Quality for less.
Top Employer

Data Protection Policy

Data Protection Policy

We are very pleased by your interest regarding data protection on our website. We want you to feel satisfied and safe during your visit to our website and to consider the application of data protection a customer-oriented quality characteristic .

Through the following data protection notifications we will inform you how Lidl Cyprus processes personal data and the range of that processing. Personal data are information that is categorised or can be categorised directly or indirectly regarding your person. The main legislative framework governing data protection is the General Data Protection Regulation (GDPR). 

Content overview:

1. Overview
2. Entering our website
3. Online presence and website optimisation
4. Recipients outside the EU
5. Your rights as the data subject
6. Parties responsible for communication  
7 . Name and contact information of the party responsible for processing, as well as the contact information of the party responsible for data protection in the company.

 

1. Overview

Upon entering the career website of Lidl Cyprus, various items of data are exchanged between your terminal and our server. In this event, personal data may also be processed. Data collected in this manner will also be used to improve our website..  

 

2. Entering our website

Purpose of data processing / legal basis:
Upon entering our website your terminal’s web browser will automatically send, with no action on your part,

  • the IP address of the devices with internet access from which the request was submitted, 
  • the date and time of access,
  • the name and the URL of the file requested,
  • the website/ application from which access was carried out (referrer-URL),
  • the browser used and the operating system of the computer you are using with Internet access, as well as the access provider

to our website’s server; this information will temporarily be stored on a log file for the following reasons:

  • to guarantee a correct connection,
  • to guarantee comfortable use of our website/ application 
  • to evaluate the security and stability of our system. 

If you have consented to geolocation on your browser or your operating system or in other settings on your terminal, we will use this function to be able to provide you with tailored services regarding your current position (e.g. the location of our nearest store). We will process your location data that was received in this way exclusively for this function.
The legal basis for processing your IP address is Article 6(1)(f) of the General Data Protection Regulation (hereinafter: GDPR). Our legitimate interest arises from the data processing aims mentioned above.

Recipients/ categories of recipients:

As a rule, we do not transfer this data to third parties.

Duration of storage/ criteria for determining the duration of storage:

This data will be stored for a time period of <50 months> and will then be deleted automatically. As soon as you stop using our website your geolocation data are deleted.

 

3. Online presence and website optimisation

3.1 Cookies – General information

On our websites we use cookies, based on Article 6(1)(f) of the GDPR. Our interest in optimising our website must be considered legitimate, in the sense of the aforementioned provision. Cookies are small files which are stored on your terminal (laptop, tablet, smart phone, etc.) when you visit our website. Cookies do not harm your device, they do not contain viruses, trojans, or other harmful programmes. Cookies collect data which are produced separately in relation to the specific device used. This does not mean that we have direct knowledge of your identity due to them. The use of cookies aims, on the one hand, at offering you more comfortable use. For that reason we use so-called session cookies to recognise that you have already visited separate pages on our website. They are automatically deleted when you leave our website. Apart from that, we use temporary cookies in order to facilitate use, which are stored for a determined period of time on your device. If you visit our website again in order to use our services, we automatically recognise that you have already visited us in the past, what entries you made / settings you changed, so that you don’t have to execute the same actions again.  

On the other hand, we use cookies to statistically analyse the use of our website, aiming at optimising our offers, as well as promoting information that is tailored to you. The cookies in question allow us to automatically recognise that you have visited us before upon your next visit to our website. The cookies in question are automatically deleted after a predetermined period of time. Most browsers automatically accept cookies. However, you can adjust the settings on your browser in such a way that they do not save cookies on your computer or that a notification appears before every new cookie is saved. However, full deactivation of cookies may result in the inability to use certain functions of our website. 

You will find a summary of the cookies used with additional information (e.g. how long they will be saved for) and the possibility to objection to the Cookie Terms.

 

3.2 Google Analytics 

Purpose of data processing / legal bases:
In order to constantly optimise and adjust our websites in accordance with your needs, we use Google Analytics, an online analysis service of Google Inc. (‘Google') based on Article 6, paragraph 1, item f) of the GDPR. Our legitimate interest originates from the aforementioned aims. In this context, 'pseudonymised' use profiles are created and cookies are used. Cookies record the following data regarding the use of this website:

  • type/ edition of browser
  • operating system used
  • Referrer-URL (the previous website you visited),
  • Host name of access computer (IP address), 
  • time of server request.

