1.   Introduction

The operators of these sites take the protection of your personal information very seriously. We treat your personal data confidentially and in accordance with data protection laws as well as this privacy statement. Our privacy policy is in compliance with the German Federal Privacy Act (BDSG) and Telemedia Act (TMG).

The use of our tchibo.com website is for the most part possible without providing personal data. If personal data (e.g. name, address or email address) are collected on our website, this is done on a voluntary basis. This data will not be passed on to third parties without your express consent.

We exercise the utmost care and apply the highest safety standards to protect your personal data against unauthorized access. Please note that there may be security gapsduring the transfer of data online (for example, in email communications), so data cannot be absolutely and fully protected from third-party access. 

2.   Webtrekk web analysis service and Cookies

The tchibo.com website uses features provided by the Webtrekk web analysis service. The provider is Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin, Germany. Webtrekk uses ‘cookies’: text files that are stored on your computer and enable analysis of your use of this website. The information generated by the cookie about your use of this website is transferred to a Webtrekk server in Germany and stored there.

IP addresses

Your IP address is included with every request sent, so that the server knows where to direct its responses. Each Internet user obtains an IP address from an Internet service provider (ISP) as soon as they connect to the Internet. The ISP knows which IP addresses were used at which time and by which Internet user. The law requires that the ISP retains this information.

Webtrekk does not save the IP Address. The IP address is immediately shortened for session recognition and geographic analysis and then deleted. It is not possible to trace the data to any individual person or to identify any individual person with the data.

Geographical analyses are carried out via a database that contains the IP address information of various ISPs with the geographic location of the IP address included down to the city level. The individual addresses of the Internet users are not known.

Cookies

Cookies are small text files that are deposited on an internet user’s hard drive by their browser when they visit a website. Most of the cookies Webtrekk sets are ‘session cookies’. These cookies do not cause any harm to the internet user’s hard drive and do not contain any viruses. This data cannot be traced to individual users.

Webtrekk uses the following cookies:

●        ‘Session cookie’ (used for session recognition; duration: one session)

●        ‘Ever cookie’ (used for recognition of new and returning visitors; duration: six months)

3. Data collection on tchibo.com

Personal data is only collected on this site to the extent necessary to process the respective online offer. If further data is collected, it is labelled as optional. Under no circumstances will the data be sold or otherwise marketed. We collect personal data as part of our online application process, when you sign up for the Tchibo blog, as part of the franchise-partner concept, and of contact and service requests. We also store other non-personal data to continually improve our offer to you.

The following data is collected:

●        Request (file name of the requested file)

●        Browser type and its version (for example, Mozilla Firefox 33.0, Internet Explorer 10, etc.)

●        Browser language (for example, English)

●        Operating system

●        Browser resolution

●        Screen resolution

●        JavaScript activated: ‘Yes’ or ‘No’

●        Java: ‘On’ or ‘Off’

●        Cookies: ‘On’ or ‘Off’

●        Colour depth

●        Referrer URL

●        Shortened IP address for geographical analysis down to the city level

●        Timestamp

●        Clicks

None of this data is stored in connection with personal information. None of this data is combined with other data sources. Your IP address is promptly deleted after your visit to our site. 

4. Use of your data

When we process your data, your legitimate interests are always considered in accordance with statutory provisions.

Therefore, we only use your data for the purpose for which it was collected. It is not used for promotional purposes. 

Application procedure/registration for the careers portal 

The careers portal is centrally operated by Tchibo GmbH for all German subsidiaries and maxingvest ag, the parent company of the sub-groups Tchibo GmbH and Beiersdorf AG. We assure you that your data will be used exclusively for the application process and the applicant portal, and will not be used for any other purpose. As part of the application process, it is regularly necessary to forward your data within the Tchibo Group to the relevant department or subsidiary, or to maxingvest ag.

Once the application process is complete, your application documents will be stored for a maximum of twelve months, so that we can come back to you or respond to inquiries as needed. Details can be found in the Terms of Use of the candidate portal. 

