Data protection parkside-diy.com

(Version 3.0 status 28.06.2023)


Thank you for visiting our website www.parkside-diy.com. The following data protection notice informs you about the nature and scope of the processing of your personal data when you use our website. Personal data is information that can be directly or indirectly attributed to you. In particular, the General Data Protection Regulation (GDPR) serves as the legal basis.

 

1. Overview

With accessing our website various types of information are exchanged between your end device and our server. This may also involve personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in the browser of your terminal device. 

 

2. Accessing our website

Purposes of data processing / legal basis:
When you visit our website, the browser used on your end device automatically and without your intervention

  • the IP address of the requesting internet-enabled device,
  • the request from the internet-enabled device;
  • the http response code,
  • the date and time of access,
  • the volume of data transferred,
  • the name and URL of the file accessed;
  • the website / application from which access was made (referrer URL),
  • the browser and operating system you are using and
  • the name of your access provider

sent to the server of our website and temporarily stored in a so-called log file for the following purposes stored:

  • ensuring a smooth connection,
  • ensuring comfortable use of our website / application,
  • to evaluate system security and stability.

The legal basis for the processing of the IP address is Article 6 (1) (f) GDPR. Our legitimate interest lies in the purposes of data processing listed above. 


Recipients / categories of recipients:
In the context of the aforementioned data processing operations, your data will also be processed on our behalf by processors for the purpose of operating and developing the website. These are carefully selected, audited by us and also bound by contract in accordance with Article 28 GDPR.


Storage period / criteria for determining the storage period:
The data will be stored for a period of 90 days and then automatically deleted.

 

3. Contact


Purposes of data processing / legal basis:
Personal data that you send us by e-mail will of course be treated confidentially. We use your data exclusively for the purpose of processing your request.

If you contact us by telephone, we will connect you with Lidl customer service. In doing so, we will transmit your phone number for the purpose of forwarding it to the customer service you have selected.

The legal basis for the data processing is Article 6(1)(f) and Article 6(1)(b) GDPR. Our shared (legitimate) interest in this data processing arises from the objective of answering any inquiries and resolving any issues you may have and thus ensuring and improving your level of satisfaction as a customer or other user of our website.


Recipients/categories of recipient:
As a rule, we do not transfer the data to third parties. In exceptional cases, we will have a processor process the data on our behalf. Such processors are carefully selected, audited by us and bound by contract in accordance with Article 28 GDPR.

If you call and wish to be connected to the respective customer service, that customer service will receive your telephone number. 

Furthermore, information on how Lidl process your data is available here:

  • Lidl: https://www.lidl.de/c/datenschutz/s10007528 
     


Storage period / criteria for determining the storage period:
We will delete or anonymize any personal information that you provide to us in response to inquiries (suggestions, praise or criticism) by e-mail or by telephone no later than 95 days after after the final response has been given. Experience has shown that after 95 days there are generally no more questions about our responses. If you assert your rights as a data subject (see clause 9), your personal data will be stored for 3 years after the final response to prove that we have provided you with comprehensive information and that the statutory requirements have been complied with.

 

4. Use of cookies and similar technologies to process usage data


Purposes of data processing / legal basis:
We, Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, are responsible for the processing of data in connection with the use of what is known as such Cookies and others Usage data processing technologies on www.parkside-diy.com and some of the websites embedded there.

In addition to us, Criteo SA, 32 Rue Blanche, 75009 Paris, France (Criteo), Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook) and RTB House GmbH, Kurfürstendamm 226, 10719 Berlin, Germany (RTB House) are also joint data controllers within the meaning of Article 26 of the RODO with respect to the processing of marketing cookies (see cookies under the "Marketing" category in our cookie information). In the aforementioned context of co-ownership, we use, with your express consent, certain technologies of the aforementioned partners to record your browsing behavior and display personalized advertisements to you on our website or on our partners' platforms. In this way, our partners may also combine data collected on our website with data stored in their archives.

In addition to us, you may also contact our partners listed above to exercise the rights of the data subject set forth below in connection with the processing referred to in this paragraph.

For further information on the processing of personal data and the exercise of data subject rights, please refer to the respective privacy policies of our partners:

- Criteo: https://www.criteo.com/en/privacy /

- Facebook: https://en-en.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

- RTB House: https://www.rtbhouse.com/privacy-center/services-privacy-policy / 


Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. The cookie stores information that arises in connection with the specific device used. However, this does not mean that we are directly aware of your identity.

The use of cookies and the other technologies for processing usage data serves the following purposes, depending on the category of the cookie or the other technology:

  • Technically necessary: These are cookies and similar methods without which you cannot use our services (e.g. to correctly display our website / functions requested by you, to save your login in the login area, etc.).
  • Convenience: These techniques allow us to take into account your actual or perceived preferences for the convenient use of our website. For example, we can use your settings to display our website in a language that suits you.
  • Statistics: These techniques allow us to compile anonymous statistics on the use of our services. This allows us, for example, to determine how we can adapt our website even better to the habits of users.
  • Marketing: This allows us to show you advertising content based on an analysis of your usage behavior. Your usage behavior can also be tracked via various websites, browsers or end devices using a user ID (unique identifier).

