Data protection at Lidl

Data protection information for our expansion countries’ career opportunities website, the career event website, the registration mask for each candidate pool and for an application

Thank you for your interest in data protection at Lidl. We want to offer you a safe and secure experience when visiting our online portals and applying for career opportunities in Lidl’s expansion countries (website and registration mask for the candidate pool). Protecting your personal data is just one way of offering quality customer service.

1. On the expansion countries‘ career opportunities and career event websites

The following data protection notices inform you about in what way and to what extent your personal data is processed when you visit our website.

Please note: The expansion countries’ career opportunities website is only accessible to internal Lidl employees. The website for career events in expansion countries is only accessible to external candidates who are not Lidl employees.

Personal data is information that can be directly or indirectly traced back to your person. The General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) serve as the legal basis for data protection.

1.1 Overview

When you access our website, various information is exchanged between the device you are using and our server, to include personal data. The information collected is used, among other things, to optimize our website.

1.2  Accessing our website

Purposes of data processing/ legal bases:

When you visit our website, your device's browser will automatically and without any action on your part send the following data to our website’s server:

• the IP address of the requesting internet-enabled device,
• the date and time of access, 

• the name and URL of the retrieved file, 

• the website/ application from which the access was made (referrer URL),
• the browser you are using and, if applicable, the operating system of your internet-enabled computer and
• the name of your access provider

This data is temporarily saved in a so-called log file for the following purposes:

• to ensure a smooth connection,
• to ensure seamless use of our website/ application,
• to evaluate system security and stability

The legal basis for processing the IP address is Article 6 (1) (f) GDPR. Our legitimate interest lies in the purposes of data processing listed above.

Retention period/ criteria for determining the retention period:

The data is stored for a period of seven days and then automatically deleted

1.3 Use of cookies and similar techniques to process usage data

Purposes of data processing/ legal bases:

We, Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm, use so-called cookies on our websites.

Your consent includes the use of cookies and other technologies to process usage data on all (sub) domains at careers.lidl.

In addition to us, the joint controllers within the meaning of Article 26 GDPR responsible for data processing in connection with marketing cookies (see cookies under the "Marketing" category in our cookie notices) is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (LinkedIn). As part of our cooperation with our partners on our website, we use their special technologies with your consent to record your browsing behavior so that we can tailor the ads of our customers to you on our website or platform. In connection with this, our partners may also compare the data collected on our website with the data in their own databases.

When exercising your rights as a data subject described below with regard to the data processing described in this paragraph, you can also contact either us or our aforementioned partner.

You can also find further information on the data processing and on exercising your rights as a data subject in the privacy policies of our respective partners:

LinkedIn: https://www.linkedin.com/legal/privacy-policy.

Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware. Information relating to the specific device used is stored in the cookie. However, this does not mean that we gain immediate knowledge of your identity.

The use of cookies and other technologies for processing usage data serves the following purposes, depending on the category of the cookie or other technology:

• Technically necessary: These are cookies and similar methods without which you cannot use our services (for example, to display our website correctly/ functions you want to use).
• Ease of use: With the help of this technology, we can take into account your actual or presumed preferences for easy use of our website. For example, your settings allow us to display our website in a language that works best for you.
• Statistics: allow us to compile pseudonymized statistics on the use of our services. This allows us to determine, for example, how we can adapt our website even better to suit the needs of the website users.
• Marketing: This allows us to display advertising content that suits you based on the analysis of your usage behavior. Your usage behavior can also be tracked via different websites, browsers or devices using a user ID (unique identifier).

Here you can find an information overview of the cookies and other technologies used along with the respective processing purposes, retention periods and any third-party providers involved.

When using cookies and similar techniques for processing usage data, the following types of personal data are processed in particular depending on the purpose:

Technically necessary:

• Consent to cookie preferences.

Ease of use:

• Settings that serve to optimize the output of the cards.
• Output of recently viewed jobs.
• Output of saved jobs.

