Privacy policy

The

OC fulfillment GmbH

Domstraße 20, 50668 Cologne, Germany

Office: Schanzenstraße 30, 51063 Cologne, Germany

hereinafter referred to as “fulfillmenttools” or “we,”

operates the website www.fulfillmenttools.com.

This information will provide you with an overview of the processing of your personal data when you visit the website fulfillmenttools.com. We will inform you about which data we collect from you and how we use your data. We will also explain your rights under current data protection law and to whom you may submit any questions.

 

1. Controller

The controller under data protection law is: OC fulfillment GmbH; Domstraße 20, 50668 Cologne, Germany; Office: Schanzenstraße 30, 51063 Cologne, Germany

 

2. Data Protection Contact Person 

The controller’s contact person for data protection matters (e.g., for inquiries of any kind or to exercise data subject rights) is:

OC fulfillment GmbH

Data Protection Coordinator

Cathedral Street 20

50668 Cologne

E-Mail: dataprotection(@)fulfillmenttools.com

 

The contact details of the Data Protection Officer are:

datenschutz nord GmbH

Konsul-Smidt-Str. 88

28217 Bremen

E-Mail: rewe-group(@)datenschutz-nord.de

 

3. Processing Personal Data

We will process your personal data when you visit the website fulfillmenttools.com, submit information to us via a contact form on our website, request access to protected information or contact us otherwise. 

The following data or categories of data may be collected:

  • Data you disclose when contacting us (e.g., your title, first name, last name, email address, telephone number, company, position, address, date of registration or last login date)
  • Data collected by cookies, web beacons, advertising IDs or other unique identifiers and technologies (e.g., your device ID, operating system, visited pages, activated links, services used or time of usage) when using our website 
  • Data you disclose when subscribing to our newsletter (your email address)
  • Data needed by us to verify your consent to receipt of our newsletter (your IP address, newsletter subscription timestamp, activation of link in the confirmation email or your declarations of consent)
  • Data we receive when you read our newsletter or product recommendations sent by email (that you opened the email and activated the links in the email, data concerning your device, your location based on your IP address, availability of your email address and performance of actions on our website after clicking on an offer)
  • Data you disclose to us when you apply to an offered position (your personal data, data concerning your education, data concerning your previous work experience, application letter, CV, portrait picture and reports)
  • Data you disclose on career platforms, such as Xing or LinkedIn, and that we collect as part of recruitment (the last name and first name you stated on the platform, your current position, the date on which we contacted you and your reply to our inquiry)

 

4. Extent and Purpose of and Legal Basis for Data Processing 

4.1 Processing for Marketing Purposes 

4.1.1 Mail Advertisement

To send you mail advertisement, we will use your name, mailing address and any information attributed to you if you enter this data into our contact form. Such processing is performed on the basis of Article 6(1) Letter f of the General Data Protection Regulation. 

 

4.1.2 Newsletter

We will use your email address and any information attributed to you if you consent to receive advertisement by email. Such processing is performed on the basis of Article 6(1) Letter a of the General Data Protection Regulation. 

Your consent is voluntary and not required for the use of our services. You can revoke your consent at any time with effect for the future. The revocation has no negative consequences for you.

 

4.1.3 Contact (form)

You may contact us via our contact form, email, mail or telephone. We will process your data to answer your inquiry and, if applicable, to send you your requested information material. Your data may be transferred to the department responsible for your inquiry. The legal basis for the described data processing is Article 6(1) Letters b and f of the General Data Protection Regulation (pre-contractual measures, contract performance or weighing of interests based on fulfillmenttools’ legitimate interest in answering inquiries).

 

4.1.4 Sweepstakes

There is from time to time the possibility to participate in sweepstakes that are advertised on our website. In order to carry out a competition, we process your data (name, e-mail address, address and, where applicable, other data necessary for the competition). We process your data for the purpose of checking eligibility, determining and notifying the winner, sending the prize and, if applicable, publishing the winner. The legal basis for the described data processing is Art. 6 (1) (b) of the General Data Protection Regulation (implementation of the competition).

4.1.5 Recruiting and application

4.1.5.1 Recruiting

We will process your personal data if we consider you to be suitable for an offered position based on your Xing or LinkedIn profile. Our employees will contact you via the respective platform. Your name and the date on which we contacted you will be documented by us internally. If you apply for the position, the following “Application” section will apply. If you are not interested in the offered position, we will document this internally to avoid contacting you again. This internal documentation will be erased after 2 years.

Such processing is based on Article 6(1) Letter f of the General Data Protection Regulation and, if applicable, Article 88 of the General Data Protection Regulation pursuant to Section 26 of the German Federal Data Protection Act [Bundesdatenschutzgesetz, BDSG] and our legitimate interest in recruiting new employees for our business. 

 

4.1.5.2 Application

We will process your personal data when you apply to fulfillmenttools via the contact form on the website fulfillmenttools.de or otherwise.

Your data will be assessed as part of the application process and may be forwarded to the head of the department to which you applied. Your data will also be used for the job interview and job acceptance or rejection.

If you authorized fulfillmenttools to consider your data for other job offers, your data will be processed as part of this process.

