our third party service provider for video interviewing. For the purpose of enabling the video interviewing, scheduling, and providing support for any technical issues, your name and email address will be transferred to the video interview platform provider and stored on a server located in Ireland. Regarding all other personal data, which is collected, processed and stored in connection with such a video interview, you will be informed prior to conducting the interview within the platform and your explicit consent will be requested. This processing is legally based on Art. 6 paragraph 1 sentence 1 letter a) GDPR.

We do not disclose your personal information to any other recipients without your consent or unless we are legally required to do so. The disclosure for the purpose of fulfilling a legal obligation is based on Art. 6 paragraph 1 sentence 1 letter c) GDPR.  

We store your personal data as long as is necessary for processing your submitted applications, except where otherwise required by law. Such storage for the purpose of fulfilling a legal obligation is based on Art. 6 paragraph 1 sentence 1 letter c) GDPR. Your application data will be saved in our application management system for six months after the completion of any related application processes. This is necessary for the purpose of keeping evidence for the possible case of a later discrimination lawsuit, which is our legitimate interest. This storage is based on Art. 6 paragraph 1 sentence 1 letter f) GDPR.

b) Cookies

METRO’s job portal uses technical solutions to provide information about career and job offers. This includes the use of cookies and session cookies. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). You can configure your browser so that you are notified when you receive a cookie and you can decide on an individual basis if you want to accept them; you can also refuse cookies for certain cases or generally refuse them. For more information, see the help section of your web browser. We distinguish between essential cookies, which are absolutely necessary for the use of our websites, functional cookies, which facilitate the comfortable use of our website, performance & statistics cookies, with which we generate aggregated data on website usage and statistics, and marketing cookies to display relevant content and advertising. Essential cookies are placed without your consent based on Article 6 paragraph 1 sentence 1 letter b) GDPR. By accepting our "cookie banner", you agree to the processing of your personal data through non-essential cookies based on your selection criteria. This personal data is processed on the basis of Article 6 paragraph 1 sentence 1 letter a) GDPR.

c) Website Visitor Data

Website visitor data and candidate data, which has been anonymized, will be collected by our technical solutions in connection with the METRO job portal to record your accesses to our web pages. As the case may be, the recorded data might include your IP address, which is however deleted immediately, the device operating system that was used for access, the website from which you visited us, the websites you visit or the search terms used to find our website. The data is always anonymized prior to usage. This is performed for statistical and security purposes. It is necessary to pursue the legitimate interest of improving and securing our services. This processing is legally based on Art. 6 paragraph 1 sentence 1 letter f) GDPR.  The provision of your personal data is voluntary.

The constant development of the Internet requires occasional adjustments to our Data Protection Notices. We retain the right to make changes when necessary.

3. Your Rights

As a data subject, you can contact our data protection officer at any time with a formless notification under the contact information mentioned above under to exercise your rights according to the GDPR. These rights are the following:

You have the right to object at any time to the processing of your data on the basis of Art. 6 para. 1 f GDPR (data processing on the                basis of a balance of interests) if there are reasons for this arising from your particular situation.

 If you object, we will no longer process your personal data, unless we can prove compelling and applicable reasons for the processing, which   outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims]

You furthermore have the right to lodge a complaint with a supervisory authority if you consider the data processing to be an infringement of the GDPR (right to lodge a complaint with a supervisory authority, Art. 77 GDPR).

Following: METRO Digital Romania SRL

a) Introduction

With the following data processing notice, Metro Digital Romania SRL, a Romanian legal entity, address: 4C Șos. Pipera Tunari, Construdava Business Centre, Voluntari, Ilfov County, postal code: 077190, Romania, (hereinafter referred to as "Metro", "we", or "us") provides information about the processing of personal data related to the contractual relationship with its Partners (hereinafter referred to as “Agreement”). Personal data means any information about an identified or identifiable natural person (such as first and last name, address, phone number or email address). In the following, we would like to inform you in particular which personal data are processed in connection with the Agreement, the purposes of this processing and your rights regarding such processing according to the General Data Protection Regulation (“GDPR”).

b) Controller / Data Protection Officer

Metro is the “controller” (Art. 4 no. 7 GDPR) of  data processing in connection with the Agreement and therefore responsible for the processing of your personal data. If you should have any questions, requests or other issues regarding our processing of your personal data, you can contact our data protection officer anytime by using the following contact details:

 

  • METRO Digital Romania SRL, 4C Șos. Pipera Tunari, Construdava Business Centre, Voluntari, Ilfov County, postal code: 077190, Romania
  • Email: dataprotection@metro.digital
  • Partner Data (eg. Authorized Natural Person “PFA” or in the context of certain verifications that could also return the data of the representatives): Name of the company, company address, company contact data (e.g. phone number, email address), bank account data, tax data (e.g. tax number) and additional data that the Partner provides in the course of the Agreement;
  • Personal data regarding the representatives/contact persons (employees) of the Partner: Name, function/position held, work phone number, work email address, business address and additional data that the Partner/representatives/contact persons  provides in the course of the Agreement.