Statistics:

• Pseudonymized user profiles with information about the use of our website. These include in particular:
  • Browser type/ version,
  • Operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,
  • individual user ID and
  • Events triggered on the website (surfing behavior)
• The IP address is regularly anonymized so that it cannot be traced back to you.
• No conclusions can be drawn about your person from the user ID itself.

Marketing

• Pseudonymized user profiles with information about the use of our website. These include in particular:
  • IP address,
  • individual user ID;
  • potential product interests,
  • events triggered on the website (surfing behavior). 
• The IP addresses are regularly anonymized, so that no conclusions can be drawn about your person.
• No conclusions can be drawn about your person from the user ID itself. We may share the user ID and the associated usage profiles with third parties via the providers of advertising networks.

The legal basis for using ease of use, statistics and marketing cookies is your consent in accordance with Article 6 (1) (a) GDPR. The legal basis for the use of technically necessary cookies is Article 6 (1) (f) GDPR, i.e. we process your data on the basis of our legitimate interest in being able to present the website with its statements in a fully functional manner.

You can withdraw/ adjust your consent at any time with effect for the future. Just click here and make your selection. By removing the corresponding checkmark, you simply and easily withdraw your consent for the respective processing purposes.

Recipients/ categories of recipients:

When processing data by means of cookies and similar techniques for processing usage data, we may use specialized service providers, in particular from the area of online marketing. These process your data on our behalf as contract processors, are carefully selected and contractually bound in accordance with Article 28 GDPR. All companies listed as providers in our Cookies Policy act as processors who provide data processing for us.

As part of our cooperation with Google LLC, the above-mentioned data is usually also processed on servers in the US for statistical and marketing purposes.

Retention period/ criteria for determining the retention period:

The retention period for cookies can be found in our Cookie Policy . If the information “persistent” is indicated in the “Expiration” column, the cookie is stored permanently until the corresponding consent is withdrawn. The retention period of the session storage is limited to the respective session and ends when the browser is closed.

1.4 Email contact/ phone calls

Purposes of data processing/ legal bases:

Personal data that you provide to us by e-mail or telephone will of course be treated confidentially. We use your data exclusively for the purpose of processing your request. The legal basis for data processing is Article 6 (1) (f) or Article 6 (1) (b) GDPR. Our and your concurrent (legitimate) interest in data processing arises from the goal of answering your request, solving any existing problems and thus maintaining and promoting your satisfaction as a user of our website.

Recipients/categories of recipients

We generally do not forward data to third parties. As an exception, data is processed on our behalf by data processing providers. These are carefully selected, are also audited by us and contractually bound in accordance with Article 28 GDPR.

Retention period/criteria for determining the retention period:

All personal data that you send us by e-mail or telephone in the event of inquiries (suggestions, praise or criticism) will be deleted or anonymized by us at the latest 3 months after the final response. Experience has shown that after 3 months there are usually no more inquiries regarding our answers. When asserting your rights as a data subject (see below), your personal data will be stored for 3 years after the final response to prove that we have provided you with comprehensive information and that the legal requirements are complied with.

1.5 Transmission to recipients in a third country

If we transfer data to recipients in a third country (headquartered outside the European Economic Area), you can read about this in the information on the recipients/ categories of recipients in the description of the respective data processing. The European Commission certifies that some third countries have a data protection standard that is comparable to the level of data protection in the European Economic Area. A list of these countries can be found at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. If there is no comparable data protection standard in a third country, we ensure that data protection is sufficiently guaranteed by other measures via, for example, binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates, or recognized codes of conduct. Please contact our data protection officer (section 1.7), should you like to receive more information.

1.6 Embedded content (YouTube Videos, Map services or Social Plugins)

If we use so-called "social plug-ins" of social networks or embedded content like Youtube Videos or map services on our websites, we integrate them as follows:

1.6.1. YouTube videos

If we have integrated YouTube videos into our online content, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", meaning that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data be transferred. We have no influence on this data transfer.

Further information on the purpose and scope of data processing by YouTube, which also takes place on servers in the US, can be found in the privacy statements of the provider. There you will also find further information about your rights in this regard and setting options to protect your privacy. YouTube address and privacy policy: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.de/intl/de/policies/privacy/.

