Data Protection in the Parkside Application
(Version 4.1, dated 19/10/2026)
Thank you for your interest in using our PARKSIDE devices and our PARKSIDE application (hereinafter: "App") as well as for your interest in our Privacy Policy. We want you to feel comfortable and safe when you use our devices and App, and to know that one of the things that sets us apart is our commitment to protecting our customers' data. The following Privacy Policy is designed to inform you about the nature and scope of the processing of your personal data by Lidl Stiftung & Co. KG (also referred to in this policy as "Lidl", "we" and "us") when you use our App. Personal data is information that identifies you or could identify you directly or indirectly. The statutory basis for data protection is, in particular, the EU General Data Protection Regulation (GDPR).
1. How You Can Contact Us
Unless otherwise stated, the data controller responsible for data processing when using the App or the tools is Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74167 Neckarsulm, Germany, kontakt@lidl.com, ("Controller").
Should you have any general questions about our devices or our App, you can also reach us at kontakt@lidl.com.
Our company data protection officer can be contacted at the above address for the attention of the data protection officer or by e-mail at datenschutz@parkside-diy.com.
2. Overview: Why We Process Your Personal Data
We process your data so that
- we can enable you to use our App;
- you can sign up in our App;
- you can create a user account in the App;
- you can connect the App with your PARKSIDE devices;
- we can identify and remedy any errors;
- we can analyse your usage and thus expand our services in the App and our product range;
- you can contact us;
- we can forward you to our partner websites.
3. Using Our App
| Which personal data we process: | For what purposes we do this: | Our legal basis for this processing: | Our retention period: |
|---|---|---|---|
When you use our App, the following data is automatically transmitted to our servers and temporarily stored:
|
| The legal basis for this processing is Article 6(1) sentence 1(b) and (f) GDPR. Processing is necessary so that you can use the App as intended. We also have a legitimate interest in the listed purposes of data processing. | The specified data is collected in anonymised form and deleted after 14 months. The IP address is collected in anonymised form and deleted immediately after processing. |
The App requires an Internet connection for certain functions. The following data is processed:
|
| The legal basis for this processing—to the extent that it involves personal data at all—is Article 6(1) sentence 1(b) GDPR. Processing is necessary so that you can use the App as intended. | The data is stored in encrypted form on your end device for the purpose of establishing a connection for as long as you use the App.
|
If the App offers upload or download functions, access to the device's internal storage may be required. In accordance with the end device's settings, you will be asked in advance for your consent to access the internal storage. As a rule, no personal data is processed in this context.
|
|
4. Registration and Use of a PARKSIDE User Account
While it is possible to use our App without signing up, signing up enables you to enjoy additional functionalities.
To use additional features of the App—in particular, to connect devices to the App—you will need a user account, which you can create directly on the device. Simply follow the instructions for registration in the App. Once you have completed the registration process, you can then use your user account in the App.
We process your data as follows:
| Which personal data we process: | For what purposes we do this: | Our legal basis for this processing: | Our retention period: |
|---|---|---|---|
The following information is processed for registration
|
| The legal basis for the data processing is Article 6(1) sentence 1(b) GDPR. We provide you with the user account in accordance with the applicable Terms of Use and the functions available in the App.
| We store the data from your user account until the account is deleted. The following provisions apply to the deletion of your account and the storage of usage data:
|
The data listed above—in particular, the e-mail address used to manage your user account —will be processed.
|
| ||
To log in to the App, we use the following data from the user account:
|
|
5. Connecting Your PARKSIDE Devices to the PARKSIDE App
If you are logged in to the App with your user account, you can connect your devices to the App. Data processing begins when you connect your devices. The specific functions available to you after connecting will be displayed individually in the App for that device.
To establish this technical connection and make it functional, we process the following data:
| Which personal data we process: | For what purposes we do this: | Our legal basis for this processing: | Our retention period: |
|---|---|---|---|
To establish a Bluetooth connection between PARKSIDE devices and the App, we process:
|
| The legal basis for the data processing is Article 6(1) sentence 1(b) GDPR. We provide you with the App in accordance with the applicable Terms of Use and the functions available in the App.
| The data is stored for as long as the device is actively connected to the App.
|
PARKSIDE device data:
|
| The legal basis for the data processing is Article 6(1) sentence 1(b) GDPR. We provide you with the App in accordance with the applicable Terms of Use and the functions available in the App.
| The data is stored until the user account is deleted.
|
PARKSIDE device configuration data:
|
| ||
User data:
|
| ||
Device log data
|
| ||
To ensure that your device remains secure and functions smoothly, we process:
|
| The legal basis for this processing is Article 6(1)(c) GDPR. Under the EU Directive on Digital Content and the legislation implementing it into national law (in Germany, section 327f of the German Civil Code (Bürgerliches Gesetzbuch – BGB), we are required to provide security updates.
