No browser support

No support for your browser

customer privacy notice

1. Overview

Data processing by Lidl can essentially be divided into various categories:

- For contract processing purposes all data will be processed that is necessary for the implementation of a contract with Lidl. If external service providers are also involved in the execution of the contract, for instance logistics companies, agencies or service providers, your data will be passed to them to the extent necessary and processed by them for the specific purpose concerned.

- When you access the Lidl website, app and other Lidl platforms, certain information is exchanged between your device and our server. This may also be personal data. Data collected in this way can for instance be used to optimise our website or to display advertising in the browser of your device. 

2. Contacting Customer Services

Purpose of data processing / legal basis and recipients / categories of recipients:
Personal information that you provide us with when filling out contact forms, by telephone,  by e-mail or via social media is treated confidentially. We use your data solely for the purpose of responding to your customer request. In order to identify you as a customer or to process your request, we may use data that you have provided to us. We collect more than one means of contact to enable us to deal with your query as efficiently as possible. This is done on the basis of legitimate business interests to ensure we can provide prompt query resolution, provide store/product information, handle comments/complaints and respond to product quality concerns in the most efficient way possible to maintain customer satisfaction as a cornerstone of our business.  
Calls may be recorded for quality and training purposes. Calls are recorded at random and stored for 30 days on a secure password protected system only accessible by dedicated users and are used for training matters or when requested by government authorities. Where you may not wish for a call recording, you are welcome to utilise one of the other channels on offer to get in touch with us (in writing), alternatively notify a customer service agent in our call centre who can then call you back.

By interacting with you and fielding your customer query we may collect and process the following information depending on the category of your query (availability, stores, quality, suggestions etc.) and the information you provide to us:
• Personal details
• Email address
• Residential address
• Voice recordings of telephonic conversations held with customer service staff
Further information (till receipts, local store and shopping habits etc.) may be gathered to further evidence or enhance your query. You may provide further details relating to your person that were not prompted but this would not be processed unless relevant to the query at hand.

It may be necessary for us to forward extracts of your request within our business or to our business partners (e.g. suppliers for product-specific enquiries or our Quality Assurance department to investigate product concerns) in order to process your request. In these cases, however, the request will be anonymised beforehand, so that the third party cannot make any connection to you. If, in individual cases, the disclosure of your personal information should be required, we will inform you about this in advance and obtain your consent.

Storage duration / criteria for specifying the storage duration:
All personal information that you send to us as queries (suggestions, compliments or complaints) will be deleted by us no later than 90 days after the final response has been given to you, or securely anonymised. The retention of 90 days is in place in case you wish to follow up with us after your case was closed. Experience has shown that usually after 90 days, questions relating to existing queries no longer need to be processed. Occasionally it may happen that for legal reasons (eg in insurance cases) we need to store your personal details longer. In these cases, we do not save your information longer than the statutory retention requirements require us.
As a general rule voice recordings are kept for 30 days before being deleted.

Should any excessive or irrelevant information be received by customer services (e.g. job applications), it will be deleted upon receipt and where possible the customer will be redirected to the correct avenue to handle such a query.

3. CCTV usage in stores
Purpose of data processing / legal basis:
CCTV recording is active in most Lidl stores. Such recordings are captured and processed in the legitimate business interests of;
The safety and security of our customers
The safety and security of our staff
The safety and security of our premises and property
The protection against, detection of and evidencing of criminal activities and
The reduction of company losses and inventory discrepancies
In so far as a particular premises licence requires such CCTV, then the requirements of such recordings are performed under the legal basis of the licence requirements.
Recipients or categories of recipients:
CCTV footage of customers is recorded by cameras as laid out in our internal CCTV policy and camera layout procedures. The physical technological infrastructure and recordings are stored and backed-up internally. 
As a general rule we will not disclose this data to third parties unless required to be provided to legal authorities when we have a statutory obligation to provide such recordings. Recordings may at times be used in evidencing legal/ongoing disputes where all requirements for the access and storage of such data have been met as laid out in our internal investigation procedures. 
Storage duration / criteria for specifying the storage duration:
CCTV footage is kept for a period of up to 28 days from the time of recording unless specified separately under licence requirements. As so far as there is a potential/ongoing claim then footage may be retained for a period of up to 3 years or until the claim is finalised. Where there has been access requests successfully provided to recipients then still images shall be securely filed to evidence further correspondence on such footage for a period of 3 years.
4. Competitions and Prize Draws

