Privacy policy

The

OC fulfillment GmbH

Domstraße 20, 50668 Cologne, Germany

Office: Schanzenstraße 6-20, Kupferwerk 2.20, 51063 Cologne, Germany

hereinafter referred to as “fulfillmenttools” or “we,”

operates the website www.fulfillmenttools.com.

This information will provide you with an overview of the processing of your personal data when you visit the website fulfillmenttools.com. We will inform you about which data we collect from you and how we use your data. We will also explain your rights under current data protection law and to whom you may submit any questions.

1. Controller

The controller under data protection law is: OC fulfillment GmbH; Domstraße 20, 50668 Cologne, Germany; Office: Schanzenstraße 6-20, Kupferwerk 2.20, 51063 Cologne, Germany

2. Data Protection Contact Person

The controller’s contact person for data protection matters (e.g., for inquiries of any kind or to exercise data subject rights) is:

OC fulfillment GmbH
Data Protection Coordinator
Domstrasse 20
50668 Cologne
eMail: dataprotection(at)fulfillmenttools.com

The contact details of the Data Protection Officer are:

datenschutz süd GmbH
Cologne Office
Hohenzollernring 54
50672 Cologne
Germany
eMail: office(at)datenschutz-sued.de

3. Processing Personal Data

We will process your personal data when you visit the website fulfillmenttools.com, submit information to us via a contact form on our website, request access to protected information or contact us otherwise.

The following data or categories of data may be collected:

Data you disclose when contacting us (e.g., your title, first name, last name, email address, telephone number, company, position, address, date of registration or last login date)
Data you provide to register for a 30-day free trial (first name, last name, company, job title, business e-mail, phone number)
Data that is collected when you use our website through the use of cookies, web beacons, advertising IDs and other unique identifiers and technologies (e.g. device ID, operating system, pages viewed, links clicked, services used, time of use)
Data you disclose when subscribing to our newsletter (your email address)
Data that we need to prove your consent to receive the newsletter (IP address and timestamp of newsletter subscription and of clicking on the link in the confirmation email, declarations of consent provided)
Data we receive when you read our newsletter or from product recommendations sent by email (that you opened the email and activated the links in the email, data concerning your device, your location based on your IP address, availability of your email address and performance of actions on our website after clicking on an offer)
Data you disclose to us when you apply to an offered position or send us an unsolicited application (your personal data, data concerning your education, data concerning your previous work experience, application letter, CV, portrait , portrait photo, certificates)
Data you disclose on career platforms, such as Xing and/or LinkedIn, and that we collect as part of recruitment process (the last name and first name you stated on the platform, your current position, the date on which we contacted you and your reply to our inquiry)

4. Extent and Purpose of and Legal Basis for Data Processing

4.1 Processing for Marketing Purposes

4.1.1 Mail Advertisement

To send you mail advertisement, we will use your name, mailing address and any information attributed to you if you enter this data into our contact form. Such processing is performed on the basis of Article 6(1) Letter f of the General Data Protection Regulation.

4.1.2 Newsletter

We will use your email address and any information attributed to you if you consent to receive advertisement by email. Such processing is performed on the basis of Article 6(1) Letter a of the General Data Protection Regulation.

Your consent is voluntary and not required for the use of our services. You can revoke your consent at any time with effect for the future. The revocation has no negative consequences for you.

4.1.3 Contact (form)

You may contact us via our contact form, email, mail or telephone. We will process your data to answer your inquiry and, if applicable, to send you your requested information material. Your data may be transferred to the department responsible for your inquiry. The legal basis for the described data processing is Article 6(1) Letters b and f of the General Data Protection Regulation (pre-contractual measures, contract performance or weighing of interests based on fulfillmenttools’ legitimate interest in answering inquiries).

4.1.4 Sweepstakes

There is from time to time the possibility to participate in sweepstakes that are advertised on our website. In order to carry out a competition, we process your data (name, e-mail address, address and, where applicable, other data necessary for the competition). We process your data for the purpose of checking eligibility, determining and notifying the winner, sending the prize and, if applicable, publishing the winner. The legal basis for the described data processing is Art. 6 (1) (b) of the General Data Protection Regulation (implementation of the competition).

4.1.5 Recruiting and application

4.1.5.1 Recruiting

We will process your personal data if we consider you to be suitable for an offered position based on your Xing or LinkedIn profile. Our employees will contact you via the respective platform. Your name and the date on which we contacted you will be documented by us internally. If you apply for the position, the following “Application” section will apply. If you are not interested in the offered position, we will document this internally to avoid contacting you again. This internal documentation will be erased after 2 years.