The information is used to evaluate the use of our websites, to compile reports regarding website activity and to provide additional services connected to website and internet use for purposes of market research and to adjust the websites in question depending on the needs. IP addresses are made anonymous, so that it is impossible to match them (so-called IP masking). 

You can obstruct cookie installation through the corresponding setting on your browser programme. However, we should point out that in such a case you may not be able to use all the functions of that website. You can also obstruct data analysis created by cookies concerning the use of this website (including the IP address) as well as the processing of the data in question by Google, if you load and install this browser extension. Instead of this browser extension you can also stop analysis by Google Analytics, especially on mobile device browsers, if you click on this link. An opt-out cookie is created which blocks future analysis of your data during your visit to this website. The opt-out cookie is only in effect in this browser and only for our website and is only stored on your device. If you delete the cookies from this browser you must save the opt-out cookie again. More information regarding data protection in relation to Google Analytics can be found at the Google Analytics website

Recipients/ categories of recipients:

Data created by cookies are transmitted to a Google server in the USA and are stored there. In no case is your IP address merged with other Google data. Also, the data in question may be transferred to third parties if it is foreseen by law or if the third parties have been authorised to process this data. 

Duration of storage/ criteria for determining the duration of storage:

After the masking of the IP address it is no longer possible for it to be connected to your person. The data created for statistical reasons are deleted by Google Analytics after 50 months. The reports compiled based on Google Analytics no longer refer to individuals.

 

4. Recipients outside the EU

We do not transfer your data to recipients based outside the European Union or the European Economic Area. Some of the servers are located in the USA  (relevant information is available in the individual reports regarding the specific recipients). Transfer of data is carried out in accordance with the principles of the so-called Privacy Shield as well as based on the so-called Standard contractual clauses of the European Commission.   

 

5. Your rights as the data subject

5.1 Overview

Apart from the right to withdraw the consent you provided to us, you also have the following rights, as long as the legal requirements are in place in each case: 

  • the right to access regarding your own personal data that we store in accordance with Article 15 of the GDPR,
  • the right to correct incorrect or supplement incorrect data in accordance with Article 16 of the GDPR,
  • the right to delete your data which we have stored in accordance with Article 17 of the GDPR,
  • the right to limit the processing of your data in accordance with Article 18 of the GDPR,
  • the right to data portability in accordance with Article 20 of the GDPR,
  • the right to object in accordance with Article 21 of the GDPR.

5.2 The right to access in accordance with Article 15 of the GDPR

You have the right to be informed following a request at no cost, in accordance with Article 15, paragraph 1 of the GDPR, regarding the personal data we have stored regarding your person. Specifically, this includes:

  • the aims of the personal data processing,
  • the relevant categories of personal data that we process,
  • the recipients or the categories of recipients with whom your personal data are being shared or will be shared,
  • if possible, the time period for which your personal data will be stored or, if this is not possible, the criteria that determine the period in question,
  • the existence of the right to request from the party responsible for the processing to correct or delete personal data or limit the processing of personal data that concern the data subject or the right to object to the specific processing,
  • the right to file a complaint with a regulating authority,
  • when the personal data are not collected from the data subject, all available information regarding their origin,
  • the existence of automated decision making, including profiling, referred to in Article 22(1) and (4) of the GDPR, and, at least in these cases, significant information regarding the reasoning followed, as well as the importance and the envisaged consequences of the specific processing for the data subject.

When personal data are transferred to a third country or an international organisation, the data subject has the right to be informed regarding the appropriate guarantees, in accordance with Article 46 of the GDPR regarding transfers.

 

5.3 The right to rectification under Article 16 of the GDPR

You have the right to demand from us without unjustifiable delay to rectify inaccurate personal data concerning you. Keeping in mind the aims of the processing, you have the right to demand that incomplete personal data, including a supplementary statement.

