MediaMarktSaturn place a great emphasis on treating your personal data in compliance with data protection requirements.

In the privacy policy for the web site you can find further information on how we process your personal data that we collect when you visit the career site careers.mediamarktsaturn.com. 

In the application privacy policy , you can find further information on how we process your personal data that you enter when applying for a job or when creating a profile on the career platform.

In the Privacy Notice for the AI‑enabled Recruiting Solution, you will find further information on how we process the personal data you enter when applying via the AI‑enabled recruiting solution.

MediaMarktSaturn (hereinafter referred to as "MMS", "we" or "us") attach great importance to treating your personal data in compliance with data protection regulations.

In this privacy policy, we inform you about how MMS process your personal data collected when you use the web site.

Please observe that this privacy policy applies to the web site careers.mediamarktsaturn.com and the data (technically) processed when you visit the web site.

With regard to the data processed and provided by you when making an application and creating a profile for this purpose on our career platform, please observe the MediaMarktSaturn privacy policy for applications

Party responsible for processing

The party responsible for the web site careers.mediamarktsaturn.com and therefore for processing your data in accordance with the EU General Data Protection Regulation (GDPR), other data protection laws that apply in the Member States of the EU and other legal provisions of data protection nature are:

MediaMarktSaturn Retail Group GmbH, Media-Saturn-Str. 1, 85053 Ingolstadt, Germany

Purposes and legal basis

As a matter of principle, we process your personal data as required to provide a functional web site as well as our content and services on this web site. In addition, individual processing operations (by means of cookies) are intended to make it more convenient for you to use the web site – provided you have given your consent - or serve marketing, analysis and evaluation purposes – likewise only if you have given your consent.

Collection of general data and information, referred to as “log files", when visiting the web site

The Internet connection data that your browser transmits to the servers are processed if you visit our web site for informational purposes. Our web site collects a series of general data and information with each call, which are temporarily stored in log files of a server. A log file is created during automatic logging of the processing computer system. The following can be recorded:

• Access to the web site (date, time)
• How you arrived at the web site (previous page, hyperlink etc.)
• Amount of data sent
• Which browser and browser version you use
• Whether the page was visited via a mobile device
• Which internet service provider you use
• Your IP address that your internet access provider assigns to your computer when you connect to the internet

The legal basis for this data processing is Art. 6 (1) sentence 1 lit. b, f GDPR, since these data need to be processed in order to operate the web site, ensure the functionality of the web site and deliver the content of our web site correctly. The data are stored for a maximum of 90 days.

Necessary cookies

The web site is hosted on German servers of SAP in Frankfurt, Germany. The following cookies are used to improve the functionality.

They are necessary basic cookies. The legal basis for this data processing is Art. 6 (1) sentence 1 lit. f GDPR, since these data need to be processed in order to operate the web site, ensure the functionality of the web site and deliver the content of our web site correctly. 

In the following you will find an overview of the necessary cookies used. Further information on individual cookies can be found under Cookie Manager.

Convenience and marketing cookies

Further cookies are used to enhance the user experience on the web site, which are activated only with your consent (Art. 6 (1) sentence 1 lit. a GDPR). Convenience cookies enable improved functionality and personalisation. This means that our services may not work properly if they are disabled. Marketing cookies are also used for evaluation, analysis and marketing purposes.

In the following you will find an overview of the convenience and marketing cookies. Further information on individual cookies as well as the option to enable or disable them can be found under Cookie Manager.

Share functions (Facebook, XING, LinkedIn and WhatsApp)

We would like to draw your attention to our presence on various professional and non-professional networks. We have linked these platforms and messaging services on our web site with icons. These icons are not social plug-ins, which is why no (personal) data are transmitted to these networks until you have made an active decision. To use the "Share" function, you must be logged on to the respective network and actively click on the link. Only then will your data be transmitted to the respective provider.

The legal basis for data processing when using the "Share" function is Art. 6 (1) lit. f GDPR. The legitimate interest on our part lies in the fact that we want to enable our users to participate in an active exchange on the networks with the "Share" function. The user must actively log on to the network and then additionally click on the link before the data are transmitted.