Such processing is based on Article 6(1) Letter f of the General Data Protection Regulation and, if applicable, Article 88 of the General Data Protection Regulation pursuant to Section 26 of the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG] and our legitimate interest in recruiting new employees for our business.

4.1.5.2 Application

On our website, you can find out about the job opportunities and job offers at fulfillment tools.

If you wish to apply for a job online, you will be taken to https://rewe-digital.dvinci-hr.com/de/p/fulfillmenttools/jobs/weitergeleitet when you click on it. An online application system is available there, where you can also submit an unsolicited application.

The legal basis for the data processing described is Art. 6 (1) (b) GDPR and § 26 (1) (1) BDSG (decision on the establishment of an employment relationship) and Art. 6 (1) (f) GDPR (legitimate interest in providing you with a user-friendly website and facilitating the search).

We also offer you the option of conducting the interview via Google Hangouts video calling. This enables us to reduce personal contact as requested by the German government. We would like to point out that this is an offer and not an obligation. If you do not agree to the use of Google Hangouts, this will not have any negative impact on the application process. In this case, we will arrange a telephone or, if possible, a personal interview. Regarding data processing by Google Ireland Limited, we refer you to the corresponding data protection information: https://policies.google.com/privacy. Data processing within Google Hangouts video telephony is based on your consent and thus in accordance with Art. 6 (1) 1 lit. a GDPR, Section 26 (2) BDSG. You can revoke your consent at any time with effect for the future. Even in the event of revocation, this will have no negative impact on the application process.

4.1.6 Registering for a trial version

To register for a 30-day free trial version of our solution, the following data or data categories are provided:

First name (optional)
Last name
Company name
Job title (optional)
Business e-mail
Phone number (optional)

The data collected during registration will be processed exclusively for the purpose of presenting our products to you as an interested party, unless you wish to subscribe to the newsletter at the same time by ticking the corresponding checkbox. The legal basis for the processing of your data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR (balancing of interests, based on our interest in providing test access for interested parties in order to demonstrate the functionality of our products and with the aim of concluding a contract for the complete product).

4.3 Cookies and Other Technologies (Website Analysis / Tracking)

Some areas of our website use cookies, e.g., to recognize visitor preferences and optimally design our website on this basis. This makes navigation easier and provides a high degree of user friendliness. Cookies also help us identify particularly popular areas of our Internet offer.

Cookies are small text files saved on the hard disk of your device. Cookies enable information to be retained for a specific period and your device to be identified. We use permanent cookies to improve the user experience and representation of specific services. Furthermore, we use so-called session cookies that are automatically erased when you close your browser. You may configure your browser to inform you when cookies are sent. This will make use of cookies transparent for you. Important: if you completely disable cookies, you may not be able to use certain functions of our website.

We distinguish between necessary, statistical and marketing cookies, depending on the purpose of the cookies and other technologies.

The necessary cookies and other technologies are required to ensure the central functions of the website and to fulfill contracts with customers and cooperation partners. The legal basis for their use is Section 25 (2) no. 2 TDDDG in conjunction with Article 6 (1) sentence 1 lit. b (contract initiation or fulfillment) and lit. f General Data Protection Regulation (overriding legitimate interests). The latter interests include, in particular, the monitoring of the technical performance of the website. They cannot therefore be deactivated by you as a website user via our Consent Management System.

All cookies and other technologies are described in detail in the cookie banner under the services. You can view this at any time in the “Privacy Settings” in the footer of the website. Please make sure that you have disabled all privacy/pop-up blockers for the website in your browser so that the cookie banner can be displayed.

The statistical cookies and other technologies are needed to understand how our visitors use our portal, to detect errors and to continuously improve the portal. They are used on the basis of the legal framework of § 25 para. 1 TDDDG (consent for setting or reading cookies) in conjunction with Art. 6 para. 1 sentence 1 lit. a GDPR (consent for the data processing based on this). The data processing only begins when you have given the corresponding opt-in (consent). You can revoke your consent to the data processing at any time with effect for the future. The revocation does not affect the lawfulness of the data processing carried out until the revocation.

You can also withdraw your consent at any time in the “Privacy Settings”.

Marketing cookies and other technologies are used to understand your interests and to display personalized content that is relevant to you. The use of cookies is based on the legal basis of Section 25 (1) TDDDG (consent to set or read cookies) in conjunction with Art. 6 (1) (a) GDPR (consent to the data processing that takes place on the basis of this consent). Data processing only begins once you have given the corresponding opt-in (consent). You can revoke your consent to data processing at any time with effect for the future. The revocation does not affect the lawfulness of the data processing carried out up to the point of revocation.