Using the Predictive Index (PI) diagnostic tool

As part of the application procedure, a diagnostic tool for behavioural personality analysis is used. The test is provided by our partner company Predictive Index (PI). In order to carry out the test, we will send your first name and surname as well as your email address to PI, who are based in America. As this involves the transfer of data to a third country, Tchibo ensures all the necessary measures (such as the EU standard contract clauses) to create an appropriate level of data protection.

Participation in the online test is voluntary. Non-participation will at no time lead to discrimination in the recruitment process. The results are only viewed by specially trained recruiters, and evaluated solely with regard to the open position. No data is passed on to third parties. If you object to the use of the data during the online test, you can always contact Recruiting@tchibo.de. For more information, please visit PI's privacy policy at http://www.predictiveindex.com/privacy.

Tchibo Blog

Our Tchibo blog gives you the option of registering with your email address and a username of your choice to comment on blog posts. We store your email address to manage your user account and to notify you about new blog content on request.

In addition, you can specify a personal website. This lets you link details about yourself, your interests or your personal life with your username. In doing this, and in writing your comments, please observe our blog rules and the note concerning content of external websites.

Link: Privacy policy blog: http://blog.tchibo.com/datenschutzhinweis 

Registration for the Tchibo Partner Concept

Under the franchise concept, your data will only be used for the registration procedure / the application portal, and not for any other purpose. During the application process, we will forward your data to other departments or subsidiaries within the Tchibo Group, to possibly consider alternative uses.

Due to legal requirements, it may be necessary to collect special personal information about your health. We assure you that this data will be processed solely for that purpose and under conditions of the strictest confidentiality.

Once the application process is completed, we store your application documents for a maximum of twelve months, so that we may come back to you or respond to your inquiries as needed. Details on this can be found in the Terms of Use of the candidate portal. 

Contact and service requests

The contact form is intended as a simple way to contact us for any questions you may have about Tchibo. Your details here are essentially voluntary. In order to answer your request, it may be necessary to forward them to one of our subsidiaries or to maxingvest ag together with your personal information.

5. Disclosure of data

In principle, we never share your information with companies outside the Tchibo Group. Only as part of looking after and maintaining our systems do service providers have access to this data. They have been carefully selected by us and are obligated to treat your data confidentially in accordance with statutory provisions, and also to comply with our own privacy standards.

6. Our technical standards

For data transfers during the application process we offer SSL (Secure Socket Layer) security in conjunction with 256-bit encryption. This technique provides the highest security, which is why it is used by banks, for example, in online banking. You will recognise the encrypted data transfer by the display of a private key or lock icon in the bottom status bar of your browser.

The connection is encrypted using high-grade encryption (AES-256 256 bit), and the key exchange with RSA 1024 bit.

7. Social Plug-Ins: Facebook, Twitter and Google “+1”

To make our website more attractive and user-friendly, we use ‘social plug-in’ features for the Facebook, Twitter and Google+ networks. ‘Social plug-ins’ are technologies that allow users to publish certain content for members of social networks via a direct link. 

To protect your privacy, we offer these social plug-ins as a ‘2-click button’: in integrating the social plug-ins, we use a technical solution that prevents data (e.g. IP address) being transmitted to social networks like Facebook as soon as our website is viewed.

In other words, the buttons for Facebook (operated by Fa. Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA), Twitter (Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA), and Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) are disabled by default.

They are only activated once the social plug-in is first clicked on. The content of the plug-ins is transferred by Facebook, Twitter and Google directly to your browser, which then integrates it into our website. The second click on the social plug-in gives you full access to features like ‘recommend’. Please note the following for each plug-in:

Facebook social plug-ins

Tchibo has no influence on the amount of data that Facebook collects with its plug-in. Nevertheless, we want to give you as much information about this as we can. You can also find more details on the Facebookpages.