Purpose of data processing / legal basis:
You have the possibility to participate in various competitions on our website, My Lidl Community, at Lidl events, from our newsletter or via the Lidl App. If not otherwise specified in special data protection principles at the point of entering the respective competition, or you have not given us further explicit consent, the personal data forwarded by you to us within the scope of participation in the competition will be used exclusively for processing the competition (e.g. identifying the winner, informing the winners, despatching the prize). The legal basis for the data processing within the scope of competitions is principally for the fulfilment of the competition contract as set out in the terms and conditions of the respective contract. In the event of the submission of a declaration of consent within the scope of a competition, then the legal basis for the data processing will be based on such consent. You have the possibility to revoke this consent at any time. In some cases, further details will be provided in the specific data protection information at the point of consent of the particular competition.

The name and county of major prize-winners will either be published or made available on request. For this reason a full name of the winner will be required. 

Recipients or categories of recipients:
Data will only be forwarded to third parties if this is necessary for processing the competition (e.g. despatching the prize via a logistics company). We categorically exclude any further dissemination of this data to third parties.

Storage duration / criteria for specifying the storage duration:
After three months following the end of the competition and announcement of the winners, the personal data of the participants will be deleted. In the case of material prizes, the data of the winners will be kept for the duration of the statutory warranty claims, in order to arrange for repair or replacement in the case of a defect.

5. Newsletter distribution

Purpose of data processing / legal basis:
On our website, on the Lidl Community page, through the Lidl app, at the point of certain competitions and through dedicated event communications we offer you the possibility to register for our newsletter. If you have consented to receive our newsletter, we will use your e-mail address and possibly your name in order to send you information about products, special offers, competitions and news, flowers, photography as well as for customer satisfaction surveys. We will store and process this data for the purpose of sending the newsletter until such time as you request for this to not be the case.

The content of the newsletter includes promotions (offers, discount promotions, competitions, etc.) as well as goods and services of the Lidl stores. In certain regions the offering may vary and as such the content in the Newsletter will be adapted to customers in those regions.

The legal basis for data processing within the scope of the distribution of newsletters is your consent. 

To ensure that no errors occur when entering your e-mail address, we use the so-called double opt-in procedure: After you have entered your e-mail address in the log-in field, we will send you a confirmation link. Only when you click this confirmation link will your e-mail address be added to our distribution list.

You may revoke your consent to the receipt of the newsletter at any time in the future, e.g. by unsubscribing from the newsletter on our website. You can find the link to unsubscribe at the end of each newsletter. When you revoke your consent all the collected user data will be deleted.

Recipients or categories of recipients:
If external contractors are used to carry out the despatch of newsletters, they are under a contractual obligation in accordance with Article 28 of GDPR. We categorically exclude any further dissemination of this data to third parties.

Storage duration / criteria for specifying the storage duration:
If you revoke your consent to receipt of the Lidl newsletter, your data will be deleted from the corresponding (e-mail) distribution lists.

6. Property consultations with residents/local customers

Purpose of data processing / legal basis:
In the process of planning for new Lidl stores we may undertake certain consultations with local residents and customers in prospective areas (within a defined radius) to open conversations, work with local councils and insure greater information and transparency preventing any objections at the submissions stage. This serves at the legitimate business interest in hosting meetings or interacting with said individuals. This is performed via public consultation/ town halls with voluntary attendance. Where your data will be processed for reasons other than stated here, your explicit consent will be required and details of the processing activities will be provided at the point of collecting such data. 