| Log files are anonymised after one year. All other data is stored until you initiate the deletion of your data in the PS App or you exercise your right to have your data erased. Your data is anonymised from the time of deletion. After your personal data has been anonymised, it can no longer be used to identify you. Once the data has been anonymised, we store it for up to 7 years. |
6. Use of SDKs and Similar App Technologies
When you use our App, we use software development kits (SDKs), local storage, and similar technologies to store or access information on your mobile device. These technologies store information in connection with the end devices you use. This does not mean, however, that we obtain direct knowledge of your identity.
These technologies used to process usage data are deployed for the following purposes, depending on the categories:
| Explanation of the categories: | For what purposes we use them: | Our legal basis for this processing: | Our retention period: |
|---|---|---|---|
Technically necessary: These are technologies without which you cannot use our services. Depending on the purpose, the following in particular are processed:
|
| The legal basis for using technically necessary technologies is section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG). Data is subsequently processed based on our legitimate interests pursuant to Article 6(1) sentence 1(f) GDPR. The legitimate interests arise from the purposes listed.
| Until the App is deleted from the device.
|
Preferences: Using these methods, we can take into account your actual or perceived preferences to enhance the user experience. |
| The legal basis for processing in these categories is your consent pursuant to section 25 (1) TDDDG. Data is subsequently processed also based on your consent pursuant to Article 6(1) sentence 1(a) GDPR.
| Until you withdraw your consent (by disabling it in the App settings).
|
Statistics: These methods enable us to tailor the design of our App by producing pseudonymised and, if applicable, cross-device statistics about how they are used. We use pseudonymised user profiles for this purpose:
|
| ||
Marketing: These methods enable us to use and evaluate our advertising measures in a targeted manner.
|
| ||
Marketing (own advertising) For in-app analytics and the display of personalised ads, we use the following advertising identifiers in addition to the individual user IDs and other identifiers mentioned above: (i) IDFA (Identifier for Advertising) for iOS devices; or (ii) the Android Advertising ID; or (iii) the Huawei ID; and a fingerprint of your device (in addition: time of access, country, language, local settings, operating system and version, and the app version). We also include user, device and web activity information, as well as app and event tokens, in this analysis. This data is processed exclusively on a pseudonymised basis. You can reset or disable the IDFA, Google GAID, Android Advertising ID, and Huawei ID at any time via your operating system. If the IDFA is not available, we use SkAdNetwork (Apple's Attribution API) to attribute installations of our App to an ad campaign. | |||
An overview of the SDKs and similar technologies we use, including the storage periods and any third-party providers involved, is available in the App menu under "Legal information".
You can change or withdraw your consent at any time. If you do withdraw it, it won't affect the legality of any processing we carried out while we had your permission. You can easily manage your choices by going to the settings in the App menu under "Legal Information" and disabling the respective toggle button for the purposes you no longer agree to.
7. Push Notifications
You can use the appropriate settings on your mobile device to opt in to receiving push notifications through our PARKSIDE App. If you have configured this setting on your mobile device, we process the following data:
| Which personal data we process: | For what purposes we do this: | Our legal basis for this processing: | Our retention period: |
|---|---|---|---|
|
| The legal basis for this processing is your consent pursuant to Article 6(1) sentence 1(a) GDPR, which you give by configuring the corresponding settings in your mobile device.
| Your data will be processed in connection with receiving push notifications for as long as you have the corresponding setting enabled in your mobile device.
|
8. Making Contact
| Which personal data we process: | For what purposes we do this: | Our legal basis for this processing: | Our retention period: |
|---|---|---|---|
We process the following data when you contact us:
|
| We process your data under Articles 6(1) sentence 1(f) GDPR. This is necessary to manage our relationship with you, answer your requests, and improve your overall experience as a user of our App.
| We delete or anonymise all information we receive from you when you make inquiries no later than 90 days after the final response is sent. Based on experience, we generally do not receive any questions concerning our responses after 90 days. If you assert your rights as a data subject under section 13, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.
|
If you request an automated data report within the App in accordance with the EU Data Act, we will process the data from your user account and the associated devices (see section 4).
|
| The legal basis for data processing for the purpose of identification and providing information is Article 6(1) sentence 1(c) GDPR, in conjunction with Articles 4 and 5 of the EU Data Act, as well as Article 6(1) sentence 1(f) GDPR. Our legitimate interest is to defend ourselves against any unlawful claims.
| If you exercise your rights to access information under the EU Data Act, your personal data will be stored for three years following our final response.
|
9. Forwarding to Our Own or Partner Websites
If you perform any other function via our App (e.g., under the menu item "More") or select special content (e.g., the contact form), the in-app browser will take you to the corresponding sub-pages of our websites www.parkside-diy.com or www.lidl.de or the partner websites located there. Our App offering and the online content you can access through the in-app browser may also contain links to other websites.
