Ochrona danych

Dowiedz się więcej o tym, jak chronimy Twoje dane.

English

Privacy Statement of bonprix Handelsgesellschaft mbH
Haldesdorfer Straße 61
22179 Hamburg

Data protection is a matter of trust, and your trust and the protection of your privacy are very important to us. This is why we, bonprix Handelsgesellschaft mbH, Haldesdorfer Straße 61, 22179 Hamburg (“bonprix” and/or “we” and/or “controller”) want to inform you with the following data protection information about how we process personal data in our career portal in accordance with the GDPR (General Data Protection Regulation) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG 2018).

Please read our data protection information thoroughly. If you have any questions or comments about this Privacy Statement, feel free to contact us at personal@bonprix.net.

1. Name and contact data of the responsible data controller
2. Contact data of data protection officers
3. Purposes of data processing, legal basis and legitimate interests pursued by the controller or a third party, and categories of recipients
3.1. Online presence and website optimisation (using cookies)
3.1.1. Cookies – General information
3.1.2. Intervention options / browser settings
3.1.3. Consent management by Complianz
3.1.4. Consent to the use of individual online services / collection of trackingdata
3.1.4.1. Technically necessary cookies (no consent required)3.1.4.1.1. Own web-tracking (basic tracking)
3.1.4.1.2. Complianz consent management
3.1.4.2. Consent for cookies for analysis purposes
3.1.4.3. Consent for cookies for marketing purposes
3.1.4.4. Consent for cookies used for personalisation purposes
3.2. “Job-Alert” newsletter
3.3. How to contact us
3.4. Other categories of recipients
3.4.1. Contract data processors
3.4.2. Recipients outside of the EU
4. Privacy information for applicants
4.1. Data processing for purposes of the application process
4.2. Data processing for the purpose of conducting the international application process
4.3. Storage time
4.4. Recipients of applicant data
5. Privacy information about the Talent Management system
5.1. Data processing in the Talent Management pool
5.2. Storage time
5.3. Recipients of data
5.4. Updating of data
6.  Your rights as a data subject
7.  Your rights in detail
8.  Data security


1. Name and contact data of the responsible data controller

This Privacy Statement applies to data processing carried out by
bonprix Handelsgesellschaft mbH,
Haldesdorfer Straße 61, 22179 Hamburg
Phone: 040 – 64 62 321
E-mail: service@bonprix.net

Executive Board (Managing Directors):
Matthias Wlaka 
Dr. Kai Heck 
Carolin Klar
Dr. Marcus Ackermann (Chairman of the Advisory Board)


2. Contact data of data protection officers

You can reach our in-house data protection officer at

bonprix Handelsgesellschaft mbH
Datenschutzbeauftragte
Haldesdorfer Straße 61
22179 Hamburg
E-mail: datenschutz@bonprix.net


3. Purposes of data processing, legal basis and legitimate interests pursued by the controller or a third party, and categories of recipients

The following is a detailed introduction to the way we process data, structured by purposes of data processing and categories of recipients.


3.1. Online presence and website optimisation (using cookies)


3.1.1. Cookies – General information

This website uses cookies. Cookies are small text files which your browser creates automatically, and which are stored on your device (laptop, tablet, smartphone etc.). The cookies contain information that results in connection with the specific device you used. That does not mean, however, that the cookies give us any direct information about your identity. Most of the cookies we use are deleted after the end of the browser session (they are called session cookies). With these, we can provide you with, for example, the watch list function, where you can see a clear overview of all vacancies that are of interest to you. Other cookies remain on your computer and allow us to recognise your computer the next time you visit our site (they are called permanent or cross-session cookies). Among other things, these cookies are used in particular to make our website more user-friendly, effective and safe. Thanks to these files, it is possible, for example, to show you information on this website that is specially tailored to your interests.

According to legal requirements, storing information on user devices (desktops, smart phones, tablets etc.) – for instance by setting cookies – and retrieving information from user devices (tracking) is generally permitted only after you have given your consent. Legal basis for this is Art. 25 (1) TDDDG (Telecommunications, Digital Services and Data Protection Act). However, we do not need your consent if this process of storing/retrieving data is necessary for the content of the website. Legal basis for this is Art. 25 (2) No. 2 TDDDG. Such a necessity exists, for example, with regard to ensuring the following functions/achieving the following purposes:

With regard to the data processing that is necessary for operating the website, you do not have the right to object.