The following data are transmitted when "sharing" content:

• Internet address
• Date and time when the web site was opened or the "Share" icon was clicked on
• Information about the browser and operating system used
• IP address
• The content you share

The shared content (job postings) can then also be viewed by other users on the same network, depending on the data protection settings you have made for your own account on the various networks. If you are already logged on to the network when you click on the "Share" icon, its provider will also be able to determine your user name and, if applicable, your real name from the afore-mentioned data. These data may be processed by the provider also in countries outside the European Union. We have no influence on the scope, type and purpose of the data processing by the provider. Please refer to the respective privacy policies / terms of use of the networks.

Duration of storage and routine deletion of personal data

We process and store your personal data only for the time necessary to fulfil the purpose of the processing or where provided for by law or regulation. After discontinuation or fulfilment of the purpose, your personal data will be deleted or blocked. In the event of blocking, deletion will take place as soon as legal or contractual retention periods do not conflict with this.

Recipients of personal data

We can transfer your personal data to the following recipients for the afore-mentioned purposes in compliance with the applicable laws while ensuring the highest level of security:

Affiliated companies - MMS is an internationally active group of companies. If necessary, MMS will transfer your personal data to its affiliates for the purposes set out in this data privacy policy.

Service providers - Various service providers help us to run our overall business. They may be, for example, IT service providers who host the web site careers.mediamarktsaturn.com and/or make sure that our web site runs smoothly. They may come into contact with your personal data when fulfilling their contractual obligations.

We demand that these recipients ensure the security of your personal data and process them in compliance with the applicable law. We share or transfer your personal data only to the extent necessary and permitted by a legal basis. Furthermore, we make sure that we have concluded the necessary contractual agreements to protect your personal data.

Data transfer to third countries

In individual cases, we may transfer your personal data to other countries outside the European Economic Area (referred to as third countries), where different data protection standards may apply than at your place of residence. Your data may be subject to foreign laws there and may be made available to the local governments, courts and law enforcement and regulatory authorities.

We will transfer personal data to service providers including processors or other third parties outside the European Economic Area (EEA) only if the third country has been confirmed by the EU Commission to have an appropriate level of data protection, you have consented to the transfer of your data, the transfer of your data is mandatory due to a contract with you or appropriate data protection guarantees (e.g. binding internal company data protection regulations or an agreement of the EU Commission's standard contractual clauses) are in place (Art. 44 ff GDPR).

Data security

The security of your personal data is of top priority to us. We therefore implement technical and organisational measures to protect your data to effectively prevent loss or misuse by third parties. In particular our employees who process personal data are bound by and must comply with data secrecy. To protect your personal data, they are transmitted in encrypted form; we use SSL=Secure Socket Layer, for example, to communicate in your Internet browser. You can tell it by the lock symbol that your browser displays for an SSL connection. To ensure the permanent protection of your data, the technical security measures are checked regularly and, if necessary, adapted to the state of the art. These principles also apply to companies that process and use data on our behalf and according to our instructions.

Your rights

You have a right under the law

• To information about the data processing and to be provided with a copy of the processed data (Art. 15 GDPR)
• To the correction of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• To the deletion of personal data and, if the personal data have been made public, to other responsible parties being informed about the request for deletion (Art. 17 GDPR)
• To restriction of the data processing (Art. 18 GDPR)
• To data portability or to receive the provided personal data in a common and machine-readable format (Art. 20 GDPR)
• To revocation of consent, provided you have given us your consent (Art. 7 (3) GDPR)

The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

If you wish to exercise your rights, simply send us a message. You can use the contact details of the data protection officer in the following for this purpose.

If you do not agree with the data processing on our part, you also have the right to file a complaint to a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision [Bayerische Landesamt für Datenschutzaufsicht] in Ansbach.

Contact details of the data protection officer

You will find the contact details of the data protection officer in the following:

By post:

To the Data Protection Officer

MediaMarktSaturn Retail Group GmbH

Media-Saturn-Str. 1

85053 Ingolstadt

E-mail:datenschutz@mediamarktsaturn.com

Amendment to the privacy policy

To ensure that our privacy policy always complies with the current legal requirements, we reserve the right to make changes at any time.

MediaMarktSaturn (hereinafter referred to as "MMS", "we" or "us") attach great importance to treating your personal data in compliance with data protection regulations.

In this privacy policy, we inform you about how MMS process your personal data when you apply to us and create a profile in our career platform for this purpose.

