Data protection (general information)

1. General Information

We will process your personal data - including on the basis of this declaration of consent - in compliance with the General Data Protection Regulation (GDPR) and the relevant German data protection laws, e.g. the Federal Data Protection Act (BDSG). This Data Protection Statement serves to inform you about the legal basis of the data processing and your rights pursuant to the GDPR.

a) Controller for the purposes of the GDPR
METRO AG, Metro-Straße 1, 40235 Düsseldorf, Germany.

b) Data Protection Officer
DPO, Metro-Straße 1, 40235 Düsseldorf, Germany /// Email: datenschutz@metro.de

2. Legal basis for data processing and miscellaneous information

Your personal data will be used to the agreed extent for the presentation in the agreed media. If the agreement is based on your declaration of consent, the legal basis for your consent and the data processing based on this is Art. 6 para. 1 s. 1 lit. a) GDPR. If the agreement is based on a contract, the legal basis is the fulfillment of this contract and Art. 6 para. 1 s. 1 lit. b) GDPR.

Recipients may include the affiliated companies specified in the agreement, who may have their registered office in countries outside of the European Union (EU) or European Economic Area (EEA). METRO will warrant an adequate level of protection for your personal data within METRO Group.

3. Your rights

to exercise your rights under the GDPR to

• obtain information about the processing of your personal data and a copy of this data (Art. 15 GDPR),
• rectification of inaccurate and completion of incomplete personal data (Art. 16 GDPR),
• erasure of your personal data and, if these have been made public, that METRO informs other controllers about the erasure request (Art. 17 GDPR),
• restriction of processing of your personal data (Art. 18 GDPR),
• data portability, so that your personal data is transmitted to you in a structured, commonly used and machine-readable format and the right to transmit this data to another controller without any hindrance from METRO (Art. 20 GDPR),
• withdrawal of consent given; the withdrawal does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7 GDPR) and
• object to processing of your data (Art. 21 GDPR), you can contact METRO’s Data Protection Officer (datenschutz@metro.de) at any time. You also have the right to lodge a complaint with the competent supervisory authority if you consider the data processing to be incompatible with the GDPR (Art. 77 GDPR).

Competent supervisory authority
State Commissioner for Data Protection and Information Security of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationssicherheit Nordrhein-Westfalen)
Home address: Kavalleriestraße 2-4, 40213 Duesseldorf, Germany
Postal address: Postfach 20 04 44, 40102 Duesseldorf, Germany
Telephone: +49 (0) 211 / 384 24 – 0
Fax: +49 (0) 211 /384 24 – 10
E-mail: poststelle@lfdi.nrw.de
Website: www.ldi.nrw.de

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation. If you wish to exercise your right to object, simply send an e-mail to METRO's Data Protection Officer (see above).

4. Updates

We reserve the right to update this data protection notice from time to time. Updates to this data protection notice will be posted on our website.

METRO AG
Corporate Communications

Last amended: August 2023