Careers Privacy Notice
We are pleased that you are interested in data protection on our website. When you visit our website, we would like you to feel safe and comfortable and to view our implementation of data protection as a customer-oriented quality feature.
The following data protection information will inform you about the nature and scope of the processing of your personal data when you visit our website. Personal data are data that are or can be directly or indirectly attributed to you as an individual. The General Data Protection Regulation (GDPR) governs the use of personal data.
Contents
1. Overview
2. Accessing our website
3. Use of cookies and similar techniques for processing usage data
4. E-mail contact/ Telephone calls
5. Transmission to recipients in a third country
6. Integrated Content
6.1 YouTube Videos
6.2 Bing Maps
7. Your affected rights
7.1 Overview
7.3 Right to rectification
You have the right to seek the immediate rectification by us of inaccuracies in your personal data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data and add newly available supplementary information.
7.4 Right to deletion
7.5 Right to restriction of processing
7.6 Right to data portability
7.7 Right to object as referred to in Article 21 GDPR
8. Contacts
8.1 Point of contact in case of questions regarding data protection
If you have further questions regarding the processing of your data, you can contact the company data protection officer on Data.Protection@lidl.co.uk
8.2 Right of complaint to the supervisory data protection authority
In addition, you have the right to complain at any time to the responsible supervisory data protection authority. The supervisory authority for data protection in the United Kingdom is the Information Commissioners Office (ICO). Further advice and guidance can be found on their website at www.ico.org.uk or by contacting their helpline on +44 (0)303 123 1113.
9. Name and contact details of the controller of the processing and contact details of the company Data Protection Officer
1. Overview
When you access our website, various data will be exchanged between your device and our server. This may also be personal data. Data collected in this way can for instance be used to optimise our website or to display advertising in the browser of your device.
2. Accessing our website
Purpose of data processing / legal basis:
When you access our website, the browser used on your device will, automatically and without any action on your part, send:
• the IP address of the requesting web-enabled device,
• the date and time of access,
• the name and URL of the requested file,
• the website/ application from which the access was made (referrer URL),
• the browser you are using and possibly the operating system of your web-enabled device as well as the name of your access provider
to our website server and where they are temporarily stored in a so-called log file for the following purposes:
• ensuring a smooth connection to the website;
• ensuring comfortable use of our website / application;
• evaluation of system security and stability.
The legal basis for the processing of the IP address is legitimate interest. Our legitimate interest exists in the above-listed purposes of data processing.
Retention period / criteria for specifying the retention period:
The data are stored for a period of seven days and afterwards automatically deleted when you leave the website.
Purposes of data processing/ legal bases:
We at Lidl Great Britain Limited, 19 Worple Road, London, SW19 4JS, use cookies on our websites.
Our consent includes the use of cookies and other technologies for processing usage data on all (sub-) domains under lidlcareers.co.uk.
Cookies are small text files that are stored on your device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your terminal device, do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific terminal device used. This does not mean, however, that we obtain direct knowledge of your identity.
The use of cookies and other technologies for processing usage data serves the following purposes, depending on the category of the cookie or other technology:
Technically necessary: These are cookies and similar methods without which you cannot use our services (for example, to display our website/functions you have requested, to save your registration in the login area).
Convenience: These techniques allow us to consider your actual or perceived preferences for the convenience of using our website. For example, your settings allow us to display our website in a language that is appropriate for you. It also helps us avoid showing you offers that may not be available in your area.
Statistics: These techniques allow us to create anonymous statistics on the use of our services. This allows us to determine, for example, how we can better adapt our website to the habits of our users.
Marketing: This enables us to display advertising content that is suitable for you, based on the analysis of your usage behaviour. Your usage behaviour can also be tracked via different websites, browsers or end devices using a user ID (unique identifier).
You can find an overview of the cookies and other technologies used, together with the respective processing purposes, the storage periods and any integrated third-party providers, here.
Within the scope of the use of cookies and similar techniques for processing usage data, the following types of personal data are processed in particular, depending on the purpose:
Technically necessary
Agreement to the cookie preferences.
Comfort:
Settings that serve to optimize the output of the cards.
Output of last viewed jobs.
Output of jobs that have been held.
Statistics:
Pseudonymised user profiles with information about the use of our website. These contain in particular:
Browser type/version,
The operating system used,
Referrer URL (the previously visited page)
Host name of the accessing computer (IP address),
Time of the server request,
Individual User-ID and
Triggered events on the website (surfing behaviour).