With regard to the personal data (technically) processed during your visit to the careers.mediamarktsaturn.com web site, please observe the Privacy policy – MediaMarktSaturn.

Party responsible for processing

The party responsible in accordance with the EU General Data Protection Regulation (GDPR), other data protection laws that apply in the Member States of the EU and other legal provisions of data protection nature is the company mentioned in the respective job advertisement:  

Categories of personal data collected

Information collected when creating a profile and applying for a job 

To apply for a specific job, you usually need to create a profile on our career platform.

To create a profile, you must provide at least the following details:

• First and last name 
• E-mail address  

At least the following information is required to prepare and send a job application:

• Address
• Country
• Telephone number

You may be required to submit additional information that is relevant only to the job you are applying for, e.g. work permit information, language skills required, etc. The information required may vary, depending on the type of vacancy. 

In addition to the data indicated as mandatory, you can also voluntarily enter further details and upload documents (e.g. certificates).

If you have activated the "AutoFill options" in your browser, you can use them when filling out the application. The necessary data that you have saved in your browser, such as last name, first name, address etc., are automatically entered in the application as a suggestion. You can of course subsequently edit or delete these data before the application is sent to us.

After sending your first application, an applicant account will be automatically created for you and you will receive confirmation of receipt at the e-mail address you provided.

To log in to your applicant account, enter your email address in the field provided. You will then receive an access link to your e-mail address, which you can use to log in to your applicant account.

Within your applicant account, you can edit your data at any time, view the status of your applications, submit further applications and use the other functions of the applicant account. Please note that once an application has been submitted, it cannot be changed. Please contact us immediately if you notice any misuse of your applicant account.

Document upload via DropBox and Google Drive

We provide you with the option of uploading your documents from your computer or mobile device or making them available via the online storage systems DropBox and Google Drive. Please observe the respective terms of use and privacy policies of the providers.

Bookmarking favourite job advertisements

When you are logged in to your profile, you can bookmark your favourite job advertisements on a favourites list in the job search. You can customise your list simply by selecting/deselecting individual job advertisements. When you delete your profile, your favourites list is also deleted.

Information collected during the recruitment process 

If we consider you suitable for the position you have applied for and we subsequently contact you to get to know you better, we may collect further information about you during the interview process. This may include information about your previous work experience, your expectations regarding salary and benefits, etc. For some advertised positions, you may be required to take part in an assessment center to test your suitability and skills for the vacant position. We attach great importance to a transparent and comprehensible data processing: All data collected in the context of an assessment center and the tests are either provided directly by you (e.g. your answers in an English test), or are the results of tests taken by you and our assessments based on it, to which you will have access. In the interests of data minimization, our recruiters and HR managers take care to collect only information that is relevant to the position for which you are applying. 

Special categories of data 

In principle, it is not necessary for MMS to collect and process special categories of data (such as religion, ethnicity, health, sexual orientation etc.) in connection with the application process.  

If you wish to share them with us, for example because you have a health condition, you can voluntarily submit this information during the recruitment process. 

Comparison with employee data (internal applicants)

In the case of internal applicants, a comparison can be made with the employee master data you have stored (form of address, first and last name, employee number, date of birth, street and house number, postcode, town, country) for identification purposes and to exclude duplicates. In addition, further information about your previous or current employment relationship may be obtained (e.g. about your length of service or the existence of a severe disability or equality), if necessary and in compliance with the legal provisions, and taken into account accordingly in the application process.

The selection of future employees is based exclusively on professional and personal qualifications, which are assessed according to the same criteria for internal and external applicants. This comparison is made regardless of the type of job advertisement and the chosen communication channel.

The legal basis for this data processing is Art. 6 (1) lit. b and f GDPR, i.e. our legitimate interest as well as any existing contractual rights and obligations to give appropriate consideration to the relevant facts in internal applications.

Other information we collect about you when you use our career platform 

The career platform can be found on the web site careers.mediamarktsaturn.com. For the data collected technically on the web site (e.g. by means of cookies), please refer to Privacy policy – MediaMarktSaturn.

