We are pleased that you are interested in data protection on our website combine.lidl. At Lidl, we want you to feel comfortable and secure and to see our implementation of data protection as a customer-oriented quality feature.
The following data protection information informs you about the type and scope of the processing of your personal data within the scope of the use of the website combine.lidl. Personal data is information that can be directly or indirectly assigned to your person. The general data protection regulation (GDPR) in particular serves as the legal basis for data protection.
Purposes of data processing / legal basis:
When you visit our website, the browser used on your terminal device automatically, and without any action on your part, sends to the server of our website, and temporarily stores in a so-called log file, the following data
The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the purposes of data processing listed above. If the purpose is to prepare a contract, the legal basis for data processing is Article 6(1)(b) GDPR.
Storage period/ Criteria for determining the storage period:
The data are stored for a period of seven days and then automatically deleted.
Purposes of data processing / legal basis:
For the purpose of designing and constantly optimising our website in line with requirements, we use Google Analytics, a web analysis service of Google LLC ("Google"), on the basis of Article 6 paragraph 1 letter f) GDPR. Our legitimate interest derives from the purposes set out above. In this context, pseudonymised user profiles are created and cookies are used. The cookie generates the following information about your use of our website:
The information is used to evaluate the use of our websites, to compile reports on website activity and to provide other services related to website and Internet use for market research purposes and to tailor these Internet pages to meet specific needs. The IP addresses are anonymised so that an identification is not possible (IP masking).
Recipients/ categories of recipients:
The information generated in the cookie is transferred to a Google server in the USA and stored there. To the best of our knowledge, your IP address will never be merged with other Google data. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google.
Storage duration/ Criteria for determining the storage duration:
Once the IP address has been anonymized, it is no longer possible to infer your identity. The reports created on the basis of Google Analytics no longer contain any personal references.
With the exception of the processing operations described under item 2, we do not pass on your personal data to recipients domiciled outside the European Union or the European Economic Area. Said processing operations result in the transmission of data to Google LLC servers. Some of these servers are located in the USA. For the USA, the European Commission decided on 12.7.2016 that an adequate level of data protection exists under the regulations of the EU-U.S. Privacy Shield (the "adequacy decision" according to Article 45 GDPR). Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is certified according to the EU-U.S. Privacy Shield.
You have the right, upon request and free of charge, to obtain information on the personal data stored about you (Art. 15 para. 1 GDPR). In addition, you have a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data if the legal requirements are met. You are entitled to receive personal data related to you which you have provided to us in a format suitable for data transmission (Art. 20 GDPR). Furthermore, you have a general to object with regard to data processing which takes place on the basis of Art. 6 para. 1 letter f) GDPR (Art. 21 GDPR). Furthermore, you have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). You can contact the data protection supervisory authority of the federal state in which you have your residence or the authority in Baden-Württemberg as the federal state in which the Lidl Stiftung & Co. Limited Partnership has its registered office.
These data protection provisions apply to data processed by Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany ("data controller") and for the website combine.lidl. The company data protection officer of the Lidl Stiftung & Co. KG is available at the above address (attention of the data protection officer), or at email@example.com.