1.6.2. map services

If we embed map services on our websites, the following applies: The map services on our websites are not stored on our servers. To ensure that access to our websites with embedded map services does not automatically lead to the third-party provider's content being loaded, we only display locally stored preview images of the maps in a first step. No information is transmitted to the third-party provider.

The content of the third-party provider is only loaded after clicking on the preview image. As a result, the third-party provider receives the information that you have accessed our site and the technically necessary usage data in this context. We have no influence on further data processing by the third-party provider. By clicking on the preview image, you give us your consent to load content from the third-party provider.

1.6.3. Social Plugins

When you visit our websites, the social plug-ins are deactivated, i.e. no transfer of your data to the operators of these networks takes place. 

Only when you decide to activate the respective social plugin and click on the corresponding preview image or symbol of the social network, does your browser establish a connection to the servers of the operator of the respective social media service in a second step.

If you have a user account with the network and are logged in there at the time the social plug-in is activated, the network can assign your visit to our website to your user account. If you want to avoid this, please log out of the network before activating the social plug-in. A social network cannot assign your visit to other Lidl websites until you have also activated a social plug-in available there.

When you activate a social plug-in, the network transmits the content it makes available directly to your browser, which integrates you into our websites. In this situation, data transfers may also take place that are initiated and controlled by the respective social network. Your connection to a social network, the data transfers that take place between the network and your system and your interactions on this platform are governed exclusively by the data protection provisions of the respective network.

The social plug-in remains active until you deactivate it or delete your cookies.

1.6.3. Legal basis and purpose

Data processing is based on your consent Art. 6 (1) (a) GDPR, provided that you have given your consent by clicking on the preview image.

Withdrawal of consent: If you have clicked on a preview image, the content of the third-party provider will be loaded immediately. If you do not want such reloading on other pages, please do not click on the preview images.

1.6.4. Third Countries

If you click on the link to an offer or activate a social plug-in, personal data may be transferred to providers in countries outside the European Economic Area which, from the perspective of the European Union ("EU"), do not guarantee an "adequate level of protection" for the processing of personal data in accordance with EU standards. Please bear this in mind before clicking on a link or activating a social plug-in and thereby triggering a transfer of your data.

If the data is processed in this context outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the following table.

Provider: Google (Youtube)/Bing

adequate level of data protection: For transfers to the USA, an adequate level of data protection is guaranteed due to the provider's certification under the adequacy decision (EU-U.S. Data Privacy Framework).

1.7 Name and contact details of the person responsible for processing as well as contact details of the company data protection officer

These data protection regulations apply to the data processing by Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm “responsible person”) and to the website careers.lidl. The data protection officer of Lidl Stiftung can be reached at the above address for the attention of the data protection officer or at datenschutz@lidl.com.

Further information and additional contact persons regarding your rights as a data subject can be found in section 4.9 of this data protection information.

2. Candidate pool 

2.1 On the registration mask for our internal candidate pool for expansion countries (creation of a candidate 
The following applies exclusively to internal Lidl employees:

If you would like to explore a new career horizon in one of Lidl’s expansion countries, you have the opportunity to register in the corresponding candidate pool for new opening countries. This will allow us to consider you for new positions there.

In the following sections we will inform you about which data we process when you register in the candidate pool

By registering in the pool you can express your interest in an employment in a specific expansion country. Registration takes place by using the registration mask (data capture form). Your candidate profile is automatically created for you. This includes the following data:

• the data that you make available to us during the registration;
• this includes at least your e-mail address, password, first name, last name, country of residence; phone number
• it can also include any data you choose to disclose to us in your uploaded documents (such as CV, references, or cover letter) and any other data you add to your candidate profile or application.

If your candidate profile matches a search job in one of the expansion countries, you may be invited by a responsible recruiter to apply by e-mail (see then 3. When you apply). In this context, we would like to give you the opportunity to conveniently apply internationally to all Lidl companies from one portal and present them with your profile in one simple step. This is why your candidate profile is automatically visible worldwide by default when you register for a candidate pool via data capture form. This means that all responsible employees have access to your candidate profile including your documents.

