Data Protection in the Parkside Application

(Version 4.1, dated 19/10/2026)

Thank you for your interest in using our PARKSIDE devices and our PARKSIDE application (hereinafter: "App") as well as for your interest in our Privacy Policy. We want you to feel comfortable and safe when you use our devices and App, and to know that one of the things that sets us apart is our commitment to protecting our customers' data. The following Privacy Policy is designed to inform you about the nature and scope of the processing of your personal data by Lidl Stiftung & Co. KG (also referred to in this policy as "Lidl", "we" and "us") when you use our App. Personal data is information that identifies you or could identify you directly or indirectly. The statutory basis for data protection is, in particular, the EU General Data Protection Regulation (GDPR).

1. How You Can Contact Us

Unless otherwise stated, the data controller responsible for data processing when using the App or the tools is Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74167 Neckarsulm, Germany, kontakt@lidl.com, ("Controller").

Should you have any general questions about our devices or our App, you can also reach us at kontakt@lidl.com.

Our company data protection officer can be contacted at the above address for the attention of the data protection officer or by e-mail at datenschutz@parkside-diy.com.

2. Overview: Why We Process Your Personal Data

We process your data so that

  • we can enable you to use our App;
  • you can sign up in our App;
  • you can create a user account in the App;
  • you can connect the App with your PARKSIDE devices;
  • we can identify and remedy any errors;
  • we can analyse your usage and thus expand our services in the App and our product range;
  • you can contact us;
  • we can forward you to our partner websites.

3. Using Our App

Which personal data we process:For what purposes we do this:Our legal basis for this processing:Our retention period:

When you use our App, the following data is automatically transmitted to our servers and temporarily stored:

  • Your IP address;
  • Date, time, region, and time zone of your access;
  • The initial start-up of the App;
  • Connection data, such as the client request, the http response code, the amount of data transferred and session duration;
  • The version of the App you are using, including App updates;
  • System information, such as end device ID, version and name of the browser and operating system.
  • To enable you to use the App.
  • To ensure the proper functioning of our App.
  • To protect our systems.
  • To analyse errors.
  • To prevent improper or fraudulent behaviour.
  • To improve our App services.

The legal basis for this processing is Article 6(1) sentence 1(b) and (f) GDPR.

Processing is necessary so that you can use the App as intended.

We also have a legitimate interest in the listed purposes of data processing.

The specified data is collected in anonymised form and deleted after 14 months.

The IP address is collected in anonymised form and deleted immediately after processing.

The App requires an Internet connection for certain functions. The following data is processed:

  • The SSID;
  • The WiFi password;
  • Available networks.
  • To be able to use the App to its full extent.
  • To link WiFi-enabled Parkside devices to the App.

The legal basis for this processing—to the extent that it involves personal data at all—is Article 6(1) sentence 1(b) GDPR.

Processing is necessary so that you can use the App as intended.

The data is stored in encrypted form on your end device for the purpose of establishing a connection for as long as you use the App.

 

If the App offers upload or download functions, access to the device's internal storage may be required. In accordance with the end device's settings, you will be asked in advance for your consent to access the internal storage. As a rule, no personal data is processed in this context.

 

  • To be able to use the App to its full extent.

 

  

4. Registration and Use of a PARKSIDE User Account

While it is possible to use our App without signing up, signing up enables you to enjoy additional functionalities.

To use additional features of the App—in particular, to connect devices to the App—you will need a user account, which you can create directly on the device. Simply follow the instructions for registration in the App. Once you have completed the registration process, you can then use your user account in the App.

We process your data as follows:

Which personal data we process:For what purposes we do this:Our legal basis for this processing:Our retention period:

The following information is processed for registration

  • Your e-mail address;
  • Your country identifier;
  • Your selected password;
  • A user ID assigned by us;
  • Your acceptance of the Terms of Use;
  • Your IP address;
  • Your time zone;
  • Date and time of registration.
  • To provide you with a PARKSIDE user account.
  • To check that your e-mail address has been entered correctly.
  • To ensure that the decision to subscribe originates from the owner of the e-mail address and thus prevent misuse of the e-mail address.

The legal basis for the data processing is Article 6(1) sentence 1(b) GDPR. We provide you with the user account in accordance with the applicable Terms of Use and the functions available in the App.

 

We store the data from your user account until the account is deleted. The following provisions apply to the deletion of your account and the storage of usage data:

  • If you request the deletion of your account yourself, you have 7 days to reverse this action by signing in again. Once this period has expired, your data will be completely anonymised so that it can no longer be traced back to you.
  • User accounts that have not been logged into for a period of 2 years will be automatically deleted. We will notify you by e-mail 7 days before the scheduled deletion. You can prevent your account from being deleted by signing in again. If you fail to do so, the account will be deleted and your data will be anonymised.
  • Regardless of the account status, all log data generated is anonymised after one year at the latest, making it impossible to link the data to any specific individual.

