Data Protection on our Parkside Website

(Version 7.1 status 07.05.2026)


Thank you for visiting www.parkside-diy.com and your interest in our Privacy Policy.
We want you to feel comfortable and safe when you visit our website, and to know that one of the things that sets us apart is our commitment to protecting our customers' data. 
 

The following Privacy Policy is designed to inform you about the nature and scope of the processing of your personal data by Lidl Stiftung & Co. KG (also referred to in this policy as "Lidl", "we" and "us"). 

Personal data is information that could identify you directly or indirectly. The statutory basis for data protection is, in particular, the UK General Data Protection Regulation (GDPR). 

1. How You Can Contact Us

Unless otherwise stated, the data controller responsible for data processing when visiting this website is Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74167 Neckarsulm, Germany, kontakt@lidl.com ("Controller"). 

Should you have any general questions, you can also reach us at customer.care@lidl.co.uk

Our company data protection officer can be contacted at the above address for the attention of the data protection officer or by e-mail at Privacy_gb@parkside-diy.com.

2. Overview: Why We Process Your Personal Data

When you visit our website, we process your data so that

  • we can enable you to use our website;
  • we can identify and remedy any errors;
  • we can analyse your usage and thus expand our product offering;
  • you can contact us;
  • we can forward you to our partner websites.

3. Accessing Our Website

Which personal data we process:For what purposes we do this:Our legal basis for this processing: Our retention period:

When you visit our website, the following data is automatically transmitted to our servers and temporarily stored: 

  • Your IP address;
  • The date and time of access;
  • Connection data, such as the client's request, the http response code and the amount of data transferred;
  • System information, such as device ID, version and name of the browser and operating system.
     
  • To enable you to use the website.
  • To ensure the proper operation of our website.
  • To protect our systems.
  • To analyse errors.
  • To prevent improper or fraudulent behaviour. 
     

The legal basis for this processing is Article 6(1) (f) UK GDPR.

We have a legitimate interest in the listed purposes of data processing.

If data is used for purposes of preparing a contract, the legal basis for the data processing is Article 6(1) (b) UK GDPR. 

We store the data for a period of 90 days. The data is automatically deleted thereafter. 

 

 

When you give us your consent, we keep a record of your user ID and the date and time you agreed. If you choose not to give consent, we simply record that preference to ensure we respect your choice.

 

  • To be able to prove your consent. 

The legal basis for this processing is Article 6(1)(c) UK GDPR. We fulfil our legal obligation to be able to prove the lawfulness of data processing based on consent.

 

To ensure we can prove we followed your instructions, we keep a record of your consent for up to 24 months after we stop using your information for those specific purposes.

 

4. Use of Cookies and Similar Technologies

4.1. General Information

When cookies and similar technologies are used to process usage data (in particular local storage), files are stored locally on your end device when you visit our website. They store information in connection with the end device you use. This does not, however, mean that we will immediately become aware of your identity.

The use of cookies and similar technologies to process usage data serves the following purposes, depending on the category: 

Explanation of the categories: For what purposes we use them: Our legal basis for this processing: Our retention period: 

Technically necessary: 

These are cookies and similar technologies without which you cannot use our services. Depending on the purpose, the following in particular are processed: 

  • User inputs, in order to remember inputs across multiple sub-pages;
  • Security-related events (e.g., identifying failed sign-in attempts);
  • Data to play back multimedia content (e.g., playing (product) videos selected by you).
  • To display the website correctly (e.g., language, font type and colour).
  • To provide the functions you have requested (e.g. to keep you subscribed).
  • To manage consent given or not given in the context of consent management for cookies and similar technologies. 

We use strictly necessary cookies based on the exemptions provided under UK PECR, which allow us to run the essential features of our site without needing to ask for permission every time. We also process your data based on our legitimate interests Article 6(1)(f) UK GDPR. We do this to achieve the purposes listed.

 

You can find more information about cookies in our cookie policy. 

 

 

Statistics:

These methods enable us to tailor the design of our services by producing pseudonymised and, if applicable, cross-device statistics about how they are used. We use pseudonymised user profiles for this: 

  • IP address (regularly anonymised);
  • Individual user ID;
  • Events triggered on the website ("web browsing behaviour");
  • Browser type/browser version;
  • Operating system used;
  • Referrer URL;
  • Time of the server request
  • To enable us to analyse how or how often our website is used.
  • To be able to adapt our website to user habits.
     