If these cookies and/or the information contained in them consists of personal data, the legal basis of data processing is Art. 6 (1) f GDPR. Our interest in optimising our website is to be considered legitimate as defined by the above regulation.


3.1.2. Intervention options / browser settings

Of course you can adjust your browser settings so that your browser does not save our cookies on your hard drive any longer or deletes cookies already saved there. To do that, proceed as follows:

In Internet Explorer:

  1. In the “Extras” menu, select “Internet Options”.
  2. Click on the “Data protection” tab.
  3. Now you can manage the security settings for the internet zone. This is where you decide if and which cookies you want to accept or reject.
  4. Click “OK” to confirm your setting.

In Firefox:

  1. In the “Extras” menu, select “Settings”.
  2. Click on “Data protection”.
  3. In the drop-down menu, select the item “Set up by user-defined settings”.
  4. Now you can define whether you want cookies to be accepted, how long you want to keep them, and you can add exceptions for which websites you want to always or never allow to use cookies.
  5. Click “OK” to confirm your setting.

In Google Chrome:

  1. Click the Chrome menu in the toolbar of the browser.
  2. Now select “Settings”.
  3. Click on “Show advanced settings”.
  4. Under “Data protection”, click “Content settings”.
  5. Under “Cookies” you can define the following settings for cookies:

In Safari:

  1. Go to “Settings” and select “Safari”.
  2. Under the heading “Data Protection & Security” you’ll find the option “Always block” under the “Block cookies” tab.

3.1.3. Consent management by Complianz

We use a consent and tag management tool (hereinafter referred to as ‘Privacy Centre’) from Complianz B.V., Kalmarweg 14-5, 9723 Groningen, Netherlands, to manage your settings and document the consent of users of our services. The Privacy Centre is used, among other things, to store cookie settings for the entire website. With the help of the Privacy Centre, we store information about the categories of cookies and individual providers used by the website and whether users have given or revoked their consent to the use of the individual categories and providers.
This enables us to prevent cookies in each category from being set in the user’s browser if consent has not been given for individual categories. The consents documented in this way via our Privacy Centre have a lifetime of one year, so that the settings of returning visitors are saved. You can view more detailed information about your consents in our Privacy Center. You can also change your cookie settings here.


3.1.4. Consent to the use of individual online services / collection of tracking data

As already explained above in the section on cookies (No. 3.1.1.), we collect and process data collected in connection with the use of cookies in part based on your consent. You give your consent by clicking on the “accept” button on the banner displayed on our website, which links to these consent texts. By clicking this button, you give your consent to bonprix for storing data on your device (e.g. by setting cookies) or retrieving data from your device. You also have the option of clicking on “View settings” in the banner and managing your consent preferences there. You can change your consent and preferences at any time later on in our Privacy Center. We differentiate between “functional cookies”, “analytical cookies”, “preference cookies” and “marketing cookies”. Data processing activities that are carried out in connection with these marketing functions are described in the following (No. 3.1.4.1. to No. 3.1.4.4. of this Privacy Statement).

Withdrawal of all consents

All consent that you have given by clicking on the “accept” button shown in the banner can be revoked in the Privacy Center with a click on the respective fields.


3.1.4.1. Technically necessary cookies (No consent required)

These are technical cookies that are necessary for the smooth operation of our website and all functions it offers. They are necessary, among other things, for transferring your application information to our applicant management system, managing your watch list, displaying our news feed, controlling filters, integrating security functions or storing your privacy settings. Your consent is not required for the use of absolutely necessary cookies on our website. Hence, technical cookies cannot be individually deactivated or activated.


3.1.4.1.1. Own web tracking (basic tracking)

As described in section 3.1.1, bonprix uses its own web tracking technology (basic tracking) based on our legitimate interest. We process the data collected through the use of this technology for the following purposes based on legitimate interests: Measuring internal website traffic and click behaviour; ensuring the functionality of individual features on our website; measuring the traffic rates of individual subpages of our website; bot detection; fraud prevention. The data collected via bonprix’s own web tracking technology is processed exclusively in pseudonymised form or using a pseudonym. This means that it is not possible to directly assign the data to your person without consulting separately stored information.

The legal basis for this data processing is Article 6(1)(f) GDPR (legitimate interest) and
§ 25 paragraph 2 No. 2 TDDDG.