The data listed above—in particular, the e-mail address used to manage your user account —will be processed.

 

  • To authenticate you and verify your authorisation each time you log in.
  • To enable you to reset the password.
  • To enforce the rights and obligations under the Terms of Use.
  • To enable us to contact you when we need to provide you with important information regarding the management of your user account (e.g., security notices, legal or technical notices, and updates).

To log in to the App, we use the following data from the user account:

  • Your e-mail address;
  • Your password;
  • A user ID automatically assigned by us.
  • To verify your identity as a user.
  • To unlock and use additional App functions
  • To enable you to link your device with the App (see section 5)

5. Connecting Your PARKSIDE Devices to the PARKSIDE App

If you are logged in to the App with your user account, you can connect your devices to the App. Data processing begins when you connect your devices. The specific functions available to you after connecting will be displayed individually in the App for that device.

To establish this technical connection and make it functional, we process the following data:

Which personal data we process:For what purposes we do this:Our legal basis for this processing:Our retention period:

To establish a Bluetooth connection between PARKSIDE devices and the App, we process:

  • The "find and pair" function provided by your mobile device for nearby Bluetooth devices (name may vary); this includes the location data of the mobile device;
  • The device data listed below.
  • To search for and find the devices.
  • To establish and maintain the connection between your mobile device and the PARKSIDE device.

The legal basis for the data processing is Article 6(1) sentence 1(b) GDPR. We provide you with the App in accordance with the applicable Terms of Use and the functions available in the App.

 

The data is stored for as long as the device is actively connected to the App.

 

PARKSIDE device data:

  • Factory information for the active devices;
  • Product master data for the devices.
  • To recognise your PARKSIDER device.
  • To provide you with software updates for your devices.

The legal basis for the data processing is Article 6(1) sentence 1(b) GDPR. We provide you with the App in accordance with the applicable Terms of Use and the functions available in the App.

 

The data is stored until the user account is deleted.

 

PARKSIDE device configuration data:

  • Custom device settings;
  • Activation time of the device used;
  • Information about the actions and automations you have defined.
  • To perform the functions you have selected.

 

 

User data:

  • Information from your user account (see section 4)
  • To attribute the device to your user account and thereby make access to additional settings and functions on the device contingent upon verification of your user account; this is important, for example, if you lend or resell your device.

 

Device log data

  • Information relating to device log files
  • To provide you with necessary functionalities such as battery charge and discharge cycles, operating and error logs, total tool runtime, and other functions.
  • To assist you with troubleshooting for service requests.

To ensure that your device remains secure and functions smoothly, we process:

  • Technical device data;
  • User data; and
  • Device log files
  • To ensure operation of all historical and current PARKSIDE devices; and
  • To ensure compatibility of these devices with future functions;
  • To ensure that PARKSIDE devices are fully functional on all common mobile devices.

The legal basis for this processing is Article 6(1)(c) GDPR. Under the EU Directive on Digital Content and the legislation implementing it into national law (in Germany, section 327f of the German Civil Code (Bürgerliches Gesetzbuch – BGB), we are required to provide security updates.

 

Log files are anonymised after one year. All other data is stored until you initiate the deletion of your data in the PS App or you exercise your right to have your data erased.

Your data is anonymised from the time of deletion. After your personal data has been anonymised, it can no longer be used to identify you.

Once the data has been anonymised, we store it for up to 7 years.

6. Use of SDKs and Similar App Technologies

When you use our App, we use software development kits (SDKs), local storage, and similar technologies to store or access information on your mobile device. These technologies store information in connection with the end devices you use. This does not mean, however, that we obtain direct knowledge of your identity.

These technologies used to process usage data are deployed for the following purposes, depending on the categories:

Explanation of the categories:For what purposes we use them:Our legal basis for this processing:Our retention period:

Technically necessary:

These are technologies without which you cannot use our services. Depending on the purpose, the following in particular are processed:

  • User inputs, in order to remember inputs across multiple App areas;
  • Authentication data to identify a user after signing in, enabling you to access authorised content;
  • Security-related events (e.g., identifying failed sign-in attempts);
  • To ensure the App functions.
  • To provide the functions you have requested (e.g. to keep you subscribed).
  • To manage consent given or not given in the context of consent management.

The legal basis for using technically necessary technologies is section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG). Data is subsequently processed based on our legitimate interests pursuant to Article 6(1) sentence 1(f) GDPR. The legitimate interests arise from the purposes listed.