Consent is our legal basis for these cookies and the data processing that follows. We comply with Regulation 6 of PECR for setting the cookies and Article 6(1)(a) of the UK GDPR for handling your personal information.

 

Marketing:

These techniques enable us to use and evaluate our advertising measures in a targeted manner. 

  • IP address (regularly anonymised);
  • Individual user ID;
  • Events triggered on the website ("web browsing behaviour").
  • To be able to show you suitable advertising content based on the analysis of your pseudonymised usage behaviour (also across different websites, browsers or end devices).
  • To measure the success of our marketing measures. 
     

For an overview of the cookies and similar technologies we use, including the storage periods and any third-party providers involved, please see our cookie policy.

You can change or withdraw your consent at any time. If you do withdraw it, it won't affect the legality of any processing we carried out while we had your permission. You can easily manage your choices by visiting our Cookie Policy and unchecking the boxes for the purposes you no longer agree to."

4.2. Responsibilities When Using Cookies and Similar Technologies

We (point 1) and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, act as joint controllers under Article 26 UK GDPR for data processing activities (marketing category) associated with the Meta Pixel.

Our advertising partner The UK Trade Desk Ltd, ℅ The Trade Desk, Inc., 42 N. Chestnut Street, Ventura, CA 93001, USA, processes the data as its own controller to display personalised advertising and to measure success (marketing category).

4.3. Use of Google Analytics

We also use the Google Analytics web analytics service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 operates largely without using traditional cookies, but rather analyses your behaviour on our website.

What personal data is collected: For what purposes we use the data: Our legal basis for this processing: Our retention period: 
  • IP address of the end device;
  • The date and time of access;
  • The name and URL of the requested file;
  • Browser used and, if applicable, operating system of the end device  
  • To optimise user navigation.
  • To carry out statistical analyses, e.g., on user access.
  • To adapt our website to the needs of our visitors. 

We use these technologies based on your consent, in line with UK PECR rules. Any personal data collected as a result is processed because you have given us your permission to do so, as set out in Article 6(1)(a) of the UK GDPR

 

 

The user data collected via Google Analytics is deleted after 14 months. 

 

You can change or withdraw your consent at any time. If you do withdraw it, it won't affect the legality of any processing we carried out while we had your permission. You can easily manage your choices by visiting our Cookie Policy and unchecking the boxes for the purposes you no longer agree to.

5. Social Media Walls

We compile the content shared publicly and voluntarily by you and others on social media platforms using certain hashtags with reference to our Company on "social media walls". Below you will find an overview of the data we process: 

Which personal data we process: For what purposes we use them: Our legal basis for this processing: Our retention period: 

Depending on the type of content, the following data is processed:

  • Timestamp and other metadata of the posts;
  • Post ID;
  • Post content;
  • Pictures and videos, if any;
  • Links;
  • Comments and reviews;
  • Profile data (name, profile URL, profile picture);
  • User ID;
  • Website URL.
  • To present our company externally.
  • To publish marketing campaigns.
  • To publish prize draws.
  • To strengthen and promote customer loyalty. 

The legal basis for this data processing is Article 6(1)(f) UK GDPR. The purposes listed constitute our legitimate interest.

 

The content displayed on the social media wall is processed until you delete your post on the respective social media platform. After that, the post will no longer be displayed by us and the data from it will no longer be processed. 

 

6. Newsletter including Tracking and Profiling

We offer you the opportunity to subscribe to our PARKSIDE newsletter. Our newsletter contains information about products, offers, promotions, services, competitions, surveys and other events relating to PARKSIDE.

If you subscribe to our PARKSIDE newsletter and consent to receiving the newsletter by clicking on the confirmation link as part of the registration process, we process your personal data as follows:

Which personal data we process:For what purposes we use them:Our legal basis for this processing:Our retention period:

For signing up and the process for verifying that the decision to subscribe originates from you ("double opt-in process"):

  • Your e-mail address;
  • Your first name and surname (optional);
  • Your IP address;
  • Date and time of signing up and verification by clicking on the confirmation link.
  • To add you to our newsletter mailing list.
  • To check that your e-mail address has been entered correctly.
  • To ensure that the decision to subscribe originates from the owner of the e-mail address and thus prevent misuse of the e-mail address.