If you access websites via the in-app browser, your personal data may be processed by these websites in derogation from this Privacy Policy. This Privacy Policy applies solely to our App. Please refer to the privacy policies of the linked websites.
10. Recipients to Whom We Transfer Your Personal Data
10.1. Transfer to Service Providers Bound by Instructions
We also use external service providers bound by our instructions to process your data on our behalf. Such processors are carefully selected and also bound by contract in accordance with Article 28 GDPR. We currently transmit data to the following categories of service providers:
- IT service providers who process your personal data on our behalf and in accordance with our instructions. This enables us to guarantee secure IT operations.
- Service providers who process your personal data on our behalf and in accordance with our instructions in the area of customer service and marketing consulting.
10.2. Transfers within the Lidl Group
The data you provide during registration will be transferred within the Lidl Group for internal administrative purposes, including joint customer service, to the extent necessary.
We carry out these transfers based on our legitimate interests (Article 6(1)(f) GDPR) in transferring the data within the Group for administrative purposes, ensuring that any such transfers do not unfairly impact your privacy rights.
10.3. Other Data Transfers
If it is necessary to investigate unlawful or improper use of the website or for legal prosecution, personal data will be forwarded to law enforcement or other authorities and, if necessary, to injured third parties or legal advisors. However, this only happens if there are indications of unlawful or improper behaviour. Data may also be transferred if this serves to enforce terms of use or other legal claims. We are also legally obliged to provide information to certain public bodies on request. These are law enforcement authorities, authorities that prosecute administrative offences subject to fines, and the tax authorities. Any transfer of personal data is justified by the fact that (1) the processing is necessary to fulfil a legal obligation to which we are subject pursuant to Article 6(1) sentence 1(c) GDPR in conjunction with national statutory requirements to transfer data to law enforcement authorities or (2) we have a legitimate interest in transferring the data to the aforementioned third parties if there are indications of improper behaviour or to enforce our terms of use, other terms and conditions, or legal claims, and your rights and interests in the protection of your personal data within the meaning of Article 6(1) sentence 1(f) GDPR do not outweigh this interest.
As part of the further development of our business, the structure of our company may change as a result of changes to its legal form, or the formation, acquisition, or sale of subsidiaries, parts of the company, or components thereof. In such transactions, customer information may be transferred together with the part of the company to be transferred. Whenever personal data is transferred to third parties to the extent described above, we ensure that this is done in accordance with this Privacy Policy and the applicable data protection law. Any transfer of personal data is justified by the fact that we have a legitimate interest in adapting our legal form to the economic and legal circumstances as required and your rights and interests in the protection of your personal data within the meaning of Article 6(1) sentence 1(f) GDPR do not outweigh this.
11. Transfer of Your Personal Data to Third Countries
In order to provide our services, we also transfer your personal data to "third countries" (i.e., countries outside the European Economic Area). Such a transfer only takes place to countries in which the European Commission has certified a data protection standard comparable to that in the European Economic Area by means of an adequacy decision within the meaning of Article 45(1) GDPR. You can find a list of these countries here. We also transfer your data to countries in which an appropriate level of protection for your data has been ensured by sufficient guarantees, e.g., by concluding certain data transfer agreements with the recipients of the data. For this we use the European Commission's standard contractual clauses.
For further information or a copy of the guarantees, please contact our data protection officer (section 1).
12. No Obligation to Provide Personal Data
The provision of personal data is neither legally nor contractually required, nor is it required in order to enter into an agreement. You are under no obligation to provide personal data. However, without signing up or establishing an Internet connection, you will not be able to use some of the functions of our App or will not be able to use them to their full extent.
13. Your Rights as Data Subject
If the data processing is carried out on the basis of consent granted under Article 6(1) sentence 1(a) or Article 9(2)(a) GDPR, you may withdraw that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.
Under Article 15(1) GDPR, you have the right to access information, free of charge, on the personal data stored about you.
If the statutory requirements are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.
If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.
| If the basis of processing is Article 6(1) sentence 1(f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will only be processed thereafter if we can demonstrate compelling legitimate grounds for the processing which override your interests in the objection. |
If you have any questions or wish to exercise your rights, you can contact the data protection officer in writing or by e-mail (see clause 1). You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the state in which you live or where the controller is domiciled has jurisdiction.