2. Information regarding the Processing of Personal Data

a) Data Categories Processed by us:

b) The source of the personal data of the representatives/contact persons of the Partners:  these data are provided directly by you or by the Partner with whom we have a contractual relationship and which you represent.

c) Purposes and Legal Basis of Processing

  • Partner Data: Metro processes Partner Data for the performance of the Agreement. This processing is based upon a legal obligation (Law 31/1990 of Companies – updated) according to Art. 6 para. 1 letter c) from GDPR and a contractual obligation (if it is the case) according to Art. 6 para. 1 letter b) from GDPR. We furthermore process Partner Data for identifying the Partner, for the evaluation of Partner’s financial standing, for the preparation and enforcement of claims, for Partner support/service, for internal statistics and risk management, for compliance reasons and for data security. This processing is based on Art. 6 para. 1 letter f) from GDPR. These purposes are closely connected with the performance Agreement and constitute a legitimate legal and economic business interest of Metro. We might further process your data if the processing is necessary to fulfil a legal obligation, e.g. for reports to (tax) authorities. In this case the processing is based on Art. 6 para. 1 letter c) from GDPR. Partner data may also be necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.
  • Personal data regarding the representatives/contact persons (employees) of the Partner: For the performance of the Agreement it is necessary that Metro processes personal data regarding the representatives/contact persons of the Partner (e.g. Partner employees and/or subcontractors) to a certain extent - e.g. for communication with contact persons within the scope of the Agreement. The processing is carried out on the basis of Art. 6 para. 1 letter f) from GDPR. It is a legitimate interest of Metro to process personal data regarding the representatives/contact persons of the Partner for the performance of the Agreement, even if they are not a contracting party themselves, because otherwise the performance of the Agreement will not be possible.

d) Recipients of Personal Data

To achieve the purposes mentioned above under 2. b), we use service providers, i.e. as data processors according to Art. 28 from GDPR, for example our service providers for cloud hosting, maintenance services or for the sending of emails. These may be external service providers and also METRO  Digital affiliates, which are located in countries within and outside the European Union (EU) and the European Economic Area (EEA) (i.e. the  international data center of the Metro, which is operated by the Metronom GmbH). We ensure i.e. by contractual regulations (Standard Contractual Clause), that these service providers process personal data in accordance with European data protection law to guarantee a high data protection level, even if personal data are transferred to a country, in which another data protection level is common and for which no adequacy decision of the Commission of the EU exists. Another transfer of personal data to other recipients is not performed, except where we are obliged to do so by law. For more information about appropriate safeguards for the international data transfer or a copy of them, please contact our data protection officer 

e) Mandatory Data Provision and Storage Period

The provision of the data set out under a) is mandatory for the performance of the Agreement. In general, Metro stores your data until the Agreement has been terminated and/or as long as we have a legitimate interest which allows us to keep the data. As far as any of the data is subject to statutory data retention periods, Metro will store the data concerned for the duration stipulated in the respective statutory provisions. In the latter case, the data will be stored in restricted form whereas further processing is allowed exclusively for compliance with a legal obligation, for the establishment, exercise or defense of legal claims, the protection of the rights of another person or reasons of important public interest.

3. Your Rights

As a data subject, you can contact our data protection officer at any time with a formless notification under the contact details mentioned above under 1. b) to exercise your rights according to the GDPR. These rights are the following:

  • The right to receive information about the data processing and a copy of the processed data (right to access, Art. 15 GDPR),
  • The right to demand the rectification of inaccurate data or the completion of incomplete data (right to rectification, Art. 16 GDPR),
  • The right to demand the erasure of personal data and, in case the personal data have been made public, the information towards other controllers about the request of erasure (right to erasure, Art. 17 GDPR),
  • The right to demand the restriction of the data processing (right to restriction of processing, Art. 18 GDPR),
  • The right to receive the personal data concerning the data subject in a structured, commonly used and machine-readable format and to request the transmittance of these data to another controller (right to data portability, Art. 20 GDPR),
  • The right to object the data processing in order to stop it (right to object, Art. 21 GDPR),
  • The right to withdraw a given consent at any time to stop a data processing that is based on your consent. The withdrawal will not affect the lawfulness of the processing based on the consent before the withdrawal (right to withdraw consent, Art. 7 GDPR). The right to lodge a complaint with a supervisory authority if you consider the data processing to be an infringement of the GDPR (right to lodge a complaint with a supervisory authority, Art. 77 GDPR)

Already working at METRO.digital ?

Let’s recruit together and find your next colleague.

Teamtailor

Career site by Teamtailor