Purposes and legal basis

Purposes

MMS collect and process your personal data for the following purposes: 

• Establishing contact, information about relevant job advertisements 
• Recruitment, selection, evaluation and employment of new employees as well as the search for potential candidates on the labour market  
• Providing our career platform and ensuring its technical security  
• Improving our application process and thus the online application process for candidates  

Legal basis

MMS process your personal data on the following legal grounds:  

• For the performance of a contract or in order to take steps prior to entering into a contract, insofar as the data are necessary for the application process (Art. 6(1)(b) GDPR).  
• Our legitimate interest, in particular management, administration and improvement of our recruitment and HR processes, ensuring and improving the online presence of our career platform and finding the best talent on the labour market, insofar as these activities do not affect or infringe your rights and freedoms (Art. 6 (1) lit. f GDPR). 
• Your consent, if you have given it for the use of your personal data for a specific purpose. This may be the case, for example, if you decide to receive job-related communication from MMS. You are free to revoke this consent for the future without giving reasons (Art. 6 (1) lit. a GDPR). 
• Compliance with laws, e.g. in cases where labour law or other laws require your personal data to be processed or in cases where we need to respond to requests from authorities in the context of investigative procedures. (Art. 6 (1) lit. c GDPR). 

Visibility settings 

We will ensure that the visibility settings you choose are respected on our career platform. If your visibility choice is: 

• "… also for additional jobs that could be a good fit to me", all recruiters of our MMS national subsidiaries have access to the information you have submitted to us. In this case, you may also be contacted by recruiters from the other MMS locations to inform you about relevant job offers. 
• "… only for the position that I have applied for. I do not want to be contacted for other career opportunities at MediaMarktSaturn", only those people involved in the recruitment process for the job you have applied for will have access to your personal data. In this case, you will only be contacted by recruiters in connection with the job you have applied for. 

Please note that you can change your visibility settings at any time within your profile. 

Communication about career opportunities 

If you consented to being notified about job advertisements or information about career opportunities when you created your profile, you will receive automatic emails about current job offers, campaigns or career events that MMS have to offer. You have the right to revoke the receipt of such messages at any time by using the appropriate "Unsubscribe" button in your candidate profile. 

Duration of storage and routine deletion of personal data

We delete your personal data as soon as they are no longer required. This depends on the purpose for which they were collected and the provisions of the applicable local laws.  

In most cases, we keep your application for 4 weeks after you have received a rejection, and your profile is deleted 4 weeks after your last login. In addition, you can delete your profile at any time before this period expires.  

As retention periods may vary depending on the local legal requirements, please contact the data protection officer if you would like to know more. 

Withdrawal of your application 

You can withdraw your application at any time. This is done with the corresponding function in the applicant profile or by deleting the applicant profile itself. Your application documents will be automatically deleted after the retention periods described in the previous chapter have expired. 

Recipients of personal data

MMS can transfer your personal data to the following recipients for the afore-mentioned purposes in compliance with the applicable laws while ensuring the highest level of security: 

Affiliated companies - MMS is an internationally active group of companies. If necessary, MMS will transfer your personal data to its affiliates for the purposes set out in this data privacy policy.

Service providers - Various service providers help us to run our overall business. These may be, for example, IT service providers who host the careers.mediamarktsaturn.com web site and/or ensure that our career platform runs smoothly, recruiters who help us find the best candidates, consultants who help us improve our processes etc. They may come into contact with your personal data when fulfilling their contractual obligations.

We require these recipients to ensure the security of your personal data and to process them in accordance with applicable law. We share or transfer your personal data only to the extent necessary and permitted by a legal basis. Furthermore, we make sure that we have concluded the necessary contractual agreements to protect your personal data.

Data transfer to third countries

The data you provide us with as part of your application will be hosted in the European Union.

In individual cases, we may transfer your personal data to other countries outside the European Economic Area (referred to as third countries), where different data protection standards may apply than at your place of residence. Your data may be subject to foreign laws there and made available to the local governments, courts and law enforcement and regulatory authorities.

We will transfer personal data to service providers including processors or other third parties outside the European Economic Area (EEA) only if the third country has been confirmed by the EU Commission to have an appropriate level of data protection, you have consented to the transfer of your data, the transfer of your data is mandatory due to a contract with you or appropriate data protection guarantees (e.g. binding internal company data protection regulations or an agreement of the EU Commission's standard contractual clauses) are in place (Art. 44 ff GDPR).