The IP address is regularly anonymized, so that it is impossible to draw conclusions about your person.
On the basis of the User-ID itself, we cannot draw any conclusions about your person.
Marketing
Pseudonymised user profiles with information about the use of our website. These contain in particular:
IP address,
Individual User ID
Potential product interests
Triggered events on the website (surfing behaviour).
The IP addresses are regularly made anonymous, so that no conclusions can be drawn about your person.
On the basis of the User-ID itself, we cannot draw any conclusions about your person. We may share the User ID and the associated user profiles with third parties via the providers of advertising networks.
The legal basis for the use of comfort, statistics and marketing cookies is your consent under Article 6 paragraph 1 letter a) DSGVO. The legal basis for the use of technically necessary cookies is Article 6 paragraph 1 letter f) DSGVO, i.e. we process your data on the basis of our legitimate interest in being able to present the website with its representations in a fully functional manner.
You can revoke/adapt your consent at any time with immediate effect. Simply click here. By unchecking the appropriate boxes, you can easily revoke your consent for the respective processing purposes.
Recipients/ categories of recipients:
In the context of data processing by means of cookies and similar techniques for processing usage data, we may use specialised service providers, in particular from the field of online marketing. These service providers process your data on our behalf as commissioned processors, are in each case carefully selected and contractually obliged in accordance with Article 28 DSGVO.
Storage duration/ Criteria for determining the storage duration:
The storage period for cookies can be found on our cookie settings page. If "persistent" is specified in the "Expiration" column, the cookie is stored permanently until the corresponding consent is revoked. The duration of session storage is limited to the respective session and ends when the browser is closed.
4. E-mail contact/ Telephone calls
Purpose of data processing / legal basis:
Personal data that you communicate to use by e-mail, will of course be treated confidentially. We will use your data exclusively for the purpose for which it is intended in order to process your request. The legal basis for the data processing is legitimate interest. Our and your concurrent (legitimate) interest in the data processing results here from the objective of responding to your request, solving any problems there may be and thus maintaining and encouraging your satisfaction as a user of our website.
Recipients and categories of recipients
We categorically exclude the dissemination of these data to third parties. In exceptional cases, data will be processed on our behalf by a data processor. These are carefully selected, audited by us and contracted as referred to in Article 28 GDPR.
Retention period / criteria for specifying the retention period
All the personal details that you provide us with when you make requests (suggestions, praise or criticism) or by e-mail or telephone will be deleted or anonymised at the latest 6 months after the final response has been given. Experience has shown that after 6 months there are usually no more questions about our responses . When asserting your data subject rights (see below), your personal data will be stored for 6 years after final reply to prove that we have provided you with comprehensive information and that the legal requirements are complied with.
5. Transmission to recipients in a third country
If we transfer data to recipients in a third country (registered office outside the European Economic Area), you can see this in the information on the recipients/categories of recipients in the description of the respective data processing.
In certain countries, the European Commission certifies a data protection standard comparable to the level in the European Economic Area through so-called adequacy decisions. A list of these countries can be found here.
If no comparable data protection standard exists in a country, we ensure that data protection is sufficiently guaranteed by other measures. This is possible, for example, through binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates, or recognized codes of conduct. Please contact our data protection officer (Item 9) if you would like to receive more detailed information.
6. Integrated Content
6.1 YouTube Videos
We have integrated YouTube videos into our online offer, which are stored on Youtube and can be played directly from our website. These are all integrated in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos is the data transferred. We have no influence over this data transmission.
For more information on the purpose and scope of data processing by YouTube, which also takes place on servers in the USA, please refer to the provider's privacy policy. There you will also receive further information on your rights in this regard and setting options for protecting your privacy. Address and data protection information of YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy
6.2 Bing Maps
On this website we use the offer from Bing Maps. This enables us to display interactive maps directly on the website and allows you to conveniently use the map function to find job offers near you.
Bing Maps are used in the interest of an appealing display of our online job offers and easy identification of the locations shown by us on our website.
When you visit our website, the provider of Bing Maps, the Microsoft Corporation, receives the information that you have accessed the corresponding subpage of our website. To use the functions of Bing Maps, it is necessary to process your IP address within the scope of internet communication. This is usually processed on a Microsoft server in the USA.
We have no influence on the specific processing of data by Bing Maps. Further information on the purpose and the scope of such data processing by Bing Maps can be found in the provider’s privacy statements. There you will also find further information on your rights in this regard and setting options to protect your privacy. Address and data protection information for the provider of Bing Maps: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.
