Data Protection}

Data Protection

Data Protection

Data Protection

Privacy policy for

We are pleased that you are interested in data protection on our website At Lidl, we want you to feel comfortable and secure and to see our implementation of data protection as a customer-oriented quality feature.

The following data protection information informs you about the type and scope of the processing of your personal data within the scope of the use of the website Personal data is information that can be directly or indirectly assigned to your person. The general data protection regulation (GDPR) in particular serves as the legal basis for data protection.

1. Access to this website

Purposes of data processing / legal basis:

When you visit our website, the browser used on your terminal device automatically, and without any action on your part, sends to the server of our website, and temporarily stores in a so-called log file, the following data

  • the IP address of the requesting Internet-enabled device,
  • the date and time of the access,
  • the name and URL of the retrieved file,
  • the website/application from which the access was made (referrer URL),
  • the browser you are using and, if applicable, the operating system of your Internet-enabled computer, and
  • the name of your access provider

for the following purposes :

  • guaranteeing a smooth connection,
  • guaranteeing of a comfortable use of our website / application and
  • evaluating system safety and stability.

The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the purposes of data processing listed above. If the purpose is to prepare a contract, the legal basis for data processing is Article 6(1)(b) GDPR.

Storage period/ Criteria for determining the storage period:

The data are stored for a period of seven days and then automatically deleted.

2. Google Analytics

Purposes of data processing / legal basis:

For the purpose of designing and constantly optimising our website in line with requirements, we use Google Analytics, a web analysis service of Google LLC ("Google"), on the basis of Article 6 paragraph 1 letter f) GDPR. Our legitimate interest derives from the purposes set out above. In this context, pseudonymised user profiles are created and cookies are used. The cookie generates the following information about your use of our website:

  • browser type/ version,
  • operating system used,
  • referrer URL (the previously visited page),
  • host name of the accessing computer (IP address),
  • time of the server request.

The information is used to evaluate the use of our websites, to compile reports on website activity and to provide other services related to website and Internet use for market research purposes and to tailor these Internet pages to meet specific needs. The IP addresses are anonymised so that an identification is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on . As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is set to prevent your information from being collected in the future when you visit this website. The opt-out cookie applies only to this browser and only to our website and is placed on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. You can find further information on data protection in connection with Google Analytics on the Google Analytics website .

Recipients/ categories of recipients:

The information generated in the cookie is transferred to a Google server in the USA and stored there. To the best of our knowledge, your IP address will never be merged with other Google data. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google.

Storage duration/ Criteria for determining the storage duration:

Once the IP address has been anonymized, it is no longer possible to infer your identity. The reports created on the basis of Google Analytics no longer contain any personal references.

3. Data transfer to third countries

With the exception of the processing operations described under item 2, we do not pass on your personal data to recipients domiciled outside the European Union or the European Economic Area. Said processing operations result in the transmission of data to Google LLC servers. Some of these servers are located in the USA. For the USA, the European Commission decided on 12.7.2016 that an adequate level of data protection exists under the regulations of the EU-U.S. Privacy Shield (the "adequacy decision" according to Article 45 GDPR). Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is certified according to the EU-U.S. Privacy Shield.

4. Your rights as data subject

You have the right, upon request and free of charge, to obtain information on the personal data stored about you (Art. 15 para. 1 GDPR). In addition, you have a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data if the legal requirements are met. You are entitled to receive personal data related to you which you have provided to us in a format suitable for data transmission (Art. 20 GDPR). Furthermore, you have a general to object with regard to data processing which takes place on the basis of Art. 6 para. 1 letter f) GDPR (Art. 21 GDPR). Furthermore, you have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). You can contact the data protection supervisory authority of the federal state in which you have your residence or the authority in Baden-W├╝rttemberg as the federal state in which the Lidl Stiftung & Co. Limited Partnership has its registered office.

5. Name and contact details of the data controller and contact details of the company data protection officer

These data protection provisions apply to data processed by Lidl Stiftung & Co. KG, Stiftsbergstra├če 1, 74172 Neckarsulm, Germany ("data controller") and for the website The company data protection officer of the Lidl Stiftung & Co. KG is available at the above address (attention of the data protection officer), or at