 

Until the App is deleted from the device.

 

Preferences:

Using these methods, we can take into account your actual or perceived preferences to enhance the user experience.

  • To save customised user interface settings that are not linked to a permanent identifier.

 

The legal basis for processing in these categories is your consent pursuant to section 25 (1) TDDDG. Data is subsequently processed also based on your consent pursuant to Article 6(1) sentence 1(a) GDPR.

 

Until you withdraw your consent (by disabling it in the App settings).

 

Statistics:

These methods enable us to tailor the design of our App by producing pseudonymised and, if applicable, cross-device statistics about how they are used. We use pseudonymised user profiles for this purpose:

  • IP address (regularly anonymised);
  • Individual user ID;
  • Triggered in-app events (e.g., clicks on specific menu items);
  • App version;
  • Operating system used;
  • Time of the server request.
  • To enable us to analyse how or how often our App is used.
  • To analyse App crashes.
  • To tailor the App to users' habits.

Marketing:

These methods enable us to use and evaluate our advertising measures in a targeted manner.

  • IP address (regularly anonymised);
  • Individual user ID;
  • Triggered in-app events.
  • To be able to show you suitable advertising content based on the analysis of your pseudonymised usage behaviour (also across different end devices).
  • To measure the success of our marketing measures.

Marketing (own advertising)

For in-app analytics and the display of personalised ads, we use the following advertising identifiers in addition to the individual user IDs and other identifiers mentioned above:

(i) IDFA (Identifier for Advertising) for iOS devices; or (ii) the Android Advertising ID; or (iii) the Huawei ID; and a fingerprint of your device (in addition: time of access, country, language, local settings, operating system and version, and the app version). We also include user, device and web activity information, as well as app and event tokens, in this analysis. This data is processed exclusively on a pseudonymised basis.

You can reset or disable the IDFA, Google GAID, Android Advertising ID, and Huawei ID at any time via your operating system. If the IDFA is not available, we use SkAdNetwork (Apple's Attribution API) to attribute installations of our App to an ad campaign.

An overview of the SDKs and similar technologies we use, including the storage periods and any third-party providers involved, is available in the App menu under "Legal information".

You can change or withdraw your consent at any time. If you do withdraw it, it won't affect the legality of any processing we carried out while we had your permission. You can easily manage your choices by going to the settings in the App menu under "Legal Information" and disabling the respective toggle button for the purposes you no longer agree to.

7. Push Notifications

You can use the appropriate settings on your mobile device to opt in to receiving push notifications through our PARKSIDE App. If you have configured this setting on your mobile device, we process the following data:

Which personal data we process:For what purposes we do this:Our legal basis for this processing:Our retention period:
  • Your consent to receive push notifications;
  • Information for identifying the mobile device on which you are using the App via a push token;
  • Information for identifying your mobile end device;
  • Information about the software on your mobile end device;
  • Information about a detected issue in a paired PARKSIDE device, e.g., low battery (if the PARKSIDE device supports this function).
  • To send you notifications regarding the maintenance of your PARKSIDE device.
  • To help you identify and troubleshoot problems so that the various functions of PARKSIDE devices work properly.

The legal basis for this processing is your consent pursuant to Article 6(1) sentence 1(a) GDPR, which you give by configuring the corresponding settings in your mobile device.

 

Your data will be processed in connection with receiving push notifications for as long as you have the corresponding setting enabled in your mobile device.

 

8. Making Contact

Which personal data we process:For what purposes we do this:Our legal basis for this processing:Our retention period:

We process the following data when you contact us:

  • Contact via e-mail: your e-mail address;
  • Contact via telephone: your telephone number;
  • When contacting us via our contact form, the information provided (contact information, name, additional details);
  • Your concern.
  • To process your query for a specific purpose and to assist you with your query.

 

We process your data under Articles 6(1) sentence 1(f) GDPR. This is necessary to manage our relationship with you, answer your requests, and improve your overall experience as a user of our App.

 

We delete or anonymise all information we receive from you when you make inquiries no later than 90 days after the final response is sent. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject under section 13, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.

 

If you request an automated data report within the App in accordance with the EU Data Act, we will process the data from your user account and the associated devices (see section 4).

 

  • To identify you.
  • To respond to your request for information.

The legal basis for data processing for the purpose of identification and providing information is Article 6(1) sentence 1(c) GDPR, in conjunction with Articles 4 and 5 of the EU Data Act, as well as Article 6(1) sentence 1(f) GDPR. Our legitimate interest is to defend ourselves against any unlawful claims.

 

If you exercise your rights to access information under the EU Data Act, your personal data will be stored for three years following our final response.