Data processing is used primarily for the establishment, performance or termination of the employment relationship.

The primary legal basis for this is Article 88 of the General Data Protection Regulation pursuant to Section 26(1) Sentence 1 of the German Federal Data Protection Act.

If special categories of personal data under Article 9(1) of the General Data Protection Regulation are processed, this will be done for the exercise of rights or compliance with legal obligations under employment law, the right to social security and social protection (e.g., disclosing your health data to your healthcare provider, assessing severe disability to determine additional paid leave and disability contributions) as part of the employment relationship. This will also be done on the basis of Article 9(2) Letter b of the General Data Protection Regulation pursuant to Section 26(3) of the German Federal Data Protection Act. In addition, processing health data may be necessary to assess your working capacity in accordance with Article 9(2) Letter h of the General Data Protection Regulation pursuant to Section 22(1) Letter b of the German Federal Data Protection Act.

In addition, under Article 9(2) Letter a of the General Data Protection Regulation pursuant to Section 26(2) of the German Federal Data Protection Act, personal data may be processed on the basis of consent (e.g., for company health management).

If we collect further categories of personal data not stated here or want to collect such categories of personal for a purpose not stated above, we will inform you first.

In addition, under Article 9(2) Letter a of the General Data Protection Regulation pursuant to Section 26(2) of the German Federal Data Protection Act, personal data may be processed on the basis of consent (e.g., for company health management). If we collect further categories of personal data not stated here or want to collect such categories of personal for a purpose not stated above, we will inform you first. Due to the current situation concerning the COVID-19 virus, we also offer job interviews via Google Hangouts calls. This allows us to reduce personal contact as required by the German government. Please note that this is an offer, not an obligation. If you do not consent to use of Google Hangouts, this will have no negative implications for the application process. In this case, we will try to arrange a telephone or, if feasible, personal job interview. For further information about data processing by Google Ireland Limited, please see the Google Privacy Policy: https://policies.google.com/privacy.Data processing during Google Hangouts calls is performed on the basis of your consent and, therefore, Article 6(1) Sentence 1 Letter a of the General Data Protection Regulation pursuant to Section 26(2) of the German Federal Data Protection Act. You may withdraw your consent at any time with future effect. Withdrawal will have no negative implications for the application process.

 

4.3 Cookies and Other Technologies (Website Analysis / Tracking)

Some areas of our website use cookies, e.g., to recognize visitor preferences and optimally design our website on this basis. This makes navigation easier and provides a high degree of user friendliness. Cookies also help us identify particularly popular areas of our Internet offer.

Cookies are small text files saved on the hard disk of your device. Cookies enable information to be retained for a specific period and your device to be identified. We use permanent cookies to improve the user experience and representation of specific services. Furthermore, we use so-called session cookies that are automatically erased when you close your browser. You may configure your browser to inform you when cookies are sent. This will make use of cookies transparent for you. Important: if you completely disable cookies, you may not be able to use certain functions of our website.

 

4.3.1 Necessary Technologies

These services, technologies and cookies are necessary to ensure central functions of the portal and contract performance to customers and partners. Usage is based on §25 para. 2 no.2 TTDSG in conjunction with Article 6 para. 1) Sentence 1 Letter b (steps prior to entering into a contract or contract performance), Letter c (compliance with a legal obligation) and/or Letter f of the General Data Protection Regulation (overriding legitimate interests). The latter interests especially include monitoring the technical performance of our website and our interest in economic use of partner sales channels. They therefore cannot be disabled via our consent management system or by you as a website user. These are the following services.

 

4.3.1.1 Tag Management System

Processing under this category is performed to manage the presentation of services, technologies and cookies without storing data collected by these services. Nor is data collected or stored by the tag management system. This system is used to implement your choices for your privacy settings.

The following technologies and service providers are used:

 

4.3.1.2 Technically Necessary Website Technologies

Processing under this category is performed to ensure trouble-free use of our website and its functions. Without this, certain functions, such as the shopping cart, cannot be used.

The following technologies and service providers are used:

  • Own website’s Cookies

 

4.3.1.3 Consent Management Platform (CMP)

Processing under this category enables the user to manage transfers of the user’s data. The consent management platform is used to ask for, document and transfer the user’s decision to other systems.

The following technologies and service providers are used:

 

4.3.1.4 Basic Web Analytics (excl. Customer IDs)

The processing operations within this category are used for the following purposes: non-personal traffic analysis, incident monitoring & alerting, fraud detection, IT management, reach measurement, product development and enhancement, navigation tracking.

 

4.3.2 Statistical technologies

These services, technologies and cookies are needed to understand the use of our portal by our visitors, to detect errors and to continuously improve the portal. They are used on the basis of the legal basis §25 para. 1 TTDSG (Consent for the setting or reading of the cookies) in conjunction with Art. 6 para. 1 p. 1 lit. a) DSGVO (your consent). The data processing only begins when you have given the corresponding opt-in. You have the right to revoke your consent(s) at any time with effect for the future (see No. 8.9. of this privacy policy as well as in the privacy settings at the bottom of the website footer). The revocation does not affect the lawfulness of the processing of the data carried out until the revocation.