Recipients or categories of recipients:
The personal details and address along with site specific personal information of chosen individuals is logged on a register for internal record keeping purposes only. 

Storage duration / criteria for specifying the storage duration:
Any handwritten information would be captured in a digital format and stored securely and disposed of once the store is built or when the specific requirements for gathering such information have been fulfilled (extension proposals, car park sizes etc.) 

7. Car Park Management

For those stores with dedicated car parks, we may collect and process certain footage of customer vehicles in-line with the legitimate business interest inherent in our property rights and for the efficient running of our car parks. 

The ANPR cameras situated in any of our car parks take still images of every vehicle entering and exiting the car park, for the purpose of allowing us to administer our car park management system. This system is technically and operationally separate from our CCTV system, which captures moving images for the purposes laid out in the 'CCTV usage in stores' section of this notice. 

The images taken automatically by the ANPR cameras of each car entering and leaving our car parks are initially stored at the store; this is also the case with a registration number entered by a customer at the terminal after completing their shop with us. Nobody at the store has access to this information. This data can only be accessed securely and exclusively by our contracted car park management service providers (see below) for the purpose of managing our car parks as defined in our business relationship with them and in this notice. Any images of vehicles and car registration numbers obtained at any of our stores’car parks in this process are not stored on site by Lidl for more than 24 hours before they are transferred daily to the contracted car park management service providers and then immediately and securely deleted. To this end the images are never accessed by Lidl on site. 

The images of vehicles entering and exiting the car park, which show in particular the registration number but do not show any faces of anyone in the car, as well as the registration number entered by a customer at the end of their shop with us are used by our car park management company only if a vehicle remains longer in the car park than allowed. 

The images of a vehicle that was identified as that of a customer, based on the customer submitting at the terminal at the store exit the relevant vehicle registration number and scanning the bar code of their receipt to confirm that they had shopped at that store that day, will only be used further by the car park management company should the vehicle have stayed over the 90 minutes signposted in the car park of our particular store.

The information of a vehicle that was not identified as that of a customer, if its registration number was not submitted at one of the terminals, will be used by our car park management company for the purpose of issuing a parking charge. This is unless the vehicle left the car park again within a grace period of 10 minutes of entry. If a car enters the car park but leaves again within this period of time, for instance if no parking space was available, the images of that car will not be used any further.

If a vehicle was identified as having overstayed the respective duration allowed as outlined above, then our car park management provider will use the registration number identified from the images to make an application to the DVLA for name and address of the registered keeper, in order to issue a parking charge. At no time is information obtained by the ANPR service providers (in the course of the process of administering the incurred parking charge) shared with Lidl. 

Whilst the cameras are directed to capture the registration number of vehicles, they may in rare instances capture images/partial images of identifiable aspects of particular individuals. These images would never be processed in any way as they fall outside of the scope of the activity of processing for car park management.We utilise the services of two main service providers to assist with the management our car parks:

• Athena ANPR Ltd.
• Euro Car Parks

Further details of the car park management can be found on the signage on-site. In some cases particular sites may have additional service providers managing the car parks. 

At the point at which the service providers gather and process further information they would do so in accordance to their respective privacy notices.
Athena ANPR Ltd.
Euro Car Parks

8. Customer Surveys

Purpose of data processing / legal basis:
On our website, newsletter, Lidl App and various other platforms you have the option to voluntarily participate in online feedback surveys. This is based on the business interest of  improving the Lidl website experience, customer offering and online services. The data processed would include your age range, gender, location and opinions or additional information provided freely by yourself in free text fields. The information gathered will not be personally identifiable as it will only be used for analytical metrics.

Should any personal data be provided in free text fields by yourself, this will not be processed/stored in line with the purposes of the surveys.   

Recipients or categories of recipients:
We contract with a third party service provider (Netigate) who processes the information captured in the survey on our behalf in order to provide us with relevant metrics and statistics. This is only ever done in an anonymised format.