Once a plug-in is activated, Facebook receives the information that a user has accessed that page of the site. If the user is logged in to Facebook, Facebook can allocate the visit to their Facebook account. If users interact with the plug-ins, for example, by pressing the Like button or commenting, the corresponding information is directly sent from their browser to Facebook and stored there. If a user does not have a Facebook account, there is still a possibility that Facebook will identify their IP address and store it.
Facebook claims that it only stores anonymised IP addresses in Germany. Please refer to Facebook’s privacy policy for about the purpose and scope of the data collection, and the further processing and use of the data by Facebook, as well as related rights and settings options for protecting the privacy of users: http://www.facebook.com/policy.php.

If a user has a Facebook account and does not want Facebook to collect data about them via this site and link it to their stored member data on Facebook, they must log out from Facebook before visiting the website and before activating the social plug-in. You can also block Facebook social plug-ins with various add-ons for your browser.

Twitter

You can recognise Twitter buttons by terms such as ‘Twitter’ or ‘Follow’, in conjunction with a stylised blue bird. Using these buttons, it is possible to share a post or page from this site on Twitter, or to follow Tchibo on Twitter. When a user visits a web page of this website and activates the Twitter button, the browser will establish a direct connection to the Twitter servers. The content of the Twitter buttons is transmitted from Twitter directly to the user's browser.

Tchibo has no influence on the amount of data that Twitter collects with this plug-in. Nevertheless, we want to give you as much information about this as we can:
The user’s IP address and the URL of the respective site is transmitted by pressing the button, but for no other purposes than displaying the button. For more information, please see Twitter’s privacy statement at http://twitter.com/privacy.

Google ‘+1’ button

You can recognise the button by the ‘+1’ on a white or coloured background. When a user visits a web page of this website and activates the Google ‘+1’ button, the browser will establish a direct connection to the Google servers. The content of the ‘+1’ button is transmitted from Google directly to your browser and integrates it into the website.

Tchibo has no influence on the amount of data that Google collects with this plug-in. Nevertheless, we want to give you as much information about this as we can:
According to Google, no personal data is collected without clicking on the button. Such data, including the IP address, is collected and processed only for members who are logged in. The purpose and scope of the data collection, as well as your rights in this respect and settings options for protecting your privacy can be found in Google's privacy statement about the ‘+1’ button: http://www.google.com/intl/de/+/policy/+1button.html.

Tchibo does not transfer any personal information that you have entered on this website or that we have stored about you to Facebook, Twitter, or Google.

8. Right of objection

In accordance with section 15 of the German Telemedia Act, internet users can prohibit the future tracking and storage of their browser history. If you wish to disable tracking during your visit to the Tchibo website, you can set a cookie called webtrekkOptOut from the domain webtrekk.net. This deactivation of the tracking takes only works as long as the webtrekkOptOut cookie is not deleted. You can prevent the collection of the data generated by the cookie and that relates to your use of the website by Webtrekk by downloading and installing the browser plug-in available under the following link: Object to data collection 

You can also prevent cookies from being stored by setting your browser software accordingly. However, we would point out that in this case you may not be able to fully use all the functions of this website.

9. Disclosure rights

Your trust is important to us: we will gladly answer, at any time, your questions regarding the processing of your personal data. You have the right to receive information, at all times, about your personal data stored with us, its source and recipients, and the reason it is stored. 

If you would like to receive information about your data that is stored with us, please use our contact form or send an email to our Privacy Officer at service@tchibo.de. For the blog, please send a written request to our editors at redaction.blog@tchibo.de 

We are obligated to correct, block or delete the data stored about you upon request, unless other laws (e.g. statutory storage requirements) prohibit this.

If you have any questions, please feel free to contact us.


Tchibo GmbH
Data Protection Officer
Überseering 18
22297 Hamburg

Email: service@tchibo.de


Tchibo GmbH
Corporate Communications
Überseering 18
22297 Hamburg

Email: redaktion.blog@tchibo.de

Responsible for the content: Website/Publishing credits