Privacy Policy for Mobile App
for our iOS mobile App (as of 05.2024)
A. Foreword
We, OC fulfillment GmbH (hereinafter: “we”), take the protection of your personal data seriously and would like to take this opportunity to inform you about data protection in our company.
The GDPR primarily includes the obligation to inform you transparently about the type, scope, purpose, duration and legal basis of the processing. With this data protection notice, we are informing you about the way in which we process your personal data.
B. General information
- This privacy policy relates to the provision and use of the app.
- This data protection information is valid as of 28.05.2024.
- No obligation to provide personal data
We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a customer, you are under no legal or contractual obligation to provide us with your personal data; however, we may only be able to provide certain services to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case in the context of the products presented below and offered by us, you will be informed of this separately.
C. Information about the processing of your data
- The collection of personal data concerning you
(1) When you use our app, we collect personal data about you.
(2) Personal data is all data that relates to your person (see above under General).
- Legal bases of data processing
For the processing operations we carry out, we indicate the applicable legal basis in each case below. Processing can also be based on several legal bases.
- Data collected during use
(1) We can only provide you with the benefits of our app if we collect certain personal data required for the operation of the app when you use it.
(2) We only collect this data if this is necessary for the fulfillment of the contract between you and us (Art. 6 para. 1 sentence 1 lit. b) GDPR). Furthermore, we collect this data if this is necessary for the functionality of the app and your interest in the protection of your personal data does not outweigh this (Art. 6 para. 1 sentence 1 lit. f) GDPR) or if you consent to the collection and processing (Art. 6 para. 1 sentence 1 lit. a) GDPR).
(3) We collect and process the following data from you:
- Device information: The access data includes device model, device-specific settings and app settings as well as app properties, the date and time of the retrieval, time zone, the amount of data transferred and the message as to whether the data exchange was complete, operating system, app crash and user clicks. This data is processed so that the operation of the app is technically possible and errors can be rectified promptly.
- Data that you make available to us: The creation of a user account is required to use the app. For this purpose, we process your login data (generated e-mail address/user and password).
- SSO login
The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests based on our interest in ensuring the proper operation and usability of the app for our customers).
(4) If the processing of the data requires the storage of information in your terminal equipment or access to information that is already stored in the terminal equipment, Section 25 (1), (2) TTDSG is the legal basis for this.
- Period of data storage
(1) We your personal data as soon as it is no longer required for the purposes for which we collected or used it. As a rule, we store your personal data for the duration of the contractual relationship with you as our customer. We store data that we are required to retain for tax law purposes for six or ten years on the basis of Art. 6 para. 1 sentence 1 lit. c) GDPR (our legal obligation under Sections 257 HGB, 147 AO).
(2) Data may also be stored in the event of an (impending) legal dispute with you or other legal proceedings. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR (balancing of interests, based on our interest in being able to defend ourselves in the event of legal disputes).
- No automated decision-making (including profiling)
We do not intend to use personal data collected from you for automated decision-making (including profiling).
D. Responsibility for your data and contacts
- responsible person and contact details
The entity responsible for processing your personal data is
OC fulfillment GmbH
Domstr. 20
50668 Cologne
- if you have any questions about data protection, please contact dataprotection@fulfillmenttools.com
The contact details of the data protection officer are
datenschutz süd GmbH
Oskar-Jäger-Str. 50
50825 Cologne
Germany
Phone: +49 221 179 186 0
E-mail: rewe-group@datenschutz-sued.de
E. Your rights
Below you will find a list of the rights to which you are entitled under the GDPR. In order to exercise your rights under 1. to 5. above, you must send a request either by e-mail ( dataprotection@fulfillmenttools.com ) or by post to the addresses of the controllers given above.
- Right to information
You have the right to obtain information from us about the personal data concerning you within the scope of Art. 15 GDPR.
- Right to object to data processing and to withdraw consent
(1) In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
(2) In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent to us at any time if you have given it. As a result, we may no longer continue the data processing that was based on this consent in the future.
- Right to rectification and erasure
(1) Insofar as personal data concerning you is incorrect, you have the right under Art. 16 GDPR to demand that we correct it immediately.
(2) Under the conditions set out in Art. 17 GDPR, you have the right to request the erasure of personal data concerning you.
- Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to demand that we restrict the processing of your personal data.
- Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive from us the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR.
- Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to complain to the competent supervisory authority about the collection and processing of your personal data.