9. Accessing our website
Purpose of data processing / legal basis:
When you access our website, the browser used on your terminal device will, automatically and without any action on your part, send
the IP address of the requesting web-enabled device, 
the date and time of access, 

the name and URL of the requested file, 

the website/ application from which the access was made (referrer URL),
the browser you are using and possibly the operating system of your web-enabled computer as well as the name of your access provider
to our website server where they are temporarily stored in a so-called log file for the following purposes:
ensuring a smooth establishment of the connection;
ensuring convenient use of our website / application; 
evaluation of system security and stability. 

If you have consented to so-called geo-localisation in your browser or in the operating system or other settings of your device, we will use this function in order to be able to offer you individual services related to your current location (e.g. the location of the nearest store). When we process your location data in this way, it is processed exclusively for this function.
The legal basis for the processing of the IP address is for the legitimate interests as explained in the above-listed purposes of data processing.
Recipients or categories of recipients:
We categorically exclude the dissemination of this data to third parties.
Storage duration / criteria for specifying the storage duration:
The data is stored for the duration of navigation on our website and automatically deleted thereafter. After your website session ends, the geo-localisation data for the purposes of store locations is stored until your browser settings are reset/forgotten.
12. My Lidl App

No personal data or device data is collected via this application. Only a device-token necessary to enable push-notifications (for example when setting a bookmark reminder) will be stored.

For the iPhone App: This device-token will be additionally transferred to Apple in order to complete the push-notification setup. No cookies are stored on your iPhone via this application.

Any external links included in this application lie outside the operator's responsibilities. The content of external webpages is monitored for statutory violations before being included on the Lidl website.

However, Lidl has no influence over the content of these webpages and takes no responsibility for them. Lidl carries out regular inspections of its links. If a statutory violation is brought to our attention, that link is deleted immediately.

In the case of illegal, corrupt or incomplete material, as well as damages that may arise as a result of use or disuse of links, only the provider is liable.

Google Analytics
This app uses Google Analytics, a web analytics service provided by Google Inc. (Google). Information created and collected by the cookie regarding users’ use of this app will generally be transmitted to and stored on servers in the USA. Please note that IP anonymisation is permanently activated on this app resulting in the deletion of the last eight characters of a user’s IP address. This shortening of a user’s IP address is carried out within the European Union or in another contracting member state of the European Economic Area. In exceptional circumstances, this process may be carried out in the USA under the safe harbour agreement. Google uses the information gathered on this app on behalf of Lidl UK GmbH to analyse anonymised users’ usage of the app, to generate reports regarding anonymised users’ app activity, to create anonymous user profiles and web statistics and to provide further services on behalf of Lidl UK GmbH associated with the app and internet usage. The IP address transmitted by a user’s browser will not be combined with any other data.

The Lidl app uses the analysis tool Adjust, a product of the company Adjust GmbH. When you install the Lidl app, Adjust saves installation and event data from your Lidl app (e.g., use the app or interactions in the customer account). This allows us to understand how you interact with our app. We can also analyse and improve our mobile advertising campaigns. For this analysis adjust uses IDFA (identifier for advertising) or the Android advertising ID, the IP / MAC address, the HTTP header as well as a record of your device (in addition: time of access, Country, language, local settings, operating system and version as well as the app version). This data is anonymised or pseudonymised, therefore it is not possible for neither us nor Adjust to identify you by means of these data. 

If you want to stop the tracking facility from Adjust, you can reset or disable the IDFA and the Android Advertising ID at any time using the buttons in the menu of the App under the ‘Legal Notices – Google Analytics & Adjust’.