Data security

The security of your personal data is of top priority to us. We therefore implement technical and organisational measures to protect your data to effectively prevent loss or misuse by third parties. In particular, our employees who process personal data are bound by and must comply with data secrecy. To protect your personal data, they are transmitted in encrypted form; for example, we use SSL=Secure Socket Layer for communication in your Internet browser. You can tell this by the lock symbol that your browser displays for an SSL connection.To ensure the permanent protection of your data, the technical security measures are checked regularly and, if necessary, adapted to the state of the art. These principles also apply to companies that process and use data on our behalf and according to our instructions.

Your rights 

You have the right under the law:

• To information about the data processing and to be provided with a copy of the processed data (Art. 15 GDPR)
• To the correction of inaccurate data or completion of incomplete data (Art.  16 GDPR)
• To the deletion of personal data and, if the personal data have been made public, to other responsible parties being informed about the request for deletion (Art. 17 GDPR):

In this respect, you can request the deletion of your profile at any time at the e-mail address given at the end of this section. You can also do this yourself at any time within your candidate profile.

If you have an open application at this time, we will assume that you no longer wish to maintain it and are withdrawing it.

Please note that your application-related personal data will be automatically deleted only after the expiry of the defined retention period referred to in the chapter Duration of storage and routine deletion of personal data

• To restriction of the data processing (Art. 18 GDPR)
• To data portability or to receive the provided personal data in a structured, common and machine-readable format (Art. 20 GDPR)
• To revocation of consent, provided you have given us your consent (Art. 7 (3) GDPR)

The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

If you wish to exercise your rights, simply send us a message. You can use the contact details of the data protection officer in the following for this purpose.

If you do not agree with the data processing on our part, you also have the right to file a complaint to a supervisory authority (Art. 77 GDPR). To do so, you can contact, among others, the supervisory authority in the Member State of your residence, your workplace or the place of the alleged breach of the GDPR.

Contact details of the data protection officer

For general questions about data protection at MediaMarktSaturn or if you would like to exercise your rights* under the GDPR you can find the contact details of the data protection departments/officers (in each case competent for data protection in the country where the job is advertised) in the following:

By post:

To the Data Protection Officer

MediaMarkt Nederland

Wilhelminakade 161

3072 AP Rotterdamm, Nederland

Amendment to the data protection notice

To ensure that our data privacy policy always complies with the current legal requirements, we reserve the right to make changes at any time.

November 2025

Our goal is to ensure that you feel comfortable when using the AI‑enabled recruiting solution. Protecting your privacy and your personal rights is important to us. We therefore ask you to read the following summary of how the AI‑enabled recruiting solution works carefully. You can trust that your data will be processed transparently and fairly, and we are committed to handling your data responsibly and with care.

The following privacy notice informs you how we use your personal data within the AI‑enabled recruiting solution. In doing so, we adhere to the strict provisions of Dutch data protection law and the requirements of the European General Data Protection Regulation (GDPR).

1. Controllers and contact details

The joint controllers within the meaning of Article 26 GDPR, other data protection laws applicable in the EU Member States, and other provisions with a data protection character for the AI‑enabled recruiting solution are:

MediaMarktSaturn Retail Group GmbH
Media-Saturn-Straße 1
85053 Ingolstadt, Deutschland

E-Mail: datenschutz@mediamarktsaturn.com

Media Markt Saturn Holding Nederland B.V.
Wilhelminakade 161
3072 AP Rotterdam

Together with the respective store to which you are applying. You can find this in the respective job posting for the position you are applying for.

The joint controllers have concluded an arrangement on joint controllership pursuant to Article 26 GDPR. Below, we also inform you about the essential content of this arrangement.

2. Contact details of the Data Protection Officer

If you have general questions about data protection at MediaMarkt or if you wish to exercise your rights under the GDPR, a simple message is sufficient. Please use the following contact details if you applied for a position in BeNeLux:

Media Markt Saturn Holding Nederland B.V.