 

5.4 The right to erasure ('right to be forgotten') under Article 17 of the GDPR

You have the right to ask us to delete personal data without undue delay, if one of the following reasons is in effect:

  • the personal data are no longer necessary in relation to the aims for which they were  collected or submitted in a different way for processing,
  • you withdraw your consent on which processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing,
  • you object to the processing in accordance with Article 21(1) or (2) of the GDPR and there are no urgent and legal reasons for the processing in accordance with Article 21(2) of the GDPR,
  • the personal data have been submitted for processing illegally,
  • the personal data must be deleted in order to meet a legal obligation
  • the personal data have been collected in relation to the contribution of the services of the information society mentioned in Article 8(1) of the GDPR.

When we have published personal data and we are obligated to delete it, taking into account the technology available and the application cost, we will take reasonable measures to inform the third parties that are processing your personal data that you have demanded and requested from them the deletion of any links with that data or copies or reproductions of said personal data.

 

5.5 The right to restriction of processing in accordance with Article 18 of the GDPR

You have the right to request from us the restriction of processing when one of the following requirements is met:

  • you question the accuracy of the personal data,
  • the processing is illegal and you are asking for a restriction of the use of the personal data rather than its deletion,
  • the party in charge of processing no longer requires the personal data for processing reasons, but the data are required by the data subject for the foundation, application and support of legal claims,
  • or if you have objections to the processing in accordance with Article 21(1) of the GDPR, pending verification of the degree to which the lawful reasons of the party in charge of processing overrule the reasons of the data subject.

5.6 The right to data portability in accordance with Article 20 of the GDPR

You have the right to receive personal data pertaining to you and which you have provided to us in a structured, commonly used and machine-readable format, as well as the right to transfer the data in question to another party responsible for processing without dispute on our part, when:

  • the processing is based on consent in accordance with Article 6(1)(a) or Article 9(2)(a) or in a contract in accordance with Article 6(1)(b) of the GDPR and
  • the processing is carried out by automated means.

During your exercise of the right to data portability you have the right to ask that your personal data be transferred directly by us to another party responsible for processing, if that is technically possible.

 

5.7 The right to object in accordance with Article 21 of the GDPR

Under the conditions of Article 21(1) of the GDPR you can object to the data processing for other reasons that arise from the particularity of the situation. 

The aforementioned general right to object is valid for all the aims of data processing described in the data protection terms herein, which are being processed by virtue of Article 6(1)(f) of the GDPR. In contrast to the special right to object that concerns data processing for advertisement reasons (see above, especially sections 9 and 11.6), we are obliged, in accordance with the GDPR, to apply the general right to object only if you mention the reasons of higher importance, e.g. a potential danger to life or health. Apart from that, there is the possibility to contact the relevant regulatory authority regarding Lidl Cyprus or the head of data protection of Lidl Cyprus. 

 

6. Parties responsible for communication  

6.1 The parties responsible for communication regarding questions or exercising your rights concerning data protection

For questions regarding the websites or exercising your rights during the processing of your data (data protection rights) you can contact our customer service department:

https://www.lidl.com.cy/el/epikoinonia.htm

6.2 Party responsible for communication regarding data protection questions

If you have other questions regarding the processing of your data, you can addressthe party responsible for data protection for data being processed at the company.

6.3 Right to file a complaint with the regulatory authority for data protection

Furthermore, you have the right to file a complaint with the regulatory authority for data protection at any time. You can contact the regulatory authority for data protection, especially in the member-state in which you reside or at your place of work or in the place where the supposed violation has taken place or the authority of the state in which the party responsible for processing is based.

 

7. Name and contact information of the party responsible for processing, as well as the contact information of the party responsible for data protection in the company. 

These data protection terms are in effect for data processed via LIDL Cyprus, Industrial Area, Emporiou Street 19, CY- 7100, Aradippou - Larnaca (‘Party responsible for processing’) and for the website kariera.lidl.com.cy. You can contact the party responsible for data protection for Lidl Cyprus at the above address, attention of  the party responsible for data protection, or at dataprotection@lidl.com.cy (For job issues, please do not use this email. Relevant emails / resumes sent to this address, are not stored and automatically deleted)