13. Social Media Plug-ins
The Lidl website and other online/mobile sites may use Social Media plug-ins for the social networks; 
- Facebook (Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA)

- Twitter (Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)

- YouTube (YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA)

- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, California 94025, USA, a subsidiary of  Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA)

- LinkedIn (LinkedIn Ireland, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland)
Social Media plug-ins are social network programs that are embedded on other companies’ websites. Embedding a Social Media plug-in causes personal and person-related data to be transmitted to the provider of the social media plug-in. Furthermore, if you are also logged on to a social network, an activated social media plug-in enables your activities to be assigned to your profile.
For data protection reasons, we have decided to initially block the social media plug-ins that are embedded on our website.
We do, however, offer you the possibility of using social media plug-ins if you so desire.
The plug-in is only activated by you clicking on the desired plug-in symbol, which we have pre-connected.
Please note that, when the plug-in you have selected is activated, this results in personal data being transmitted to the respective provider of the social media service.
The plug-in you have activated immediately sets up via your browser a connection to the server of the social media provider you have selected.
We would expressly point out that we have no influence on the scope, type and purpose of the processing of your personal and person-related data by the provider of the social media service and can inform you only according to our level of knowledge at this point.
The personal data collected and processed by the social media providers includes:
Your IP address
The address of the website on which the activated social plug-in is located,
Information about the browser used and the operating system you use,
The date and time our website was accessed or the social media plug-in was activated, respectively
The above-mentioned data is transmitted and stored when the plug-in is activated irrespective of whether you are a Member of the corresponding social media provider.
In addition we would refer you at this point explicitly to the social media provider’s privacy policy.
If at the time of the interaction you are also logged on to a social media provider, such as Facebook, it is capable of learning your user name or, if stored, your real name, and assigning the information underlying the interaction to your profile correspondingly.
The above-mentioned data also makes it possible for the providers of the corresponding social media services to create pseudonymised, and potentially also individualised, usage profiles for their own purposes.
Where there is interaction with the activated plug-in (e.g. Facebook “likes”), the social media provider may possibly cause a cookie to be stored on your PC or device, which also makes it possible to identify your person or your profile.
If the plug-in is activated, your IP address is stored and a cookie saved irrespective of whether you are Member of one of the social media providers.
We would expressly point out that the duration of storage of such cookies is not known to us and we have no influence over it.
In the case of non-members, a usage profile might subsequently be created by any stored cookie, when you log on to a social media provider in the future.
Please note that when a social media plug-in is activated, your personal data can also be stored, processed and used in countries outside the European Union and thus possibly in countries that do not have an adequate and appropriate level of data protection corresponding to that in the European Union.
You can prevent/delete cookies for our website to prevent the above activities from happening, though it may affect your user experience.
14. Online presence and website optimisation
14.1 Cookies – General Information

On our website, we use so-called cookies on the basis of legitimate business interest in optimising our website offering. Cookies are small files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not harm your computer and do not contain viruses, trojans or any other malicious software. Information is stored in the cookie that results in each case in connection with the specific device used. However, this does not mean that we immediately become aware of your identity. The use of cookies serves on the one hand to make the use of our offer more enjoyable for you. Thus, we use so-called session cookies to recognise that you have already visited individual pages of our website. These will be deleted automatically after you leave our website. Furthermore, we also use temporary cookies for the purpose of usability, which are stored on your device for a certain specified period of time. If you visit our website again in order to take advantage of our services, it will automatically detect that you have already paid us a visit and which inputs/settings you have made so that you do not have to perform these actions again.

On the other hand, we use cookies to statistically record the use of our website for the purposes of optimising our offer and to provide information that is specially tailored to you. When you visit our site again, these cookies enable us to automatically recognise that you have already been there. These cookies will each be automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or to always show a message before a new cookie is created. The complete deactivation of cookies may however mean that you will not be able to use all the functions of our website.

For more information on cookies or on instructions on how to stop cookies being installed on your browser, please refer to various specific websites on the internet, such as AboutCookies.