You can change this setting in your profile and will receive further information in an email following your registration. Find more information on visibility settings in section 2.3.

2.2 On the registration mask for our candidate pool for external candidates  (creation of a candidate profile)
The following applies exclusively to interested external candidates:

Interested candidates have the opportunity to take part in career events in certain Lidl expansion countries. If you would like to take part in a career event in a specific new opening country, you can register in the corresponding candidate pool. This registration takes place via the registration mask (data capture form) for the candidate pool. Registration via the data capture form represents an application for the career event.

In this way, we would like to give you the opportunity to be considered for future positions in the Lidl expansion countries as well as defined existing countries regardless of your participation in the event. A candidate profile is therefore automatically created at the same time and you become part of the candidate pool.

We process the following data from you: 

• the data that you make available to us during the career event application;
• this includes at least your e-mail address, password, first name, last name, Gender, country of residence, phone number; further optional data: Citizienship, Course of Study, Degree, earliest availability, language skills, your preferred Lidl countries, interested fields.
• it can also include any data you choose to disclose to us in your uploaded documents (such as CV, references, or cover letter) and any other data you add to your candidate profile or application.

If you are selected for the event, we will contact you. With regard to the further processing of your data after participation in the event, the information under section 2. applies accordingly.

2.3 Purposes and legal basis - Why do we process your personal data?
When registering for a candidate pool, the data you provide to us through your candidate profile is processed based on your consent pursuant to Article 6 (1) lit. a GDPR.

The visibility option "Visibility to all recruiters worldwide" is automatically set when you register via a data capture form, as in all cases where we use data capture forms, we want to give you the opportunity to be matched with any job worldwide that matches your qualifications. Our recruiters will invite you to apply and so the decision whether to take up this opportunity is yours.

By registering in one of our candidate pools, you agree that your profile will be visible to all recruiters and, if applicable, managers of all Lidl country organizations and regional distribution centers as well as Lidl Stiftung & Co. KG in all Lidl countries. 

Note: If data is transmitted to a Lidl company that is headquartered in non-EU/ non-EEA countries ("third countries"), the data protection level in this third country may be lower compared to that in the EU/ EEA, which may mean that the rights of data subjects may not be enforced at all or not in the same way. If we transfer personal data to data recipients outside the EU/ EEA, the transfer will only take place if an adequate level of data protection in the third country has been confirmed by the EU Commission, an appropriate level of data protection has been agreed with the data recipient (e.g. by means of EU standard contractual clauses) or you have given us your express consent.

Withdrawal of consent

Your consent is freely. You can revoke your consent for participation in the respective candidate pool at any time with effect for the future. Please send your withdrawal to recruiting.international@lidl.com or change your settings directly in your profile or delete your profile. The recruiters in charge of the candidate pool no longer have permission to see your profile and are therefore not able to contact you or consider you for other suitable positions. The recruiters in charge of the candidate pool are no longer allowed to consider your application for the career event. The legality of the processing that has already taken place up until the receipt of your withdrawal is not affected by this. In your profile, you can adjust the setting at any time in "Data protection and search options".

2.4 Data retention - How long do we store your personal data?
You can delete your candidate profile and the saved attachments at any time in the profile settings. You are the owner of your data.

In the event of inactivity, your account will be deleted 12 months after the last login. 

If you initiate the deletion yourself, the deletion will take place within 24 hours, provided that this does not conflict with retention requirements or our legitimate interests.

If the terms of use are changed, please note that you will be prompted to accept the changed license agreement the next time you log in. If this consent is not given within 28 days, your profile and your data will be deleted and no longer processed. If you reject, your data will be deleted within 24 hours and no longer processed, unless this is contrary to retention requirements or legitimate interests on our end.

2.5 Are you obliged to provide the data?
There is no legal or contractual obligation on your part to provide us with personal data. Without the data, we cannot contact you or carry out a registration process.