3.1.4.1.2. Complianz consent management

As already described in section 3.1.3, bonprix uses the consent and tag management tool from Complianz B.V., Kalmarweg 14-5, 9723 JG, Groningen, Netherlands, for consent management. In order to offer this service and to implement the correct setting of cookies in accordance with your consent, the provider sets cookies on your device.

The legal basis for this data processing is Article 6(1)(f) GDPR (legitimate interest) and
§ 25 paragraph 2 No. 2 TDDDG.

You can find more information about the consents you have given in our Privacy Centre. You can also change your cookie settings here.


3.1.4.2. Consent for cookies for analytical purposes

Analytical cookies enable us to measure the performance of our website. With their help, we determine the number of visits and the origin of the visits to our website. We process the collected data in aggregate form, so that it is not possible to draw conclusions about a specific user of the website. If you disable the use of analytical cookies, we will not be able to analyse the performance of our website and optimise it for your visit.

No analytical cookies are currently in use.


3.1.4.3. Consent to cookies for marketing purposes

We or our partners use marketing cookies to show you relevant content or advertising on our websites and websites of third parties. This allows us to create what is called pseudonym profiles based on your interests. Direct identification of your person is generally not possible with this information, as it is based solely on pseudonymised data. If you block these cookies, you will receive less relevant content and advertising tailored to your interests.

We are currently not using any marketing cookies of third-party providers.


3.1.4.4. Consent for cookies used for personalisation purposes

We also use tracking data to tailor our shop to the needs and interests of our customers and thus provide you with a special shopping experience. By using personalised cookies, we can avoid displaying unwanted information to you. In addition, we can offer you additional functionalities by using personalised cookies.

No personalisation cookies are currently in use.


3.2. “Job-Alert” newsletter

As part of our web presence, we invite you to sign up for our weekly “Job-Alert” newsletter. After you register, you will receive our weekly newsletter informing you of new jobs at bonprix. After you send your newsletter request, you receive a confirmation e-mail asking you to confirm your newsletter request. You are not registered for the newsletter until you activate the confirmation link (this is called a double opt-in procedure). To continue developing our newsletter and for statistical purposes, we collect data through our newsletter about when and how often it was read. We collect this information in pseudonymised form.

The legal basis of this processing activity is Art. 6 (1) a GDPR.

Information about the right of revocation
Of course you can revoke your consent at any time at personal@bonprix.net and/or at the end of every newsletter to unsubscribe from receiving our newsletter in the future, without incurring any costs other than the transfer costs according to basic rates.


3.3. How to contact us

Under the heading “Contact” we provide you with an option for getting in touch with us. This is where you will find our contact form. All of the personal data you voluntarily provide to us as part of your contact inquiry will be used exclusively to process your inquiry. Required information that we need, at a minimum, to assign your inquiry in our system and process it for you are marked with an (*). To protect your data, we transfer them only in https-encrypted form.

Legal bases for this data processing are Art. 6 (1) a, Art. 6 (1) b, Art. 6 (1) c GDPR as well as Art. 6 (1) f GDPR.


3.5. Other categories of recipients


3.5.1. Contract data processors

We use third-party partners/contract data processors, who are required to provide our services and achieve certain purposes. We transmit personal data to these third-party partners if it is necessary to provide our services.

Legal basis for this data processing is Art. 6 (1) b and f GDPR.


3.5.2. Recipients outside of the EU

Applicant data are always processed in computing centres in the Federal Republic of Germany. If data are processed outside of the European Economic Area, this occurs only if the EU Commission has confirmed that the third country has an appropriate data protection level or if other appropriate data protection guarantees (in particular EU Standard Contractual Clauses) of the EU Commission have been established.


4. Privacy information for applicants 

You can use our pages to apply for vacant positions. In the following sections, we inform you of the purposes of data processing, the legal bases and recipients that are part of our applicant management.


4.1. Data processing for purposes of the application process

If you apply for a vacant position with our company via our career portal, we process the following data required to process your application and possibly for employment with our company:

We process these data, which you have sent to us as part of your application, to review your suitability for the position (or possibly other vacancies in our company – if your consent is legally required in this context, we will obtain it first) and to proceed with the application process.

If further data are processed during the ongoing application procedure, we will inform you of this processing separately.

The legal basis for processing your personal data in this application process is primarily Art. 26 of the German Federal Data Protection Act (BDSG). It stipulates that it is permissible to process data that are necessary in connection with the decision to establish an employment relationship.