While most of the cookies we use are implemented by default, you can set your browser to not store any cookies and to delete all existing cookies by adjusting your browser settings. If you are using any of the below browsers, you may click the below links to find out how to deactivate the use of cookies:
Google Chrome browser
Microsoft Internet Explorer browser
Mozilla Firefox browser
Apple Safari browser
Opera Web browser

Should you use another internet browser, please check the instruction on your help function on how to disable and delete cookies.

Hint: Blocking cookies might prevent some pages from displaying correctly.

Click here to see a breakdown of cookies used on our site.

14.2 Google Analytics
Purpose of data processing / legal basis:
For the purposes of demand-oriented design and ongoing optimisation of our websites, we use Google Analytics, a web analytics service provided by Google, Inc. ("Google") on the basis of our legitimate interest as follows. Pseudonymised user profiles are created and cookies are used. In the process, the cookie generates the following information about your use of this website:
Browser type and version,
Operating system used,
Referrer URL (the previously visited website),
Host name of the accessing computer (IP address), 
Time of server request.
The information is used to evaluate the use of our websites, to compile reports about website activities and to perform further services connected with the website usage and internet usage for the purposes of market research and the demand-oriented design of these websites. The IP addresses are anonymised, so that attribution is not possible (so-called IP masking). 
You may prevent the installation of cookies by selecting the appropriate settings on your browser. However, please be advised that if you opt out of using cookies, you may not be able to fully use all the features of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (incl. your IP address) and the processing of the data by Google by downloading and installing this browser add-on. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent collection of information by Google Analytics by clicking on this link. This sets an opt-out cookie which prevents any future collection of your data when visiting this website. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the ‘opt-out’ to cookies again. Further information on data protection in the context of Google Analytics can be found on the Google Analytics website
Lidl also uses third party vendor re-marketing tracking cookies, including the Google Adwords tracking cookie. This means we will continue to show ads to you across the internet, specifically on the Google Content Network (CGN). As always, we respect your privacy and are not collecting any identifiable information through the use of Google's or any other third party marketing system.
The third party vendors, including Google, whose services we use will place cookies on web browsers in order to serve ads based on past visits to our website. This allows us to make special offers and continue to market our services to those who have showed interest in our service.
Recipients or categories of recipients:
The cookie-generated data is forwarded to a Google server in the USA and stored there. Google will under no circumstances associate your IP address with other data. Google may also pass this information on to third parties in so far as this is required by law or if third parties process the data on Google's behalf. 
Storage duration / criteria for specifying the storage duration:
Once the IP address has been anonymised, a conclusion as to your person is no longer possible. The statistically prepared data will be deleted periodically in Google Analytics. In reports generated on the basis of Google Analytics, there is no longer any reference to individuals.
14.3 Possibility to object / opt-out

You have the possibility to prevent interest-based personalised advertising in general with the aid of the so-called Preference Manager Preference Manager or by clearing cookies in your browser settings. 

15. Recipients outside the EU

With the exception of the processing described in Section 13 and 14, we will not forward your data to recipients established outside the European Union or the European Economic Area. The processing mentioned in Section 13 and 14 results in a data transfer to the servers of the providers of tracking or targeting technologies commissioned by us. Some of these servers are located in the USA (for details please refer to respective explanations regarding the specific recipients). The data is transferred according to the principles of the so-called Privacy Shield as well as on the basis of so-called Standard contract clauses of the European Commission.   

16. Your Rights
16.1 Overview
Besides the right to revoke the consent you have given us, you have the following further rights if the respective legal requirements are met: 
The right to request information about your personal data stored with us
The right to request rectification of incorrect data or completion of incomplete data 
The right to request deletion of your personal data stored with us 
The right to request restriction of processing of your data 
The right to request data portability 
The Right to object to the processing of your personal data
16.2 Right to be informed
You have the right to receive, upon request, information about the personal data stored with us about you, free of charge. This includes in particular:
the purposes for which the personal data are processed;
the categories of personal data that are processed;
the recipients or the categories of recipients to whom the personal data concerned have been disclosed or are still being disclosed;
the planned duration of storage of the personal data concerning you or, if specific details of this are not possible, criteria for the specification of the retention period;
the existence of a right of rectification or deletion of personal data concerning you or of a restriction on processing by the data controller or of a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
all available information about the origin of the data, if the personal data was not collected from the person concerned;
the existence of an automated decision-making process, including profiling. In these cases, at the least, receiving meaningful information about the logic involved as well as the scope and desired impact of such processing for the person concerned.
If personal data is transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safe guards in connection with the transfer.
16.3 Right to rectification