The legal basis for processing for inclusion in the distribution list is your consent under Article 6(1)(a) GDPR.

The legal basis for verification measures as part of the double opt-in process is Article 6(1) (f) GDPR. Our legitimate interest is to be able to trace any possible misuse of the e-mail address and, in case of doubt, to be able to prove that the actual owner of the e-mail address has subscribed.

We store the record of your consent for the duration of your subscription to the newsletter. We then store the data for a further three years after you have unsubscribed from the newsletter or revoked your consent by other means in order to be able to prove that our newsletter was lawfully sent until then. 

Your e-mail address, your name (if provided) and your usage data will be deleted as soon as you unsubscribe from the newsletter.

When you regularly receive the newsletter, we process: 

  • Your e-mail address;
  • Your consent;
  • Your usage of the newsletters:
    • Opening;
    • Clicking on links;
    • Other newsletter activities.
  • To send you the desired newsletter.
  • To verify that you have not withdrawn your consent.
  • To create personalised user profiles in order to improve newsletter content and tailor it to your interests.

Data processing in order to send you regular newsletters and analyse your usage behaviour is based on your consent in accordance with Article 6(1) (a) GDPR.

The legal basis for using cookies and tracking pixels in our newsletter is your consent, as required by Regulation 6 of the UK PECR.

You may withdraw your consent to receive the newsletter and to the recording of newsletter activities at any time, e.g., by clicking on the unsubscribe link at the bottom of each newsletter. When you unsubscribe, we treat this as a withdrawal of your consent to receive our newsletters and for us to record how you interact with them. We will delete your usage data at that point. Please note that any processing we carried out before you unsubscribed remains legally valid. 

7. Making Contact

You have the option of contacting your preferred customer service centre via our website, e.g. the sales outlet where you purchased the PARKSIDE device. The following overview informs you about data processing by Lidl customer service.

If you wish to contact Kaufland customer service, you will be redirected to the Kaufland website. Please note the privacy policy published here. 

Which personal data we process:For what purposes we do this:Our legal basis for this processing:Our retention period:

We process the following data when you contact us:

  • Contact via e-mail: your e-mail address;
  • Contact via telephone: your telephone number;
  • Your concern.
  • To process your query for a specific purpose and to assist you with your query.

We process your data under Articles 6(1)(b) and (f) of the UK GDPR. This is necessary to manage our relationship with you, answer your requests, and improve your overall experience as a user of our app.


 

We delete or anonymise all information we receive from you when you make inquiries no later than 90 days after the final response is sent. Based on experience, we generally do not receive any questions concerning our responses after 90 days. 

If you assert your rights as a data subject pursuant to clause 12, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.

8. Recipients to Whom We Transfer Your Personal Data

8.1. Disclosure to Service Providers Bound by Instructions

We also use external service providers bound by our instructions to process your data on our behalf. Such processors are carefully selected and also bound by contract in accordance with Article 28 UK GDPR. We currently transmit data to the following categories of service providers:

  • IT service providers who process your personal data on our behalf and in accordance with our instructions. This enables us to guarantee secure IT operations.
  • Service providers who process your personal data on our behalf and in accordance with our instructions in the area of customer service and marketing consulting.

8.2. Other Data Transfers

We may share your personal information with law enforcement, regulatory bodies, or legal advisors if we have reason to believe our website is being used unlawfully or improperly. This also applies if we need to enforce our Terms of Use or protect our legal rights. We only take this step if there are clear signs of misuse, ensuring our platform remains safe and our legal agreements are respected. Additionally, we are legally required to provide information to certain public bodies upon request, including authorities responsible for investigating financial or regulatory offences. These transfers are carried out because we have a legal obligation to do so (Article 6(1)(c) UK GDPR) alongside specific UK laws, or because we have a legitimate interest in preventing fraud and misuse of our services (Article 6(1)(f) UK GDPR). We only share data under our legitimate interests after making sure that our need to protect the service doesn't unfairly override your own privacy rights.
As our business grows and evolves, we may change our corporate structure for example, by forming, acquiring, or selling subsidiaries or parts of the company. In these types of transactions, customer information is often one of the business assets transferred. Should this happen, we will ensure your personal data continues to be protected in line with this Privacy Policy and UK data protection laws. We carry out these transfers based on our legitimate interests (Article 6(1)(f) UK GDPR) in managing and developing our business, ensuring that any changes to our structure do not unfairly impact your privacy rights.