- Data Protection Department -

Wilhelminakade 161

3072 AP Rotterdam

E-Mail: privacy@mediamarkt.nl

For the joint controller MediaMarkt Saturn Retail Group GmbH, you find the contact details of the Data Protection Officer, below;

MediaMarktSaturn Retail Group GmbH

- Data Protection Department -

Media-Saturn-Str. 1

85053 Ingolstadt

E-Mail: datenschutz@mediamarktsaturn.com

Dr. Christian Borchers

c/o datenschutz süd GmbH

Wörthstraße 15

97082 Würzburg

E-Mail: MMS-DSB@datenschutz-sued.de

3. Scope of processing of personal data

As a rule, we collect and use personal data about you only insofar as this is necessary to provide a functional website, our content and services, and to conduct the application process using the AI‑enabled recruiting solution.

We regularly collect and use your personal data only to the extent necessary to carry out the application process and the related (pre‑)contractual measures resulting from your application. An exception applies in cases where you have given us separate consent for further processing, where we have a legitimate interest in processing the data, or where processing is permitted by legal provisions.

The security of your personal data is a high priority for us. We therefore protect the data stored with us by means of technical and organizational measures to effectively prevent loss or misuse by third parties. In particular, our employees who process personal data are bound by data secrecy and must comply with it. To protect your personal data, they are transmitted in encrypted form; for example, we use TLS (Transport Layer Security) for communication via your internet browser. You can recognize this by the padlock icon that your browser displays for a TLS connection. To ensure the lasting protection of your data, the technical security measures are regularly reviewed and, if necessary, adapted to the state of the art. These principles also apply to companies that process and use data on our behalf and according to our instructions.

4. Purposes of processing, responsibilities, and legal bases for processing your personal data

We collect, process, and use your personal data to conduct application procedures and to provide the features and functionalities of this website.

As part of these application procedures, we use an automated AI‑enabled selection process that you can optionally use instead of the classic application route via the job portal. The AI‑enabled recruiting solution serves to pre‑qualify applicants in order to enable a more efficient and objective initial assessment. Data entered into and output by the recruiting solution are not used for other purposes, in particular not for further development, training, or any other improvement of the AI models.

MMS Retail is responsible for:

• operation and technical implementation,
• development and continuous improvement,
• processing and evaluation of the application interview using the AI‑enabled recruiting solution.

The respective store to which you are applying receives, as the controller, the AI‑generated résumé /CV, a summary of the interview, and an evaluation, including the reasoning for the evaluation. The evaluation is generated by the AI‑enabled recruiting solution based on your statements in the AI‑enabled interview. Based on this information, the respective store then continues the application process under its own responsibility. There is no longer any joint controllership at this stage.

Further processing by the respective store therefore no longer takes place within the framework of joint controllership but falls under the independent data protection responsibility of the respective store.

Processing of your personal data may be based on the following legal bases:

• Article 6(1)(b) GDPR is the legal basis insofar as processing your data is necessary for the performance of a contract or for pre‑contractual measures.
• Articles 6(1)(a) and 9(2)(a) GDPR serve as legal bases for processing operations for which we obtain your consent for a specific processing purpose.
• Article 6(1)(c) GDPR applies where we are subject to a legal obligation requiring the processing of personal data, such as compliance with tax obligations.
• Article 6(1)(f) GDPR applies on the basis of our legitimate interests, e.g., when using service providers as processors, such as when conducting statistical surveys and analyses. Our interest lies in providing a user‑friendly, appealing, and secure presentation as well as optimization of our web offering that serves both our business interests and meets your expectations.

5. Duration of storage and routine deletion of personal data

We process and store your personal data only for the period necessary to fulfill the purpose of storage or insofar as this is provided for by laws or regulations. After the purpose ceases to apply or has been fulfilled, your personal data will be deleted or blocked. If your application is rejected, we delete your application four weeks after you receive the rejection. Your user profile is deleted four weeks after your last login. In the case of restriction of processing deletion takes place as soon as statutory, constitutional, or contractual retention periods do not preclude deletion, there is no reason to assume that deletion would adversely affect your legitimate interests, and deletion would not entail a disproportionate effort due to the particular nature of storage.

6. Collection of general data and information (log files)

With each access, the AI‑enabled recruiting solution collects, on the basis of Article 6(1)(f) GDPR, a series of general data and information that are temporarily stored in server log files. A log file is created as part of an automatic protocol of the processing computer system. The following may be recorded:

• access to the website (date and time),
• amount of data sent,
• which browser and browser version you are using,
• the operating system you are using,
• your IP address assigned by your internet access provider.