 

4.3.2.1 Session and service monitoring

Processing within this category is used to understand the behaviour of our visitors to the website and to identify problems in the use of the website.

The following technologies and service providers are used:

 

4.3.2.2 Measuring success and optimizing marketing measures

Processing under this category is performed to measure the success of specific marketing measures and make optimized changes.

The following technologies and service providers are used:

 

4.3.2.3 Feeder analysis

Processing under this category is performed to understand via which referrer channels and campaigns our visitors find our website.

The following technologies and service providers are used:

 

4.3.2.4 Advanced Web Analytics (incl. Customer IDs)

Processing under this category is performed to measure the range of our website, understand visitor paths on our website and uncover potential for optimization.

The following technologies and service providers are used:

 

4.3.3 Marketing technologies

These services, technologies and cookies are used to understand your interests and display specific content of relevance to you. They are used on the basis of §25 para.1 TTDSG (consent for the setting or reading of the cookies) in conjunction with Article 6(1) Sentence 1 Letter a of the General Data Protection Regulation (consent). Data processing will only commence after you complete the corresponding opt-in process. You have the right to withdraw your consent at any time with future effect (see Number 8.8. of this Privacy Policy and your Privacy Settings). Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

 

4.3.3.1 Personalized Ads and Remarketing on Third-Party Websites, Social Media, Search Engines and Websites of Our Partners

Processing under this category is performed to display interested-based ads to users on third-party websites, social media, search engines and websites of our partners. This intends to increase the relevance of ads displayed to our visitors.

The following technologies and service providers are used:

 

4.3.3.2 Enhanced User Analysis / Interest Profiles

Processing under this category is performed to display personalized content and product recommendations to our users based on their interests. For this, user profiles are created based on their clicks, interactions with ads and website access.

The following technologies and service providers are used:

 

4.3.3.3 Session Monitoring

Processing under this category is performed to understand our visitors’ scrolling and clicking behavior and to detect display errors and problems with the use of our website.

The following technologies and service providers are used:

 

5. Personal Data Recipients

At fulfillmenttools, access to your data is only granted to persons who need your data for performance of their tasks. 

Furthermore, service providers who assist us with the performance of our tasks may receive access to your data. These include service providers of the following categories:

  • Hosting service providers for the operation of our servers
  • Development service providers for the programming, development and maintenance of and support for software applications
  • Email service providers for sending emails
  • The data vendors/recipients specified by the Privacy Policy, normally cookies and other technologies

 

We do not transfer data to states outside of the EU / EEA. 

Service providers used by us must satisfy special confidentiality requirements and only receive access to your data to the extent and for the time necessary for the performance of their tasks.

 

6.Storage Period

We will only store your data for as long as we need your data for the purposes for which it was collected. When your data is no longer necessary for the processing purposes specified by this Privacy Policy, your data will be erased, unless further storage is necessary for compliance with storage obligations under commercial or tax law.

  • Data concerning a non-registered user’s user behavior will be erased after 28 days
  • Data concerning an inquiry under Number 4.1.3. of this Privacy Policy will normally be erased 3 months or, at the latest, 10 years after completion of the process
  • Data concerning an application for an offered position will be erased 6 months after completion of the application process
  • Data related to Number 4.3. of this Privacy Policy will normally be erased after 7 days to 6 years

In connection with the newsletter distribution, we store and process your data for as long as you have subscribed to the newsletter. After you unsubscribe the newsletter or revoke your consent, we will discontinue sending you the newsletter and delete your data. We reserve the right to further data usage, which is permitted by law, including the defense against legal claims.

 

7. Profiling and Automated Decision-Making

We will not use your personal data for profiling or automated decision-making.

 

8. Your Data Subject Rights

If we process personal data concerning you, you, as the data subject, are especially entitled to the following data subject rights under data protection law. 

 

8.1 Access

You may obtain access to and information about personal data processed by us.

 

8.2 Rectification

If your data is not (or no longer) accurate, you may obtain rectification. If your data is incomplete, you may obtain completion.

 

8.3 Erasure

You have the right to obtain erasure of your data. Please note that entitlement to erasure requires legitimate grounds. In addition, no provisions may require us to store your data.

 

8.4 Restriction of Processing

You have the right to obtain restriction of processing of your data. Please note that entitlement to restriction of processing requires legitimate grounds.

 

8.5.Objection Based on Legitimate Interests

If we collect data on the basis of Article 6(1) Letter f of the General Data Protection Regulation (processing necessary for the purposes of the legitimate interests), you have the right to object to the processing of your data on grounds relating to your particular situation. If you object, we will no longer process your data, unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

 

8.6 Right to Lodge a Complaint

You have the right to lodge a complaint with a competent supervisory authority if you do not consent to processing of your data

 

8.7 Data Portability

You have the right to receive in a structured, commonly used and machine-readable format personal data you provided to us.

 

8.8 Revocation of your consent

You have the right to withdraw consent to the processing of your data at any time. This also applies to consent granted to us before the General Data Protection Regulation came into effect, i.e., before 25 May 2018. You may withdraw consent most easily by emailing us at our above-stated contact details. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.