8.3. Embedded Third-Party Content – YouTube

We have embedded YouTube videos on our website, which are stored at http://www.youtube.com and can be played directly from our website. If you have given us your consent to the immediate playback of YouTube videos via our cookie banner, content from the third-party provider YouTube (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland) will be loaded. This informs YouTube that you have accessed our site and provides it with the technical user data required for this purpose. In addition, YouTube is then able to implement tracking technologies, for example cookies to analyse usage. If you are logged in to YouTube at the same time, this information will be assigned to your YouTube user account. We have no control over how data is processed further by YouTube.

The legal basis for this data processing is your consent pursuant to Article 6(1) (a) GDPR. Your consent includes the reloading of content from YouTube and the transfer of the following data to YouTube:

  • the IP address of the end device;
  • the browser and, where relevant, the operating system of your end device;
  • the date and time of access; and
  • the name and URL of the requested file;

Further information on data processing by Google Ltd. and your rights is available at: https://policies.google.com/privacy.

The use of YouTube requires a connection to the servers of Google LLC, USA. Data could therefore be transferred to the USA. Google LLC, USA is a recipient in a third country (i.e. outside the EU or EEA). Google LLC, USA is certified under the Data Privacy Framework. An adequate level of data protection is assumed on the basis of the Data Privacy Framework.

You can change or withdraw your consent at any time. If you do withdraw it, it won't affect the legality of any processing we carried out while we had your permission. You can easily manage your choices by visiting our Cookie Policy and unchecking the boxes for the purposes you no longer agree to.

9. Forwarding to Our Own or Partner Websites

If you perform any other function via our website (e.g. to contact us) or select specific content (e.g. in the "Online shop" section), you will be taken to the corresponding sub-pages of our website www.lidl.co.uk or the partner websites located there. 
This Privacy Policy applies only to our own website. If you follow any links to external sites, please be aware that your personal information will be handled according to their own privacy policies, which will differ from ours. We have no control over how these third parties process your data, so we encourage you to review their privacy notices before sharing any information with them. 

10. Transfer of Your Personal Data to Third Countries

Sometimes we need to transfer your personal data to countries outside the UK.
For many countries, the UK Government has issued Adequacy Regulations. This means they have officially recognized that these countries have data protection laws comparable to our own. For partners based in the USA, this applies if they are certified under the UK Extension to the Data Privacy Framework (the UK-US Data Bridge). You can find the list of adequate countries on the ICO website.
If a country has not been granted this status, we protect your information using other legal safeguards. These typically include the UK’s International Data Transfer Agreement (IDTA) or the UK Addendum to standard contractual clauses. These are legal contracts that require the recipient to protect your data to the same high standards required in the UK.
Unless we tell you otherwise, your data is only transferred using one of these secure methods. If you have any questions about how we move your data, please contact our Data Protection Officer.

11. No Obligation to Provide Personal Data

The provision of personal data is neither legally nor contractually required, nor is it required in order to enter into an agreement. You are under no obligation to provide personal data. 

12. Your rights as the data subject

If the data processing is carried out on the basis of consent granted under Article 6(1) (a) or Article 9(2)(a) UK GDPR, you may withdraw that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.

Under Article 15(1) UK GDPR, you have the right to access information, free of charge, on the personal data stored about you.

If the statutory requirements are met, you also have a right to rectification (Article 16 UK GDPR), erasure (Article 17 UK GDPR) and restriction of processing (Article 18 UK GDPR) of your personal data.

If you have provided the processed data yourself, you have a right to data portability under Article 20 UK GDPR.

If the basis of processing is Article 6(1)  (f) UK GDPR, you have a right to object under Article 21 UK GDPR. If you object to processing, your data will only be processed thereafter if we can demonstrate compelling legitimate grounds for the processing which override your interests in the objection.

If you have any questions or wish to exercise your rights, you can contact the Data Protection Officer in writing or by e-mail (see section 1). You also have a right to lodge a complaint. If you reside in the United Kingdom and wish to raise a concern regarding how we handle your data, please use our complaints form. We aim to respond to all complaints within one calendar month. If you remain unhappy with our final response, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO) via their website at www.ico.org.uk or by calling 0303 123 1113.