The collection and storage of this data are necessary for the operation of the website in order to ensure the functionality of the site and to deliver the content of our website correctly. The data also help us optimize our website and ensure the security of our IT systems. For this reason, the data are stored for a maximum of 7 days as a technical precaution.

7. Cookies, web analytics services, and social media

We do not use cookies, web analytics services, or social media plugins on our website.

8. Processing of personal data when applying via the AI‑enabled recruiting solution

For your application, the data you provide are stored by us on the basis of Article 6(1)(b) GDPR in order to conduct an application interview. In particular, the following data are processed:

• Name
• Confirmation of minimum age of 16 years
• Address (including country of habitual residence)
• E-Mail
• Telephone number
• Voice inputs: Because the tool operates exclusively via voice control, each user voice input is captured and processed in real time. Voice inputs are processed immediately; however, the voice recordings are not stored. A transcript of the voice input is created and used solely for evaluation within the AI‑enabled recruiting solution. There is no disclosure to third parties.
• Résumé/CV: This is generated automatically based on your inputs in the AI‑enabled recruiting solution and can be manually edited by you before submitting your application.

If you provide additional data during the application interview, these will also be processed. Please note that we do not intend to collect or otherwise process special categories of data (see Article 9 GDPR) or data as defined in Section 1 of the German General Act on Equal Treatment (AGG) during the application interview. The AI is configured so that such data are not taken into account. Nevertheless, we kindly ask you to refrain from providing such data.

If, after completing the interview, you choose to voluntarily provide information about your health, we process these special categories of data solely to comply with legal obligations, such as assessing eligibility for support and equal treatment or ensuring the early involvement of the representative body for severely disabled employees in the application process. The legal basis for this processing is your consent pursuant to Article 9(2)(a) GDPR. Special category data that are not relevant to the further application process will be deleted without delay.

9. Candidate profile

After submitting your first application, a candidate profile is created for you, and you will receive an acknowledgement of receipt at the email address you provided. This serves as a means of authentication. When accessing the candidate profile, a link is sent to the email address you provided. By clicking this link, you will gain access to your personal candidate profile.

To log in to your candidate profile, enter your email address in the designated field. You will then receive an access link at your email address, which you can use to log in to your candidate profile.

Within your candidate profile, you can edit the data stored in your profile at any time, view the status of your applications, submit additional applications, and use the other functions of the candidate profile.

If you become aware that third parties have gained access to your email inbox and there is a risk of unauthorized access to your candidate profile as a result, please inform us immediately.

10. Miscellaneous

On the basis of Articles 6(1)(c) and (f) GDPR, we use and store your personal data and technical information insofar as this is necessary to prevent or prosecute misuse or other unlawful behavior on our website, e.g., to maintain data security in the event of attacks on our IT systems. This also applies where we are legally obliged to do so, for example on the basis of official or court orders, and for the assertion of our rights and claims as well as for legal defense.

11. Automated decision‑making

In the context of the application process using the AI‑enabled recruiting solution, an automated decision within the meaning of Article 22 GDPR is made. This means that the AI‑enabled recruiting solution evaluates your application on the basis of the interview between you and the virtual recruiter. The evaluation by the AI‑enabled recruiting solution serves the hiring store as the basis for deciding whether to invite you to the next stage or to reject your application.

The evaluation of the answers given during the interview is based on clearly defined and neutral criteria. These criteria are defined on the basis of the company principles, the respective job profiles, and the competencies and skills required for the respective role. Our company principles are customer focus, affinity for technology, execution strength, and collaboration. In addition, each question asked in the AI interview is assessed separately on a scale from 1 (weak) to 3 (strong). Each assessment is accompanied by an objective justification. These justifications support transparency in the selection process. This structured and transparent approach ensures that the evaluation is consistent, comprehensible, and fair. Furthermore, personal data are replaced by neutral data to avoid bias in the evaluation. Through regular, systematic reviews—including checks of the implemented technical and organizational measures—potential vulnerabilities of the recruiting solution and security incidents are identified and remedied at an early stage.