2.6 Contact person for questions about the registration mask
If you have any questions about the registration mask for the candidate pool or to exercise your rights in the processing of your data (data subject rights), please reach out to:

Lidl Stiftung & Co. KG

Talent Acquisition International

Stiftsbergstraße 1

74172 Neckarsulm

Germany

You can contact us in writing at the above mentioned address or by e-mail at recruiting.international@lidl.com.

Information and contact persons regarding your rights as a data subject can be found in section 4.9 of this data protection information.

If you have additional questions about the processing of your data, you can contact the company data protection officer of Lidl Stiftung & Co. KG. The data protection officer of Lidl Stiftung & Co. KG can be reached at the specified address for the attention of the data protection officer or at datenschutz@lidl.com.

Irrespective of the above, you can also contact any of the Lidl companies listed in section 3.3 to exercise your rights.

2.7 Name and contact details of the person responsible for your profile data in the context of the registration mask as well as the company data protection officer
All Lidl companies using our candidate pools are jointly responsible for the processing of your data within the framework of the recruiting portal/ candidate profile. A list of all participating companies including links to their webpages with contact details can be found in section 2.8. 

Lidl Stiftung & Co. KG, together with the Lidl partner country and the expansion country, are responsible for the data processing of the candidate selection at the career event in an expansion country. Otherwise, the information on the candidate pool applies.

Additional information and contact persons regarding your rights as a data subject can be found in section 4.9 of this data protection information.

Joint controllership means that all participating companies have jointly determined the purposes and means of data processing. The companies involved are part of a group of companies, which means that candidate profiles can be relevant not only for one company, but for all of them. Therefore, all participating companies have access to profiles. The companies enter into an agreement to determine responsibilities and rights under the GDPR. Primarily, the Lidl Stiftung & Co. KG named under section 2.5 serves as a contact point for information obligations and for exercising data subject rights. Please contact them if you would like more information about the joint controllership.

2.8 List of participating companies

2.8.1 Internal candidate pool for expansion countries

• Lidl Stiftung & Co. KG (recruiting.international@lidl.com)
• LIDL BH d.o.o. (posao@lidl.ba)
• LIDL North Macedonia DOOEL Skopje (jobs@lidl.mk)
• Lidl Discount SRL (recrutare@lidl.ro)
• Lidl Srbija KD (kontakt@lidl.rs) 
• Lidl Crna Gora d.o.o, Deputy country: Serbia (kontakt@lidl.rs)
• Lidl Shqipëria SHPK, Deputy country: Romania (recrutare@lidl.ro)
• Lidl Kosova L.L.C., Deputy country: Romania (recrutare@lidl.ro)

2.8.2 Candidate pool for external candidates

• Lidl Stiftung & Co. KG (recruiting.international@lidl.com)
• LIDL BH d.o.o. (posao@lidl.ba)
• LIDL North Macedonia DOOEL Skopje (jobs@lidl.mk)
• ​Lidl Discount SRL (recrutare@lidl.ro)
• ​Lidl Srbija KD (kontakt@lidl.rs)
• Lidl Bulgaria EOOD & Co. KD (jobs@lidl.bg)
• ​LIDL Hrvatska d.o.o. k.d. (lidl@lidl.hr)
• Lidl Ceská republika v.o.s (hotline@lidl.cz)
• Lidl Eesti OÜ (hr@lidl.ee)
• Lidl Magyarország Bt. (info@lidl.hu)
• Lidl Latvija SIA (karjera@lidl.lt)
• ​Lidl Polska Sp.z o.o. (kariera@lidl.pl)
• Lidl & CIA. (candidatura@lidl.pt)
• Lidl Slovenská republika v.o.s. (kariera@lidl.sk)
• Lidl Slovenija d.o.o. k.d. (zaposlitev@lidl.si)
• Lidl Crna Gora d.o.o, Deputy country: Serbia (kontakt@lidl.rs)
• Lidl Shqipëria SHPK, Deputy country: Romania (recrutare@lidl.ro)
• Lidl Kosova L.L.C., Deputy country: Romania (recrutare@lidl.ro)  

3. When you apply
For all external candidates, it is important to note that, if you expressed interest in an employment with one of the existing Lidl countries in the context of your career event registration and are invited to apply with them, then the application process for this specific position is also carried out via our recruitment portal. All information relating to this application process can be found in the footer of the job posting to which the country’s recruiter invites you to apply.

