Our Privacy Promise
We operate in line with all requirements as defined within the General Data Protection Regulation (GDPR). As such we act as a responsible controller of personal data and process information in line with this notice and other privacy notices relating to our customers and employees.
Lidl U.K. GmbH and
Lidl Great Britain Limited
19 Worple Road
+44 (0)208 971 1100
Personal Data Held
As a business who holds personal data relating to your company, we are legally obliged to inform you of what data we hold about you and how we will/will not use it.
Information About Your Company:
We hold your Company Information as provided by you within our order and accounting systems. This information includes:
- Company Name
- Company Address (including all site locations)
- Company Contact’s Details (Buyers/Sales/Accounts/Management etc.)
- Full name
- E-mail address
- Various telephone numbers and fax numbers as supplied by you
- Various e-mail addresses as supplied by you
- VAT Number
- Bank Account Details
- Production locations
- Certification body information
We also hold your e-mail addresses within our email system Lotus Notes. This is hosted in Germany and the United Kingdom and shared within Lidl group companies.
Information about your company is backed up and may be stored off-site for security and loss prevention purposes. During the transfer of data within our mail system, the data is Encrypted. The information stored in the Data Centre can only be used for restore purposes by our company. As such, we are the only party who can access this. We do not transfer any of your personal data outside the European Economic Area without your written permission.
Why we hold and process this data
We use data relating to your business to facilitate trading with you and your company and for general correspondence with your staff on a regular basis. Lidl will never pass on or sell this information without your permission unless it is a statutory legal function that we are required to fulfil.
Retention periods of the data we hold
The company data we hold is kept for the duration of the active contract and twelve years thereafter for financial record keeping purposes in-line with German statutory regulations. Individuals personal data directly associated with such business records are kept for the same period due to the nature of the business relationship.
Your rights associated to the processing of the data we hold
Where there is personal data held of individuals received as part of contracting with you, those individuals have the right to:
• Request access to their personal information (commonly known as a "data subject access request").
• Request correction of their personal information that we hold.
• Object to the processing of their personal information where we are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground.
Should you have any queries around the handling of your personal data you are welcome to contact your day-to-day business partner within the respective Lidl department.
Alternatively, for any specific personal data queries, please see the contact details of our Data Protection Officer below:
The supervisory authority for data protection in the United Kingdom is the Information Commissioners Office (ICO). Further advice and guidance can be found on their website at www.ico.org.uk or by contacting their helpline on +44 (0)303 123 1113.