You have the right to seek the immediate rectification by us of inaccuracies in your personal data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data and add newly available supplementary information. 

16.4 Right to deletion
You have the right to request from us that personal data concerning yourself is immediately deleted, if one of the following grounds applies:
the personal data are no longer necessary for the purposes for which they have been collected or have been processed in any other way;
you revoke your consent, which supported the processing originally, and there is no other legal basis for processing;
You object to the processing where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
the personal data has been unlawfully processed;
the deletion of the personal data is necessary for the fulfilment of a legal obligation;
the personal data has been collected in relation to services offered by information society services as referred to in Article 8 paragraph 1 GDPR
Insofar as we have made the personal data public and are obliged to delete it, we will take appropriate measures taking into account the available technology and the costs of implementation, in order to inform the third parties who are processing your data that you also request from them that they delete all links to the personal data and copies or replications of the personal data.
16.5 Right to restriction of processing
You have the right to request from us a restriction of the processing, if one of the following requirements exist:
the correctness of the personal data is disputed by you;
the processing is illegal and you request a restriction of the use of the personal data rather than its deletion;
the data controller no longer requires the personal data for the purposes of the processing, but the person concerned requires them in order to enforce, exercise or defend legal claims or
you have raised an objection to the processing, so long as it is not certain whether the legitimate grounds of the data controller outweigh those of the person concerned.
16.6 Right to data portability
You have the right to receive the personal data that concern you, which you have provided to us, in a structured, common and machine-readable format, and you have the right to transfer these data to another data controller without hindrance by us, insofar as
the processing is based on consent or on a contract and
the processing takes place with the aid of automated procedures.
When exercising your right to data portability, you have the right to ensure that the personal data is transferred directly by us to another data controller, insofar as this is technically feasible.
16.7 Right to object

In particular instances, you may object to data processing for reasons arising from your particular situation.

The above general right of objection applies to all processing purposes described in these data protection regulations, which are processed on the basis of legitimate interests. Unlike the special right to object towards data processing for advertising purposes, we are only obliged by the GDPR to implement such a general objection, if you give us reasons of paramount importance for this, e.g. a possible risk to life or health. Furthermore, there is the possibility to contact the supervisory authority responsible for Lidl U.K. GmbH and Lidl Great Britain Limited

17. Point of contact
17.1 Point of contact in case of questions

In the case of questions on the website, other Lidl platforms and related to marketing information or to exercise your rights with regard to the processing of your data (data protection rights) you can contact customer services:

0800 977 7766 /  0370 444 1234

17.2 Point of contact in case of questions regarding data protection

If you have further questions regarding the processing of your data, you can contact the company data protection officer on Data.Protection@lidl.co.uk

17.3 Right to complain to the supervisory data protection authority

In addition, you have the right to complain at any time to the responsible supervisory data protection authority.  The supervisory authority for data protection in the United Kingdom is the Information Commissioners Office (ICO). Further advice and guidance can be found on their website at www.ico.org.uk or by contacting their helpline on +44  (0)303 123 1113.

18. Controller Details

Name and contact details of the controller:

Lidl U.K. GmbH and 
Lidl Great Britain Limited
19 Worple Road
SW19 4JS 

+44 (0)208 971 1100

LIDL U.K. GmbH (registered company number FC017929) and ICO reference number Z6682158
Lidl Great Britain Limited  (registered company number 02816429) and ICO reference number Z6682144