If the data are needed after completion of the application process, possibly for legal proceedings, data can be processed based on the conditions of Art. 6 GDPR in particular to exercise legitimate interests as defined in Art. 6 (1) f GDPR. Our interest in this case is the assertion of or defence against claims.

If during the application process you have consented to further storage of your data for the purpose of being considered for other vacant positions, your data are processed based on your consent, Art. 6 (1) a, 7 GDPR.

If you have received an offer for a position during the application process, your data are transferred from the applicant management system to our personnel information system. Legal basis for this is Art. 26 BDSG

Information about the right of revocation
Of course you can revoke your consent at any time at personal@bonprix.net with effect for the future, without incurring any costs other than the transfer costs according to basic rates.


4.2 Data processing for the purpose of conducting the international application process

If you are applying for an internationally advertised vacancy within the bonprix Group and its European subsidiaries, you can also apply via our career portal. In this case, we will also comply with the relevant national legal provisions when processing your data. We process the following data for the purpose of the application process and possible employment with us:

We process the data you have sent us in connection with your application in order to assess your suitability for the position (or, if applicable, other open positions in our companies – if your consent is required in accordance with the legal basis, we will obtain this in advance) and to carry out the application process.

If further data is processed as part of the ongoing application process, we will inform you separately.

The collection of data and further data processing within the international application process is carried out via the career portal of bonprix Handelsgesellschaft mbH. The assessment of suitability for a position is carried out internationally by bonprix and its affiliated subsidiary in your home country.

Data processing within the international application process is carried out by bonprix Handelsgesellschaft mbH (Germany), bonprix S.r.l. (Italy), bonprix SASU (France) and bonprix sp. z o.o. (Poland) under joint responsibility, Art. 26 GDPR. The essential contractual provisions can be obtained from bonprix Handelsgesellschaft.

The legal basis for the processing of your personal data in this application process is primarily Art. 6 (1) (b) GDPR. According to this, data processing is permissible if it is necessary for the implementation of pre-contractual measures taken at the request of the data subject.

If the data is required for legal purposes after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular for the purpose of safeguarding legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest then lies in asserting or defending claims.

If, during the application process, you have consented to the further storage of your data for consideration for other open positions, the processing of your data will be based on your consent, Art. 6(1)(a) and Art. 7 GDPR.

If you have been offered a position as part of the application process, the data from the applicant management system will be transferred to the personnel information system of the subsidiary employing you. The legal basis for this is Art. 6 (1) (b) GDPR.

Note on the right of withdrawal

Of course, you can withdraw your consent at any time at personal@bonprix.net with effect for the future, without incurring any costs other than the transmission costs according to the basic tariffs.


4.3. Storage time

The duration for which we store the data collected about you depends on the purpose for which we process the data. We store the data for as long as necessary to achieve the intended purpose. If we are required to store certain categories of data for a particular time period due to legal obligations (e.g. tax law obligations), we continue to store the data after they are no longer needed for achieving the respective purpose, but only for the purpose of complying with the legal obligation. In these cases, the data are blocked from access.

Examples of storage times:


4.4. Recipients of applicant data

Your application data are reviewed by our personnel department after we receive them. Suitable applications are then transferred internally to the department heads responsible for the open position. If according to legal regulations your consent is required and we have obtained it, the application documents may also be forwarded to other responsible persons in other departments. As a general rule in our company, only those persons have access to your data who need them for the proper processing of our application procedure. This also includes the members of employee representation. As part of system upkeep and maintenance, persons entrusted with this task may become aware of your data. These persons or any service providers are obligated to maintain data secrecy.


5. Privacy information about the Talent Management system 

The following special data protection information applies to the Talent Management pool.


5.1. Data processing in the Talent Management pool

The bonprix talent pool is a candidate management system of bonprix Handelsgesellschaft mbH (Haldesdorfer Straße 61, 22179 Hamburg) which is focused on acquiring talent. The talent pool allows us to simplify the process of contacting talented persons and making them transparent for future development and exciting challenges within our company. To do that, we
e-mail selected persons invitations and information on professional and career events as well as current events at bonprix via their profile in the talent pool and upon request. Finally, we notify you of special job offers at bonprix.

In order to offer the candidates the listed advantages and to administer the talent management, our system needs to process certain personal data. 

The following data you provide are processed.