In the following section, which applies exclusively to internal Lidl employees, we will explain which data we process from you if you do not register for the candidate pool, but apply for a specific position in an expansion country advertised on our expansion website.

3.1 Your personal data - What data do we process for an application?
To apply for one or several internal job postings in Lidl’s expansion countries, please e-mail your application to the respective country. The respective e-mail address can be found on the internal job posting on the expansion countries’ career opportunities website.

The Lidl company advertising the job is responsible for the processing of your application data.

Please note that we may need additional personal data from you later in the application process in order to complete your application. We will inform you about this in a separate e-mail. 

3.2 Purposes and legal basis - Why do we process your personal data?
The Lidl companies that advertise a position process your data in an application for the purpose of carrying out the application process and for the decision to establish an employment relationship on the basis of Article 6 (1) (b), where applicable in conjunction with Article 88 GDPR and the country-specific standards for applicant data protection.

It is possible that the new opening countries will be supported by the Lidl Stiftung & Co. KG

and one of its Lidl partner countries as part of the application process.  The legal basis for this data processing is Art. 6 (1) (f) GDPR. The legitimate interest is to support the employer company in the search for candidates until their own recruitment departments are fully set up.

Transfer to recipients outside the EU / EEA

If we transfer your personal data to recipients outside the EU/ EEA, the transfer will only take place if an adequate level of data protection in the third country has been confirmed by the EU Commission, an appropriate level of data protection has been agreed with the data recipient (e.g. by means of EU standard contractual clauses) or you have given us your consent.

3.3 Data retention - How long do we store the personal data of your application?
You can withdraw your application to us at any time. You decide how your data is used.

In the event of rejection or recruitment, the data processed as part of the application process will be deleted after the end of the application process in accordance with the country-specific deadline of the Lidl company to which you have applied and taken part in the selection process.

Here you will find an overview of our country-specific deletion periods:

3.4 Are you obliged to provide the data for an application?
There is no legal or contractual obligation on your part to provide us with personal data. Without the data, we cannot contact you or carry out an application process. The data is also required if a contract is signed.

3.5 Contact person for questions about your application
If you have any questions about the application process or the exercise of your rights in the processing of your applicant data (data subject rights), you can contact the following contact:

Lidl Stiftung & Co. KG

Talent Acquisition International

Stiftsbergstraße 1

74172 Neckarsulm

Germany

You can contact us in writing at the above address or by e-mail at recruiting.international@lidl.com

Information and contact persons regarding your rights as a data subject can be found in section 4.9 of this data protection information.

If you have further questions about the processing of your data, you can contact the company-internal data protection officer of Lidl Stiftung. The data protection officer of Lidl Stiftung & Co. KG can be reached at the specified address for the attention of the data protection officer or at datenschutz@lidl.com.

3.6 Name and contact details of the person responsible for your application data and the company data protection officer
The company for which you are applying is responsible for data processing. If this company is supported by Lidl Stiftung & Co. KG and a Lidl Partner Country as part of the application process, there is joint controllership between these companies. Joint controllership means that all participating companies have jointly determined the purposes and means of data processing. The responsible companies conclude an agreement to define the responsibilities and rights under the GDPR. Please contact them if you would like more information about the joint supervisory authority. See list of participating companies in section 2.8.1

Further information and contact persons regarding your rights as a data subject can be found in section 4.9 of this data protection information.

