Below we would like to inform you, in accordance with Article 13 of the EU General Data Protection Regulation (GDPR), about the processing of your personal data in the framework of processing your request by Lidl Customer Services.

The controller, within the meaning of Article 4(7) of the GDPR, is LIDL Cyprus, Industrial Area, 2 Pigasou Street, CY-7100 Aradippou - Larnaka. If required, LIDL Cyprus can be reached at the following number 800 944 04 or email address info@lidl.com.cy

Any personal information provided to us in contact forms, over the telephone, through emails or social media will, of course, be treated with confidentiality. We use your data exclusively for the purpose of responding to customer enquiries. Article 6(1)(f) of the GDPR forms the legal basis for processing your data. Lidl's legitimate interest in the processing of your data lies in its interest in responding to your enquiries, thus maintaining and promoting customer satisfaction.

We generally rule out the possibility of transmitting your data to any third parties outside of Lidl. As an exception to this rule, data may be processed by service providers working on our behalf, who have been carefully chosen by us. These service providers have been cautiously selected by us and are bound by contract in accordance with Article 28 of the GDPR.

Furthermore, it may be necessary the transmit of your enquiries to our contractual partners (e.g. suppliers in cases of product-specific enquiries) for the purpose of processing your enquiries. If the transmission of your personal information is required in isolated cases, we will inform you beforehand and ask for your consent.

Any personal information you send to us with respect to your enquiries (suggestions, praise or criticism) will be deleted or securely anonymized in the majority of them within 90 days after the final response provided to you. The storage period of 90 days is justified by the fact that you, as a customer, may on some isolated occasion contact us with regard to the same issue after receiving an answer, in which case we will need to refer to previous correspondence between us. Experience has shown us that queries about our answers do not usually occur after this period of 90 days.

If you assert your data rights under Clause 18, the response to your request will be documented for a period of 3 years. The period begins with the final reply to you. The storage takes place as proof of compliance with the legal requirements.

Occasionally,it may happen that for legal reasons (e.g. insurance cases)we need to store your personal details longer. In these cases we do not save your data for longer than the statutory retention period or save your data until your case has been completely processed.

Based on the GDPR, in your capacity as the data subject, you also have the following general rights:

• You have the right, pursuant to Article 15(1) of the GDPR, to gain free access – upon request – to any of your personal data stored by Lidl.
• Furthermore, if the legal requirements apply, then you have the right to rectification (Article 16 of the GDPR), erasure (Article 17 of the GDPR) and restriction (Article 18 of the GDPR) of your personal data.
• Provided that the data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right to object under Article 21 of the GDPR. Insofar as you disagree with the data processing, this will be omitted in the future, unless Lidl can prove that there are compelling and legitimate grounds for further processing, which outweigh the interests of the objecting party.
• If you have provided the processed data yourself, then you will have the right to data portability under Article 20 of the GDPR.

Provided that the data processing is based on consent provided in accordance with Article 6(1)(a) or Article 9(2)(a) of the GDPR, you may withdraw consent at any time with future effect, without affecting the legality of any processing carried out up until the time of withdrawal.

This website uses the "Google Signals" function to expand statistical reports created with Google Analytics to include a cross-device evaluation of visitor flows. Google signals only applies to users who are logged into the sessions with a Google account and have activated the "Personalized advertising" function in the Google account. Google signals do not give us any more in-depth information about specific individuals or ways to uniquely identify you or the device you are using. Google only provides us with general demographic information (gender, age group), possible interests and, if applicable, information on whether stationary Lidl branches have been visited. If you wish to deactivate this function for yourself, you can set this in your Google account. You can find more information about the customization options for Google advertising settings at https://support.google.com/ads/answer/2662856. You can find more information about Google signals here.”

In the above cases, if you have any open-ended questions or complaints please contact the Data Protection Officer in writing or by email.

Furthermore, you have the right to file a complaint with the regulatory authority for data protection at any time. You can contact the regulatory authority for data protection, especially in the member-state in which you reside or at your place of work or in the place where the supposed violation has taken place or the authority of the state in which the party responsible for processing is based..

Below are the contact details of our Data Protection Officer:

LIDL Cyprus,

Data Protection Officer

Industrial Area, Emporiou Street 19, CY- 7100, Aradippou - Larnaca

dataprotection@lidl.com.cy