An overview of the cookies and other technologies used along with the respective processing purposes, the storage periods and any integrated third-party providers can be found here. 

When using cookies and similar technologies to process usage data, the following types of personal data are processed in particular:

Technically necessary:

  • user input to retain input across multiple sub-pages;
  • security-related events;
  • data required for the playback of multimedia content (e.g., playback of (product) videos selected by the user).

Convenience:

  • User interface customization settings that are not linked to a permanent identifier (e.g., the active language selection or the specific presentation of search queries).

Statistics:

  • Pseudonymised user profiles containing information about the use of our website. These include in particular:
    • browser type / version;
    • the operating system used,
    • referrer URL
    • host name of the accessing computer (IP address),
    • time of the server request,
    • individual user ID and events triggered on the website (surfing behavior).
  • The IP address is regularly anonymized so that it cannot be used to identify you.

Marketing:

  • Pseudonymised user profiles containing information about the use of our website. These include in particular:
    •  IP address,
    • individual user ID;
    • potential product interests;
    • events triggered on the website (surfing behavior).
  • The IP addresses are regularly anonymized so that they cannot be used to identify you personally.

The legal basis for using convenience, statistics and marketing cookies is your consent in accordance with Article 6 (1) (a) GDPR. The legal basis for the use of technically necessary cookies is Article 6 (1) (b) GDPR, which means that we process your data in order to provide our services in the course of initiating or executing a contract.

You may withdraw / amend your consent at any time with effect for the future without this affecting the lawfulness of the processing carried out on the basis of the consent prior to its withdrawal. Just click here and make your selection. By unchecking the box, you simply and easily revoke your consent for the respective processing purposes.

Recipients / categories of recipients:
In the context of data processing by means of cookies and similar technologies, we may use specialized service providers, particularly in the field of online marketing, to process usage data. They process your data on our behalf as processors, each of which is carefully selected and bound by contract in accordance with Article 28 GDPR. All companies listed as providers in our Cookie Policy are active as processors for us, unless they have been named as (joint) controllers at the beginning of this clause. 

As part of our cooperation with Google LLC, the aforementioned data is generally also processed on servers in the USA for statistical and marketing purposes.

If you have consented to processing for marketing purposes, we may share your user ID and the associated usage profiles with third parties via the providers of advertising networks.

Storage period / criteria for determining the storage period:
You can change the storage time for cookies Cookie Policy. Where the information in the column “Expiry” is indicated as “persistent”, the cookie will be stored permanently until the respective consent is revoked

 

5. Revocation / opt-out option

In addition to the options set out in clause 4, you can also prevent the targeting technologies described in clause 4 by setting the appropriate cookie settings in your browser, e. g.by rejecting certain or all cookies. Please note that if you do so, you may not be able to use all the functions of this website.
You also have the option of preventing interest-based personalized advertising with the help of Preferential Manager.

 

6. Transmission to recipients in a third country

If we transfer data to recipients in a third country (registered office outside the European Economic Area), this can be found in the information on the recipients / categories of recipients in the description of the respective data processing. The European Commission has issued so-called adequacy decisions to certify that some third countries have a level of data protection comparable to that in the European Economic Area. You can view a list of these countries here. If there is no comparable data protection standard in a given country, we ensure that data protection is adequately guaranteed by other measures. This is possible, for example, via binding corporate regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct. Please contact our data protection officer (clause 11) for further information.

 

7. Embedded content

We have included YouTube videos in our online offering which are stored on http://www.youtube.com and can be played directly from our website. These are all integrated in the 'extended data protection mode', which means that no data about you as a user is transferred to YouTube if you do not play the videos. The data is only transferred when you play the videos. We have no influence on this data transfer.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy. YouTube address and privacy policy: Google LLC, 1600 Amphitheater Parkway. Mountain View, CA 94043; https://policies.google.com/privacy 

 

8. No obligation to provide personal data

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also under no obligation to provide the personal data. However, if you fail to do so, you may not be able to use our website in full.

 

9. Your rights as a data subject

Overview
In addition to the right to revoke your consent given to us, you have the following further rights if the respective legal requirements are met:

  • Right toInformationabout your personal data stored by us in accordance with Article 15 GDPR,
  • Right toCorrectionincorrect or incomplete data pursuant to Article 16 GDPR;
  • Right toDeletionYour data stored with us in accordance with Article 17 GDPR,
  • Right toRestriction of processingYour data pursuant to Article 18 GDPR;
  • Right toData portabilitypursuant to Article 20 GDPR,
  • Right to objectin accordance with Article 21 GDPR.

Right of access pursuant to Article 15 GDPR
Pursuant to Article 15 (1) GDPR, you have the right to request information free of charge about the personal data stored about you. This includes in particular:

  • the purposes for which the personal data are processed;
  • the categories of personal data being processed;
  • the recipients or categories of recipients to whom the personal data relating to you has been or will be disclosed.
  • the planned duration of the storage of your personal data or, if specific information is not available, the criteria for determining the duration of storage.
  • the existence of a right to rectification or erasure of your personal data, a right to restrict processing by the controller or a right to object to such processing.
  • the right to lodge a complaint with a supervisory authority;
  • all available information on the origin of the data if the personal data is not collected from the data subject;
  • the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject.

