Data protection information clause

Pursuant to Article 14 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), we inform you that:

 

1.Data Controller

Lidl Stiftung & Co. KG, Stiftsbergstr. 1, 74167 Neckarsulm, Germany, (hereinafter “LIDL”).

 

2. Purpose and legal basis of personal data processing

 

The purpose of processing your personal data is to enable the granting of a coupon for [Lidl Plus £20 Coupon] via LIDL PLUS the loyalty App of LIDL (hereinafter “LIDL PLUS”). For this purpose, we will match your e-mail addresses received from [Inspop.com Limited. Greyfriars House, Greyfriars Road, Cardiff, South Wales, CR10 3AL, trading as Confused.com (hereinafter “Confused.com”)] with the information included in our data base. In case that your e-mail address cannot be matched we will forward it back to [Confused.com], so that the latter can notify you about that fact and grant you a possibility to rectify your invalid e-mail address.

In case your e-mail address was matched, LIDL transfers it together with the date of redemption of the assigned coupons in LIDL PLUS back to [Confused.com] for internal invoicing and analysis purposes carried out by [Confused.com]. 

The legal basis for processing your personal data is based on the performance of a contract (Article 6 (1) (b) GDPR).

 

3. Categories of Personal Data concerned

For the purposes indicated above, LIDL processes your e-mail address as well as the date of the redemption of the assigned coupon in LIDL PLUS.

 

4. Source from which the personal data originate

Your personal data was received by LIDL PLUS from [Confused.com].

 

5. Envisaged period for which the personal data will be stored

If your e-mail address is not included in LIDL PLUS data base and cannot be assigned to an existing user, it will be deleted within 24 hours.  If we see that your telephone number does exist in our database, the time frame for the deletion and retention periods will be according to LIDL PLUS privacy policy: [https://www.lidl.co.uk/lidl-plus/privacy-legal/data-use].

 

6. Recipients or categories of recipient

[Confused.com] receives for the above purposes, the data listed in the paragraphs indicated above.

Additionally, your personal data will be processed and may be disclosed to entities authorized by law. Additionally, recipients of your personal data may be entities with whom the Administrator has entered into agreements on entrusting the processing of personal data, e.g. providing IT services.

 

7. Right of access by the data subject

You have the right to access personal data concerning you (Article 15 paragraph 1 GDPR) and to data portability regarding your data. In addition, if there are legal prerequisites, you have the right to rectification (Article 16 GDPR), restriction of processing (Article 18 GDPR) of personal data, the right to erasure (Article 17(3)(b) and (e) GDPR) and opposition. In case you granted us your consent, you have the right to withdraw it consent at any time. Withdrawal of consent does not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. You also have the right to lodge a complaint to the supervisory authority. The Supervisory Authority is the German entity: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, with address at Lautenschlagerstraße 20, 70173 Stuttgart (Germany) and mail address: poststelle@lfdi.bwl.de.

 

8. Existence of automated decision-making

Please be informed that your data is not subject to profiling and automated decision-making does not take place in connection with its processing.

 

9. Contact to the Data Protection Officer

If you have any questions regarding data protection, you may contact the Data Protection Officer of LIDL by writing to [customerservice@lidlplus.co.uk].