NewStore is the only mobile POS with integrated cloud order management. Retailers like UNTUCKit and Decathlon use our platform and store associate apps to deliver end-to-end omnichannel capabilities with simplicity and ease.
With the following information we would like to give you an overview of the processing of your personal data by us as well as your rights in this regard.
1. Who is responsible for data processing?
The controller in the sense of the GDPR is:
Represented by its finance director Patrick Gruessing
Address: NewStore GmbH | Potsdamer Str. 7 | 10785 Berlin
Phone: 030 577049290
You can reach our external data protection officer at:
Data Protection Officer of NewStore GmbH
c/o activeMind AG
Management and Technology Consulting
Address: activeMind AG | Kurfürstendamm 56 | 10707 Berlin
Phone: 030 770191070
2. We process your data for the following purposes and on the following legal basis:
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):
a. To fulfill pre-contractual obligations (Art. 6(1) b GDPR in conjunction with Art. 88 GDPR and Art. 26 BDSG)
We will process the data provided by you solely for the purpose of evaluating professional suitability and for contacting you.
The processing occurs in order to establish an employment relationship within the scope of implementing the pre-contractual measures taken in response to your application.
b. Due to legal requirements (Art. 6 (1) c GDPR in conjunction with Art. 88 GDPR and Art. 26 BDSG)
In the context of the reimbursement of your travel expenses, we are subject to tax law obligations which entail data processing.
c. Within the scope of the legitimate interests (Art. 6(1) f GDPR)
As far as necessary, we process your data beyond the actual fulfillment of the contract in order to protect legitimate interests of us or third parties. Examples of such cases are:
● Measures for building and system security (e.g. operation of video cameras, access controls, locks).
● When you access our website, i.e., even if you do not register or submit information, information of a general nature will be collected automatically. This information (server log files) contains the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.
3. Who receives your data?
a. In-house (internal recipients)
Our employees, insofar as this is necessary for contacting you and for fulfilling our contractual and legal obligations (including the fulfillment of pre-contractual measures).
b. In the context of processing on our behalf (external recipients)
Your data may be passed on to service providers who work for us as processors. These may be other group companies and/or external service providers from the following areas:
● IT Support
● Data deletion
All service providers are bound by contract and in particular are obliged to treat your data confidentially.
c. Other recipients (third parties)
A transfer of data to recipients outside of our company will only take place in compliance with the applicable data protection regulations. Recipients of personal data can be, for example:
● External data protection officer
4. Is your data transferred to a third country or to an international organization?
Currently, your data is processed by the following recipients based outside the European Union and countries outside the European Economic Area (EEA):
Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by NewStore to help manage its recruitment and hiring process on NewStore’s behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site.
Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under the standard contractual clauses or the Privacy Shield.
We have also contractually agreed with our service providers that there must always be data protection safeguards with their contract partners in compliance with the European data protection level.
5. How long will your data be stored?
If your application is rejected, it will be deleted six months after notification of this decision. If an employment relationship is established, the application documents will be stored at least for the duration of the employment at NewStore GmbH.
6. What data protection rights do you have?
You have the right of access under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right of data portability under Article 20 GDPR.
With regard to the right of access and the right to erasure, restrictions according to §§ 34 and 35 BDSG may apply.
Furthermore, there is a right to lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG). A list of the German supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
7. Are you obliged to provide data?
Within the scope of the contractual relationship, you must provide us with those personal data which are necessary for the commencement, implementation and termination of the contractual relationship and for the fulfillment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will generally not be able to conclude or execute the contract with you.
Information about your right to object under Article 21 of the General Data Protection Regulation (GDPR)
Right to object in individual cases
You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data which is based on Article 6(1) f GDPR (data processing based on legitimate interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If you wish to exercise your right of objection, send an e-mail to email@example.com