You can also revoke your consent at any time in the “Privacy Settings”.

5. Personal Data Recipients

At fulfillmenttools, access to your data is only granted to persons who need your data for performance of their tasks.

Furthermore, service providers who assist us with the performance of our tasks may receive access to your data. These include service providers of the following categories:

Hosting service providers for the operation of our servers
Development service providers for the programming, development and maintenance of and support for software applications
Email service providers for sending emails
The data vendors/recipients specified by the Privacy Policy, normally cookies and other technologies
Advertising network operators for advertising campaigns and display of online advertising (remarketing and retargeting)
Service providers for the delivery and performance measurement of online advertising
Analysis service providers for the evaluation of data and analysis of the use of electronic media (e.g. fulfillment tools app)
Social media operators for the provision of social plugins
HR service providers to support the selection of applicants

Service providers used by us must satisfy special confidentiality requirements and only receive access to your data to the extent and for the time necessary for the performance of their tasks.

6. Is data processed outside the European Union?

We also use service providers located in third countries outside the European Union to process your data. Countries outside the European Union handle the protection of personal data differently than countries within the European Union. There is currently no decision by the EU Commission that these third countries generally offer an adequate level of protection. We have therefore taken special measures to ensure that your data is processed just as securely in third countries as it is within the European Union. Where we use third-country service providers, we check whether the service provider is based in a country for which an adequacy decision has been made by the EU Commission or whether a service provider based in the United States is certified under the Data Privacy Framework. Otherwise, we conclude the data protection contract provided by the European Commission for the processing of personal data in third countries (standard data protection clauses) and carry out processing-related transfer impact assessments. These measures provide appropriate safeguards for the protection of your data by service providers in third countries.

7. Storage Period

We will only store your data for as long as we need your data for the purposes for which it was collected. When your data is no longer necessary for the processing purposes specified by this Privacy Policy, your data will be erased, unless further storage is necessary for compliance with storage obligations under commercial or tax law.

Data concerning a non-registered user’s user behavior will be erased after 28 days
Data concerning a registration for a trial version under number 4.1.6 generally 3 months, if no subsequent contract is concluded for the full version
Data concerning an application for an offered position will be erased 6 months after completion of the application process

In connection with the newsletter distribution, we store and process your data for as long as you have subscribed to the newsletter. After you unsubscribe the newsletter or revoke your consent, we will discontinue sending you the newsletter and delete your data. We reserve the right to further data usage, which is permitted by law, including the defense against legal claims.

8. Profiling and Automated Decision-Making

We will not use your personal data for profiling or automated decision-making.

9. Your Data Subject Rights

If we process personal data concerning you, you, as the data subject, are especially entitled to the following data subject rights under data protection law.

9.1 Access

You may obtain access to and information about personal data processed by us.

9.2 Rectification

If your data is not (or no longer) accurate, you may obtain rectification. If your data is incomplete, you may obtain completion.

9.3 Erasure

You have the right to obtain erasure of your data. Please note that entitlement to erasure requires legitimate grounds. In addition, no provisions may require us to store your data.

9.4 Restriction of Processing

You have the right to obtain restriction of processing of your data. Please note that entitlement to restriction of processing requires legitimate grounds.

9.5. Objection Based on Legitimate Interests

If we collect data on the basis of Article 6(1) Letter f of the General Data Protection Regulation (processing necessary for the purposes of the legitimate interests), you have the right to object to the processing of your data on grounds relating to your particular situation. If you object, we will no longer process your data, unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

9.6 Right to Lodge a Complaint

You have the right to lodge a complaint with a competent supervisory authority if you do not consent to processing of your data

9.7 Data Portability

You have the right to receive in a structured, commonly used and machine-readable format personal data you provided to us.

9.8 Revocation of your consent

You have the right to withdraw consent to the processing of your data at any time. This also applies to consent granted to us before the General Data Protection Regulation came into effect, i.e., before 25 May 2018. You may withdraw consent most easily by emailing us at our above-stated contact details. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

9.9 Information security: Incident report

Please use the provided form (Link) for reporting an incident related to fulfillmenttools, especially for information security incidents. There, you have the opportunity to report an incident, record details, and reliably contact the responsible employee. This process is protected, confidential, and activated via a separate mailbox. Alternatively to this Incident Reporting System, you have the option to report an incident directly to or contact via email at isb@fulfillmenttools.com.