Privacy policy for the REWE Group Sustainability Report
As of May 2025
REWE-ZENTRALFINANZ eG (hereinafter "REWE") operates the website www.rewe-group-nachhaltigkeitsbericht.de (hereinafter referred to as “website”), where the annual sustainability report of the REWE Group can be viewed. REWE would therefore like to inform you in the following privacy policy about the extent to which personal data is collected from you when you visit and use the website and for what purpose this data is used. REWE would also like to explain what rights you are entitled to in this regard.
Data collector
REWE is responsible for the data collection and processing in accordance with data protection regulations.
Our data protection practices are in line with the legal requirements for data protection.
Responsibility
REWE-ZENTRALFINANZ eG
Domstraße 20
50668 Cologne, Germany
Telephone: +49 221 149-0
The contact details of the data protection officer of REWE-ZENTRALFINANZ eG are:
REWE-ZENTRALFINANZ eG
Data protection officer
Domstraße 20
50668 Cologne
E-Mail: datenschutz@rewe-group.com
What is personal data?
Personal data comprises details about the personal or factual circumstances of an identified or identifiable natural person, including information such as your real name, address, telephone number and date of birth (if provided). Statistical anonymous information that cannot be directly or indirectly linked to you – such as the popularity of individual website offers or the number of users a page – is not personal data.
General information on the processing and use of personal data when visiting the website
When you visit our website, the web servers store the connection data of the requesting computer by default for system security purposes. Data processing is carried out on the basis of Art. 6 (1) (b) and (f) of the General Data Protection Regulation (GDPR) and for the purpose of ensuring system security and analysing the availability of the website.
The collected data set consists of:
- the page that was accessed
- the date and time of the query
- the amount of data transmitted
- the IP address of the requesting computer
- the browser and operating system used to access the page
- the page from which the visitor came
- the status code of the page request
The data will be saved for 30 days and automatically deleted afterwards.
We only process the data mentioned to the extent that it actually arises with us. We exclude the use of your data for advertising purposes.
Is there an obligation to provide the data?
The provision of your data is not required by law. However, some of the data mentioned is necessary in order to be able to offer our services securely and reliably. The provision of other data is voluntary,but may be required to use certain services. When you enter data, we will inform you if its provision is required for the respective service or function. This data is marked as mandatory fields. If required data is not provided, the service or function in question cannot be provided. In the case of optional data, failure to provide it may result in us not being able to provide our services in the same form and to the same extent as usual.
Legal basis and purpose of data processing
Necessary technologies
These services, technologies and cookies are necessary to ensure central functions of the website. The use is based on the legal basis of Section 25 (2) (2) TDDDG (German Telecommunications, Digital Services and Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz)) in conjunction with Article 6 (1) (1) b (initiation or performance of a contract) and/or f (overriding legitimate interests) GDPR. The latter interests are the monitoring of the technical performance of the website. These services in question are as follows.
Basic web analysis:
The processing operations within this category are used for the following purposes: for non-personal traffic analysis, incident monitoring and alerting, fraud detection, IT management, reach measurement, product development and improvement and navigation tracking Matomo (http://www.matomo.org).
Description of cookies:
| Cookie | Storage period | Technology Data recipient | Description |
|---|---|---|---|
| _pk_id.16.5739 | 13 months | https://stats.rewe-group-nachhaltigkeit.de/piwik/ | To store some details about the user, such as the unique visitor ID |
| _pk_ses.16.5739 | 30 minutes | https://stats.rewe-group-nachhaltigkeit.de/piwik/ | Short-lived cookies are used to temporarily store data for the visit |
| _pk_ref.16.5739 | 6 months | https://stats.rewe-group-nachhaltigkeit.de/piwik/ | To store the attribution information, i.e., the referrer originally used to visit the website |
Use of service providers/processing of data in countries outside the European Economic Area
The REWE Group uses service providers to deliver services and process your data (including hosting your data in a secure data center or maintaining and analyzing databases, so-called contract processing). The service providers process the data exclusively on the instructions of the REWE Group and are obliged to comply with the applicable data protection regulations. All data processors have been carefully selected and will only be granted access to your data to the extent and for the period necessary to provide the services or to the extent that you have consented to the processing and use of the data.
The servers of some of the service providers used by the REWE Group are located in the United States and other countries outside the European Union. Companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as in the Member States of the European Union. If your data is processed in a country that does not have a recognized high level of data protection such as the European Union, the REWE Group will ensure that your personal data is adequately protected through contractual arrangements or other recognized instruments.
Storage period and deletion periods
Please refer to the relevant sections of this privacy policy for the respective deletion periods.
Automated decision-making and profiling
Your personal data will not be used for automated decision-making or profiling.
Rights of the data subject
Information
You can request information about your personal data processed by us.
Correction
If your information is no longer correct, you can request that your data be corrected. If your data is incomplete, you can request that it be completed.
Deletion
You have the right to request the erasure of your data. Please note that any claim for deletion depends on the existence of a legitimate reason. In addition, there must be no regulations that require us to retain your data.
Restriction of processing
You have the right to request the restriction of the processing of your data. Please note that any claim to restrict processing depends on the existence of a legitimate ground.
Objection
You have the right to object to the processing of your data in the future for reasons arising from your particular situation. In the event of any justified objection, we will no longer process your data. Until you effectively object, the processing of your personal data remains lawful.
Right to complain
You have the right to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.
Data portability
You have the right to receive personal data that you have provided to us in an electronic format.