For students: Using a test for determining potential, an additional aptitude test is administered once to determine the suitability of the talent. In this process, a result score is determined and saved. This type of data processing is based on Art. 6 (1) a GDPR (consent). 


5.2. Storage time

We will store your data for a maximum of two years after entry into the talent pool. Independently of that, if your personal data are stored in the talent pool, they are deleted according to the applicable data protection principles referenced above, with the understanding that we will ask you per e-mail to update your data if you have not modified or used your profile over a period of six months. If you do not update your profile within one month following that e-mail, we will remove you from the talent pool and delete your personal data. In addition, we will contact you shortly before the end of the two years since your entry to find out whether you would like to remain in the talent pool.


5.3. Recipients of data

The personal data stored in the talent pool are only accessible to authorised employees of the personnel marketing and recruiting teams. These employees are permitted to use the data only for the purposes listed above. When you enter into an application process, your data are shared with the respective company unit. Of course your personal data are kept strictly confidential. 

Participation in the Talent Management system is voluntary. Legal basis for the processing of personal data of employees of bonprix Handelsgesellschaft mbH is Art 26 BDSG in connection with the applicable company regulations; for everyone else, the basis is separately given consent according to Art. 6 (1) a GDPR, which is obtained with the registration process based on the data protection information presented here. As soon as the talent has initiated an application process, the information on the application process, which you can review under No. 4, apply as well.


5.4. Updating of data

You can delete your data in the talent pool yourself in your profile at any time without stating reasons. Also, you can update your data yourself via manual entry or an automated CV upload, or link to the listed business networks. If you encounter problems regarding the updating or deleting of your data, please contact either your personal support or personal@bonprix.net . 


6. Your rights as a data subject

In the context of our processing of your personal data, you have certain rights as a data subject. You have the right to receive information on the data we have stored about you. Also, you can revoke any consent you have given us and object to individual data processing activities. You further have the right to have incorrect data corrected, and you can request that we send you certain data in a commonly used electronic format. You also have the right to have us delete the data we have stored about you. In this regard, please be aware that we may be legally obligated to continue to store your data despite your exercising your right to deletion. Furthermore, in individual constellations we have an interest in continuing to store your data that outweighs your interest in their deletion (e.g. if we have outstanding claims against you).


7. Your rights in detail

If you want to exercise your rights as a data subject, please address your request in writing or text form to:

Bonprix Handelsgesellschaft mbH
– Personnel Department –
Haldesdorfer Straße 61
22179 Hamburg

or by e-mail to personal@bonprix.net

Aside from the right to revoke any consent you have given us, you have the following further rights, contingent on the applicable legal prerequisites:

You have the right to information about your personal data we have stored about you (Art. 15 GDPR), in particular you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or are being disclosed, the planned storage time, and the origin of your data if they were not collected directly from you.

You have the right to correction of incorrect data or completion of incomplete data (Art. 16 GDPR).

You have the right to request deletion of the data we have stored about you at any time, (Art. 17 GDPR), as long as we are not required to comply with any legal or contractual retention times or other legal obligations or rights to further storage (e.g. if we have outstanding claims against you).

If the legal prerequisites of Art. 18 GDPR are fulfilled, you have the right to request restriction of processing of your data at any time (Art. 18 GDPR). This is the case, in particular, if you contest the correctness of the data, the processing is unlawful but you object to deletion, if the controller no longer needs the data, but you need them to exercise, enforce or defend legal claims, or if you have objected to processing as defined in Art. 21 GDPR.

You have the right to data portability (Art. 20 GDPR), i.e. the right to have certain data we have stored about you transmitted to you in a commonly used, machine-readable format, or to request that we transmit the data to another controller.

You have the right to complain to a supervisory authority. Generally, you can turn to the supervisory authority at your usual place of residence or your workplace, or at the location of our company’s registered office.


8. Data security

All data you transmit to us personally are transmitted with the generally used and secure SSL (Secure Socket Layer) standard. SSL is a secure and tested standard, which is also used in online banking, for example. You can recognise a secure SSL connection, among other things, by the “s” appended to the http (https://…) in the address bar of your browser or by the lock symbol in the upper or lower area of your browser.

In all other respects, we use suitable technical and organisational security measures to keep your personal data we have stored safe from manipulation, partial or complete loss, and unauthorised third-party access. Our security measures are continuously improved to keep pace with technological developments.


Status: 1 October 2025