If personal data are transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

Right to rectification pursuant to Article 16 GDPR
You have the right to demand that we correct any incorrect personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to erasure pursuant to Article 17 GDPR
You have the right to request that we erase personal data concerning you without undue delay if one of the following reasons applies:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • You withdraw your consent on which the processing was based pursuant to point (a) of Article 6 (1) or point (a) of Article 9 (2) GDPR and there is no other legal ground for the processing;
  • You object to the processing in accordance with Article 21 (1) or (2) GDPR and there are no overriding legitimate grounds for the processing in the case referred to in Article 21 (1) GDPR;
  • the personal data has been processed unlawfully;
  • the deletion of the personal data is necessary to comply with a legal obligation;
  • the personal data was collected in relation to information society services offered pursuant to Article 8 (1) GDPR.

If we have made the personal data public and are obliged to delete it, we shall take appropriate measures, taking into account the available technology and the implementation costs, to inform the third parties processing your data that you have also requested the deletion of all links to the personal data Request data or copies or replications of such personal data.

Right to restriction of processing pursuant to Article 18 GDPR
You have the right to request that we restrict processing if one of the following conditions applies:

  • you contest the accuracy of the personal data;
  • the processing is unlawful and you request that the use of the personal data be restricted instead of erased;
  • the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them to assert, exercise or defend legal claims; or
  • You have lodged an objection to the processing pursuant to Article 21 (1) GDPR as long as it has not yet been established whether the legitimate grounds of the controller override those of the data subject.

Right to data portability pursuant to Article 20 GDPR
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, if

  • the processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) or on a contract pursuant to Article 6 (1) (b) GDPR; and
  • the processing is carried out using automated procedures.

When exercising your right to data portability, you have the right to have the personal data transferred directly from us to another controller, insofar as this is technically feasible.

Right to object pursuant to Article 21 GDPR
Subject to the conditions set out in Article 21 (1) GDPR, you may object to data processing on grounds relating to your particular situation.

The above general right to object applies to all processing purposes described in this Privacy Policy, which are processed on the basis of Article 6 (1) (f) GDPR. In contrast to the special right to object to data processing for advertising purposes, under the GDPR we are only obliged to implement such a general objection if you give us reasons of overriding importance, e.g., a possible risk to life or health. It is also possible to contact the supervisory authority responsible for Lidl Stiftung Co. KG or the data protection officer of Lidl Stiftung Co. KG.

Right to lodge a complaint with the data protection supervisory authority pursuant to Article 77 GDPR
You also have the right to lodge a complaint with the competent data protection supervisory authority at any time. For this purpose, you can contact the data protection supervisory authority of the federal state in which you have your place of residence or the authority in Baden-Württemberg as the state in which the Lidl companies are domiciled.

 

10. Exercising Your Rights

If you have any questions about the website or to exercise your rights as a data subject, please contact customer service:

•    Germany: datenschutz@parkside-diy.com
•    Spain: protecciondedatos@parkside-diy.com
•    Czech Republic: ochranaosobnichudaju@parkside-diy.com
•    Poland: ochronadanychosobowych@parkside-diy.com 
•    Slovakia: ochranaosobnychudajov@parkside-diy.com
•    Belgium: privacy@parkside-diy.com 
•    Netherlands: gegevensbescherming@parkside-diy.com
•    France: protectiondesdonnees@parkside-diy.com 
•    Slovenia: varstvopodatkov@parkside-diy.com 
•    Hungary: adatvedelem@parkside-diy.com

  • Austria:  Datenschutz_aut@parkside-diy.com
  • Lithuania:  privatumas@parkside-diy.com
  • Croatia:  zastitapodataka@parkside-diy.com 
  • Greece:  prosopikadedomena@parkside-diy.com 
  • Cyprus:  dataprotection_cy@parkside-diy.com
  • Finland:  tietosuoja@parkside-diy.com
  • Italy / Malta:  Personaldata@parkside-diy.com 
  • Great Britain:  Privacy_gb@parkside-diy.com 
  • Portugal:  privacidade@parkside-diy.com
  • Sweden:  dataskydd@parkside-diy.com
  • Switzerland:  datenschutz_ch@parkside-diy.com
  • Bulgaria:  Privacy_bg@parkside-diy.com
  • Romania:  protectiadatelor@parkside-diy.com 
  • Serbia:  privatnost@parkside-diy.com 
  • Estonia:  andmekaitse@parkside-diy.com 
  • Latvia:  datuaizsardziba@parkside-diy.com

 

 

11. Name and contact details of the controller and contact details of the company data protection officer

These data protection provisions apply to the processing of data by Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, and to the website parkside-diy.com.
The company data protection officer of Lidl Stiftung & Co. KG can be contacted at the above address for the attention of the data protection officer or at the contact address specified in clause 10.