Data protection is important to us
Who are the data controller and the data processor?
Visiting this site may result into the processing of data concerning identified or identifiable persons. The data controller is Lidl Malta Ltd. with registered office in Triq il-Karmnu, Luqa LQA 1311, Malta, which can be contacted at firstname.lastname@example.org. Lidl Stiftung & Co.KG has been appointed as data processor in order to manage the technical part of the website and to carry out maintenance activities and may employ specifically appointed persons who might be external. Lidl Italia S.r.l. has also been appointed as data processor in order to process the services and the support requested via our web site. The complete list of data processors is available by sending a written request to the email address email@example.com.
What personal data do we collect from you?
Lidl processes personal data provided voluntarily by the user. In different parts of this website you will have the option to submit personal data (e.g. e-mail address, name, postcode, any additional data in a request). The submission of such data occurs on the basis of a freely chosen, explicit and voluntary option and entails acquisition of the sender’s address, which is necessary to reply to any request, as well as the acquisition of such additional personal data included.
What do we do with your personal data?
We use your personal data only for the purposes for which the data were collected. In particular, personal data provided voluntarily are processed:
a) to be able to provide the service you have requested and specifically (i) process your requests for information and assistance. as well as (ii) for handling complaints and (iii) to send you our newsletter if you are subscribed. In this regard, your e-mail address will be used to send you several times a week an e-mail newsletter with information about the products, campaigns, games and the latest news from our offer;
b) to comply with any legal and regulatory obligation;
c) to exercise and defend our rights, including by means of third parties;
(the purposes referred to in letters a), b) and c) are defined together as the "Contractual Purposes");
d) carry out activities functional to the sale of company and business unit, acquisition, mergers, demergers or other transformations and for the execution of such operations;
(the purposes referred to in points d) are defined as "Legitimate Interest Purposes").
What is the legal basis for processing your personal data?
The processing of your personal data for Contractual Purposes is mandatory as necessary for the purpose of using the services you have expressly requested, including the periodic sending of the newsletter. In the event that you do not want your personal data to be processed for Contractual Purposes, you will not be able to use the Services referred to in this site.
The processing of your personal data for the purposes of legitimate interest is carried out pursuant to Article 9, letter f) of the Data Protection Act and for the pursuit of the legitimate interest of Lidl and its counterparties in carrying out the economic operations indicated therein pursuant to article 6, letter f) of the European Regulation no. 679/2016 on the protection of personal data ("GDPR”), applicable from 25 May 2018, adequately balanced with your interests as the processing takes place within the limits strictly necessary for the execution of these operations.
How is your personal data processed?
Your personal data is processed with automated (occasionally manual) means by persons who have been specifically appointed by Lidl Malta and, if necessary, also by data processors, even external, appointed by Lidl Malta itself. Adequate security measures are implemented to prevent the data from being lost, unlawfully and/or inappropriately used, or accessed without authorisation.
What is the scope of communication and disclosure of your personal data?
The updated list of companies to which your personal data will be communicated can be requested at any time to Lidl. The data will not be subject to disclosure.
Will your data be transferred abroad?
Your personal data may be freely transferred outside the national territory to countries located in the European Union. Should your personal data be transferred to countries outside the EU this shall occur exclusively in compliance with the appropriate and adequate guarantees for the purpose of the extended transfer in accordance with the applicable legislation and in particular article 27 of the Data Protection Act and articles 45 and 46 of the GDPR.
Which rights do you have?
You may, at any time and for free, (i) obtain confirmation of the existence or otherwise of your personal data (ii) to know its content and origin, the purposes and the manner of processing, as well as the logic applied to processing carried out by electronic means (iii) verify the accuracy of your data or request its integration or update, or correction; (iv) request cancellation of your data, transformation into anonymous form or blocking of data processed in violation of the law, and to oppose in any case, for legitimate reasons, to their processing. To exercise these rights, please contact us in writing or by e-mail at the address of our Data Protection Officer indicated below. You can also request that our newsletters are no longer sent to you by using the link to the cancellation site or by clicking on the appropriate link in each newsletter.
In addition to the rights listed above, you will be entitled, with effect from 25 May 2018, to exercise the rights referred to in the following paragraph.
Provisions applicable from 25 May 2018
The following provisions will become effective as of 25 May 2018, when the GDPR will become enforceable.
a) Data Protection Officer: the appointed Data Protection Officer pursuant to article 37 of the GDPR can be contacted at the address of Lidl Italia S.r.l., via Augusto Ruffo 36, 27040 Arcole (VR) - Italy, email address: firstname.lastname@example.org
b) Data retention period: Lidl will process your personal data for the period necessary to satisfy the purposes for which they were collected. In any case, the following retention periods apply to the processing of personal data for the following purposes:
i. the data collected for Contractual Purposes are kept for the entire duration of the period during which the requested service is provided to you and for 10 years following the expiration of this period for defence purposes and / or to exercise a Lidl’s rights in court and/or out of court in case of disputes with you. It is understood that, with reference to the sending of newsletters, if you no longer intend to use the service you may request that you no longer receive such communications by using the link though the cancellation page on our website or by clicking on the link present in each newsletter;
ii. the data collected for Legitimate Interest Purposes are kept for a period of 10 years from the time of collection.
Once the above terms have expired, your personal data may be deleted, anonymised and / or aggregated.
b) Additional rights: You can at any time
i. request the restriction of the processing of your personal data where one of the following applies:
- you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose to the erasure of the personal data and requests the restriction of their use instead;
- although Lidl no longer needs the personal data for the purpose of the processing, your personal data are necessary for the establishment, exercise or defence of legal claims;
- You have objected to processing pursuant to article 21, paragraph 1 of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
ii. oppose at any time to the processing of your personal data:
iii. request cancellation of personal data concerning you without undue delay;
iv. obtain the portability of personal data concerning you;
v. lodge complaints with the appropriate Data Protection Supervisory Authority.
Any further questions?
For any other questions regarding the collection, processing and use of your personal data, please contact our Data Protection Department. Contacts: Lidl Malta Ltd., Triq il Karmnu, Luqa LQA 1311, e-mail address: email@example.com