 

9. Forwarding to Our Own or Partner Websites

If you perform any other function via our App (e.g., under the menu item "More") or select special content (e.g., the contact form), the in-app browser will take you to the corresponding sub-pages of our websites www.parkside-diy.com or www.lidl.de or the partner websites located there. Our App offering and the online content you can access through the in-app browser may also contain links to other websites.

If you access websites via the in-app browser, your personal data may be processed by these websites in derogation from this Privacy Policy. This Privacy Policy applies solely to our App. Please refer to the privacy policies of the linked websites.

10. Recipients to Whom We Transfer Your Personal Data

10.1. Transfer to Service Providers Bound by Instructions

We also use external service providers bound by our instructions to process your data on our behalf. Such processors are carefully selected and also bound by contract in accordance with Article 28 GDPR. We currently transmit data to the following categories of service providers:

  • IT service providers who process your personal data on our behalf and in accordance with our instructions. This enables us to guarantee secure IT operations.
  • Service providers who process your personal data on our behalf and in accordance with our instructions in the area of customer service and marketing consulting.

10.2. Transfers within the Lidl Group

The data you provide during registration will be transferred within the Lidl Group for internal administrative purposes, including joint customer service, to the extent necessary.

We carry out these transfers based on our legitimate interests (Article 6(1)(f) GDPR) in transferring the data within the Group for administrative purposes, ensuring that any such transfers do not unfairly impact your privacy rights.

10.3. Other Data Transfers

If it is necessary to investigate unlawful or improper use of the website or for legal prosecution, personal data will be forwarded to law enforcement or other authorities and, if necessary, to injured third parties or legal advisors. However, this only happens if there are indications of unlawful or improper behaviour. Data may also be transferred if this serves to enforce terms of use or other legal claims. We are also legally obliged to provide information to certain public bodies on request. These are law enforcement authorities, authorities that prosecute administrative offences subject to fines, and the tax authorities. Any transfer of personal data is justified by the fact that (1) the processing is necessary to fulfil a legal obligation to which we are subject pursuant to Article 6(1) sentence 1(c) GDPR in conjunction with national statutory requirements to transfer data to law enforcement authorities or (2) we have a legitimate interest in transferring the data to the aforementioned third parties if there are indications of improper behaviour or to enforce our terms of use, other terms and conditions, or legal claims, and your rights and interests in the protection of your personal data within the meaning of Article 6(1) sentence 1(f) GDPR do not outweigh this interest.

As part of the further development of our business, the structure of our company may change as a result of changes to its legal form, or the formation, acquisition, or sale of subsidiaries, parts of the company, or components thereof. In such transactions, customer information may be transferred together with the part of the company to be transferred. Whenever personal data is transferred to third parties to the extent described above, we ensure that this is done in accordance with this Privacy Policy and the applicable data protection law. Any transfer of personal data is justified by the fact that we have a legitimate interest in adapting our legal form to the economic and legal circumstances as required and your rights and interests in the protection of your personal data within the meaning of Article 6(1) sentence 1(f) GDPR do not outweigh this.

11. Transfer of Your Personal Data to Third Countries

In order to provide our services, we also transfer your personal data to "third countries" (i.e., countries outside the European Economic Area). Such a transfer only takes place to countries in which the European Commission has certified a data protection standard comparable to that in the European Economic Area by means of an adequacy decision within the meaning of Article 45(1) GDPR. You can find a list of these countries here. We also transfer your data to countries in which an appropriate level of protection for your data has been ensured by sufficient guarantees, e.g., by concluding certain data transfer agreements with the recipients of the data. For this we use the European Commission's standard contractual clauses.

For further information or a copy of the guarantees, please contact our data protection officer (section 1).

12. No Obligation to Provide Personal Data

The provision of personal data is neither legally nor contractually required, nor is it required in order to enter into an agreement. You are under no obligation to provide personal data. However, without signing up or establishing an Internet connection, you will not be able to use some of the functions of our App or will not be able to use them to their full extent.

13. Your Rights as Data Subject

If the data processing is carried out on the basis of consent granted under Article 6(1) sentence 1(a) or Article 9(2)(a) GDPR, you may withdraw that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.

Under Article 15(1) GDPR, you have the right to access information, free of charge, on the personal data stored about you.

If the statutory requirements are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.

If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.

If the basis of processing is Article 6(1) sentence 1(f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will only be processed thereafter if we can demonstrate compelling legitimate grounds for the processing which override your interests in the objection.

If you have any questions or wish to exercise your rights, you can contact the data protection officer in writing or by e-mail (see clause 1). You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the state in which you live or where the controller is domiciled has jurisdiction.