The automated decision is made solely on the basis of your explicit consent in accordance with Article 22(2)(c) GDPR, which you provide separately before the interview with the virtual recruiter begins. If you do not wish to give your consent, you can stop the application interview using the AI‑enabled recruiting solution at any time and submit an application via the classic application route in the job portal. Only when you click [Submit application] will the AI‑enabled recruiting solution evaluate your application and make an automated decision. We have implemented appropriate measures to safeguard your rights and freedoms as well as your legitimate interests. Apart from the AI‑supported evaluation of your application described here, no further automated decision‑making or profiling takes place.

12. Recipients of personal data

When sharing your personal data, we always ensure the highest possible level of security. Therefore, your data are only disclosed to service providers and partner companies that have been carefully selected in advance and are contractually bound. These service providers include the following companies:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the use of the Cloud Platform and VertexAI Service,
• SAP Deutschland SE & Co KG, Walldorf, Germany, for the use of the SuccessFactors Recruiting solution as part of online applicant management.

The data you provide to us as part of your application are hosted within the European Union. Therefore, your data are primarily forwarded to entities located within the European Economic Area and thus subject to strict EU data protection law or obliged to comply with an equivalent level of protection. In individual cases, we may transfer your personal data to other countries outside the European Economic Area (so‑called third countries) where data protection standards may differ from those in your country of residence. Your data may be subject to foreign laws there and may be accessible to foreign governments, courts, and law enforcement and supervisory authorities.

If we transfer personal data to service providers, including processors, or other third parties outside the European Economic Area (EEA), such transfer only takes place where the third country has been confirmed by the EU Commission to have an adequate level of data protection or where appropriate data protection safeguards are in place (e.g., binding corporate rules or the conclusion of the EU Commission’s standard contractual clauses) (Articles 44 et seq. GDPR).

Disclosures within affiliated companies pursuant to Article 6(1)(f) GDPR

We disclose your personal data for concluding and managing the application process and establishing employment relationships to affiliated companies in the respective country in which you are applying, for storage in central databases, and for intra‑group accounting and bookkeeping purposes.

Disclosure to other third parties pursuant to Articles 6(1)(c) and (f) GDPR

Finally, we will disclose your data, in accordance with applicable data protection laws, to third parties or public authorities if we are legally obliged to do so, e.g., on the basis of official or court orders, or if we are entitled to do so, e.g., because this is necessary to prosecute criminal offenses or to assert and enforce our rights and claims.

13. Your rights

Naturally, you have rights with regard to the processing of your data, which we are pleased to explain below. For general questions about data protection at MediaMarktSaturn and to exercise your rights under the GDPR, you will find the Data Protection Officer’s contact details in section 2 above.

Right of access (Article 15 GDPR)

You have the right to obtain from us information, including a copy, about the personal data we have stored about you.

Right to rectification (Article 16 GDPR)

You have the right to request the correction of inaccurate and/or the completion of incomplete personal data.

Right to erasure (Article 17 GDPR)

You have the right to request the deletion of your personal data stored by us, unless processing is necessary for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing (Article 18 GDPR)

You have the right to request restriction of processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose deletion and we no longer need the data, yet you require them for the establishment, exercise, or defense of legal claims, or you have objected to processing.

Right to data portability (Article 20 GDPR)

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine‑readable format, or to have them transmitted to another controller. Where you request the direct transfer of the data to another controller, this will only occur where technically feasible.

Right to withdraw consent (Article 7(3) GDPR)

If you have given us consent to process your data, you have the right to withdraw your consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Right to obtain human intervention, to express your point of view, and to contest the decision (Article 22(3) GDPR)

With regard to automated decision‑making, you have the right to obtain human intervention from our staff. You also have the right to express your point of view and to contest the decision.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

If the processing of your personal data violates data protection law or your data protection rights have otherwise been infringed, you have the right to lodge a complaint with the Autoriteit Persoonsgegevens. For more information please visit their website at Autoritet Persoonsgegevens.

Right to object

Where your personal data are processed on the basis of legitimate interests (Article 6(1)(f) GDPR), you also have the right, on grounds relating to your particular situation, to object to processing pursuant to Article 21 GDPR. In this case, your personal data will only continue to be processed if there are compelling legitimate grounds for the processing which override your interests, rights, and freedoms.

14. Changes to this privacy notice

To ensure that our privacy notice always complies with current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the privacy notice needs to be adjusted due to new or revised offerings or services.