7. Your affected rights
7.1 Overview
Besides the right to revoke the consent you have given us, you have the following further rights if the respective legal requirements are met:
•The right to request information about your personal data stored with us
•The right to request rectification of incorrect data or completion of incomplete data
•The right to request deletion of your personal data stored with us
•The right to request restriction of processing of your data
•The right to request data portability
•The Right to object to the processing of your personal data
7.2
You have the right to receive, upon request, information about the personal data stored with us about you, free of charge. This includes in particular:
•the purposes for which the personal data are processed;
•the categories of personal data that are processed;
•the recipients or the categories of recipients to whom the personal data concerned have been disclosed or are still being disclosed;
•the planned duration of storage of the personal data concerning you or, if specific details of this are not possible, criteria for the specification of the retention period;
•the existence of a right of rectification or deletion of personal data concerning you or of a restriction on processing by the data controller or of a right to object to such processing;
•the existence of a right of appeal to a supervisory authority;
•all available information about the origin of the data, if the personal data was not collected from the person concerned;
•the existence of an automated decision-making process, including profiling. In these cases, at the least, receiving meaningful information about the logic involved as well as the scope and desired impact of such processing for the person concerned.
If personal data is transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safe guards in connection with the transfer.
7.3 Right to rectification
You have the right to seek the immediate rectification by us of inaccuracies in your personal data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data and add newly available supplementary information.
7.4 Right to deletion
You have the right to request from us that personal data concerning yourself is immediately deleted, if one of the following grounds applies:
•the personal data are no longer necessary for the purposes for which they have been collected or have been processed in any other way;
•you revoke your consent, which supported the processing originally, and there is no other legal basis for processing;
•you object to the processing where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
•the personal data has been unlawfully processed;
•the deletion of the personal data is necessary for the fulfilment of a legal obligation;
•the personal data has been collected in relation to services offered by information society services as referred to in Article 8 paragraph 1 GDPR.
Insofar as we have made the personal data public and are obliged to delete it, we will take appropriate measures taking into account the available technology and the costs of implementation, in order to inform the third parties who are processing your data that you also request from them that they delete all links to the personal data and copies or replications of the personal data.
7.5 Right to restriction of processing
You have the right to request from us a restriction of the processing, if one of the following requirements exist:
•the correctness of the personal data is disputed by you;
•the processing is illegal and you request a restriction of the use of the personal data rather than its deletion;
•the data controller no longer requires the personal data for the purposes of the processing, but the person concerned requires them in order to enforce, exercise or defend legal claims or
•you have raised an objection to the processing, so long as it is not certain whether the legitimate grounds of the data controller outweigh those of the person concerned.
7.6 Right to data portability
You have the right to receive the personal data that concern you, which you have provided to us, in a structured, common and machine-readable format, and you have the right to transfer these data to another data controller without hindrance by us, insofar as:
•the processing is based on consent or on a contract and
•the processing takes place with the aid of automated procedures.
When exercising your right to data portability, you have the right to ensure that the personal data is transferred directly by us to another data controller, insofar as this is technically feasible.
7.7 Right to object as referred to in Article 21 GDPR
In particular instances, you may object to data processing for reasons arising from your particular situation.
The above general right of objection applies to all processing purposes described in these data protection regulations, which are processed on the basis of legitimate interests. Unlike the special right to object towards data processing for advertising purposes, we are only obliged by the GDPR to implement such a general objection, if you give us reasonsof paramount importance for this, e.g. a possible risk to life or health. Furthermore, there is the possibility to contact the supervisory authority responsible for Lidl U.K. GmbH and Lidl Great Britain Limited.
8. Contacts
8.1 Point of contact in case of questions regarding data protection
If you have further questions regarding the processing of your data, you can contact the company data protection officer on Data.Protection@lidl.co.uk
8.2 Right of complaint to the supervisory data protection authority
In addition, you have the right to complain at any time to the responsible supervisory data protection authority. The supervisory authority for data protection in the United Kingdom is the Information Commissioners Office (ICO). Further advice and guidance can be found on their website or by contacting their helpline on +44 (0)303 123 1113.
9. Name and contact details of the controller of the processing and contact details of the company Data Protection Officer
Lidl Great Britain Limited
Lidl House
14 Kingston Road
Surbiton
KT5 9NU
+44 (0)204 530 0000
Lidl Great Britain Limited (registered company number 02816429) and ICO reference number Z6682144