4. Your rights as a data subject
 

4.1 Overview
In addition to the right to withdraw your consent, you are entitled to the following additional rights if the respective legal requirements are met:

• Right to information about your personal data stored by us in accordance with Article 15 GDPR and § 34 BDSG,
• Right to correct incorrect or complete incomplete data in accordance with Article 16 GDPR,
• Right to deletion of your data stored by us in accordance with Article 17 GDPR and § 35 BDSG,
• Right to restrict the processing of your data in accordance with Article 18 GDPR,
• Right to data portability under Article 20 GDPR,
• Right of objection under Article 21 GDPR.

4.2 Right to information under Article 15 GDPR
In accordance with Article 15 (1) GDPR, you have the right to request information about your personal data stored by us free of charge. This includes in particular:

• the purposes for which your personal data is processed;
• the categories of personal data that are processed;
• the recipients or categories of recipients to whom your personal data has been or will be disclosed;
• the planned storage duration of your personal data or, if specific information is not possible, criteria for determining the storage period;
• the existence of a right to rectify or delete your personal data, a right to restrict the processing by the responsible person or a right to object to this processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• all available information about the origin of the data if the personal data is not collected from the data subject;
• The existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

If personal data is transferred to a third country or to an international organization, you have the right to be informed about the appropriate guarantees under Article 46 GDPR in connection with the transfer.

4.3 Right to rectification under Article 16 GDPR
In the event of incorrect data, you have the right to request that we correct your personal data immediately. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of an additional explanation.

4.4 Right to deletion according to Article 17 GDPR
You have the right to request that we delete your personal data immediately if one of the following reasons applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• You withdraw your consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing;
• You object to the processing under Article 21 (1) or (2) GDPR and in the case of Article 21 (1) GDPR, there are no overriding legitimate grounds for processing;
• the personal data was processed unlawfully;
• The deletion of the personal data is necessary to fulfill a legal obligation;
• The personal data was collected in relation to the services offered by the information company in accordance with Article 8 (1) GDPR.

If we have made the personal data public and are obliged to delete it, we will take appropriate measures, taking into account the available technology and implementation costs, to inform the third parties processing your data that you wish for them to also delete all links to or copies of your personal data.

4.5 Right to restriction of processing according to Article 18 GDPR
You have the right to request that we limit processing if one of the following conditions is met:

• you dispute the accuracy of the personal data;
• The processing is unlawful and you request limited use of the personal data instead of the deletion;
• the responsible person no longer needs the personal data for processing purposes, but you need them to assert, exercise or defend legal claims or
• you have objected to the processing in accordance with Article 21 (1) GDPR, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the data subject.

4.6 Right to data portability under Article 20 GDPR
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another responsible person without any hindrance from us, if

• the processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) or on a contract in accordance with Article 6 (1) (b) GDPR and
• The processing is carried out using automated procedures.

When exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another person responsible, insofar as this is technically feasible.

4.7 Right to object under Article 21 GDPR

Under the conditions of Article 21 (1) GDPR, you can object to data processing for reasons arising from your particular situation.

The above general right of objection applies to all processing purposes described in these data protection provisions, which are processed on the basis of Article 6 (1) (f) GDPR. In contrast to the special right to object to data processing for advertising purposes (see above in particular Section 3), we are only obliged to implement such a general objection under the GDPR if you give us reasons of overriding importance, e.g. a possible danger to life or health.

4.8 Right of appeal to the data protection supervisory authority according to Article 77 GDPR
You also have the right to lodge a complaint with the responsible data protection supervisory authority. You can contact the data protection supervisory authority in the country in which you are resident or the authority of the country in which the responsible Lidl company is located.

4.9 Contact person for exercising your rights as a data subject
Contact person for questions or to exercise your rights as data subject:

• If you have any questions about the expansion countries’ career opportunities website or to exercise your rights in the processing of your data (data subject rights), please contact: Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm, recruiting.international@lidl.com
• If you have any questions about the registration masks and the exercise of your rights when processing your profile data (data subject rights), please contact: Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm, recruiting.international@lidl.com
• If you have any questions about your application, the application process and the exercise of your rights in the processing of your application data (data subject rights), you can contact the company to which you have applied. Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm,  recruiting.international@lidl.com