Data Protection on our Parkside Website

Version 7.1, dated 07.05.2026

Thank you for visiting www.parkside-diy.com and your interest in our Privacy Policy.
We want you to feel comfortable and safe when you visit our website, and to know that one of the things that sets us apart is our commitment to protecting our customers' data.

The following Privacy Policy is designed to inform you about the nature and scope of the processing of your personal data by Lidl Stiftung & Co. KG (also referred to in this policy as "Lidl", "we" and "us").

Personal data is information that could identify you directly or indirectly. The statutory basis for data protection is, in particular, the EU General Data Protection Regulation 2016/679 (“GDPR”) and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta).

1. How You Can Contact Us

Unless otherwise stated, the data controller responsible for data processing when visiting this website is Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74167 Neckarsulm, Germany, kontakt@lidl.com ("Controller").

Should you have any general questions, you can also reach us at kontakt@lidl.com.

Our company data protection officer can be contacted at the above address for the attention of the data protection officer or by e-mail at dataprotection_mt@parkside-diy.com.

2. Overview: Why We Process Your Personal Data

When you visit our website, we process your data so that

  • we can enable you to use our website;
  • we can identify and remedy any errors;
  • we can analyse your usage and thus expand our product offering;
  • you can contact us;
  • we can forward you to our partner websites.

3. Accessing Our Website

Which personal data we process:For what purposes we do this:Our legal basis for this processing:Our retention period:

When you visit our website, the following data is automatically transmitted to our servers and temporarily stored:

  • Your IP address;
  • The date and time of access;
  • Connection data, such as the client's request, the http response code and the amount of data transferred;
  • System information, such as device ID, version and name of the browser and operating system.
  • To enable you to use the website.
  • To ensure the proper operation of our website.
  • To protect our systems.
  • To analyse errors.
  • To prevent improper or fraudulent behaviour.

The legal basis for this processing is Article 6(1)(f) GDPR.

We have a legitimate interest in the listed purposes of data processing.

If data is used for purposes of preparing a contract, the legal basis for the data processing is Article 6(1)(b) GDPR.

We store the data for a period of 90 days. The data is automatically deleted thereafter.

 

If you have given consent for data processing on one or more occasions, we store the time stamp and fact that you have given your consent together with your user ID. If you do not give your consent, we store information to the effect that you have not consented to data processing.

 

  • To be able to prove your consent.

The legal basis for this processing is Article 6(1)(c) GDPR. We fulfil our legal obligation to be able to prove the lawfulness of data processing based on consent.

 

We store data demonstrating your consent for a maximum of 24 months after we have ceased processing your personal data based on your consent.

 

4. Use of Cookies and Similar Technologies

4.1. General Information

When cookies and similar technologies are used to process usage data (in particular local storage), files are stored locally on your end device when you visit our website. They store information in connection with the end device you use. This does not, however, mean that we will immediately become aware of your identity.

The use of cookies and similar technologies to process usage data serves the following purposes, depending on the category:

Explanation of the categories:For what purposes we use them:Our legal basis for this processing:Our retention period:

Technically necessary:

These are cookies and similar technologies without which you cannot use our services. Depending on the purpose, the following in particular are processed:

  • User inputs, in order to remember inputs across multiple sub-pages;
  • Security-related events (e.g., identifying failed sign-in attempts);
  • Data to play back multimedia content (e.g., playing (product) videos selected by you).
  • To display the website correctly (e.g., language, font type and colour).
  • To provide the functions you have requested (e.g. to keep you subscribed).
  • To manage consent given or not given in the context of consent management for cookies and similar technologies.

The use of technically necessary cookies is based on Regulation 5(2) of the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01).. Data is subsequently processed based on our legitimate interests pursuant to Article 6(1)(f) GDPR. The legitimate interests arise from the purposes listed.

 

You can find more information about cookies in our cookie policy.

 

Statistics:

These methods enable us to tailor the design of our services by producing pseudonymised and, if applicable, cross-device statistics about how they are used. We use pseudonymised user profiles for this:

  • IP address (regularly anonymised);
  • Individual user ID;
  • Events triggered on the website ("web browsing behaviour");
  • Browser type/browser version;
  • Operating system used;
  • Referrer URL;
  • Time of the server request.
  • To enable us to analyse how or how often our website is used.
  • To be able to adapt our website to user habits.

The legal basis for the use of cookies and similar technologies in these categories is Regulation 5(1) of the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01).

Data is subsequently processed based on your consent pursuant to Article 6(1)(a) GDPR.

 

Marketing:

These techniques enable us to use and evaluate our advertising measures in a targeted manner.

  • IP address (regularly anonymised);
  • Individual user ID;
  • Events triggered on the website ("web browsing behaviour").
  • To be able to show you suitable advertising content based on the analysis of your pseudonymised usage behaviour (also across different websites, browsers or end devices).
  • To measure the success of our marketing measures.

For an overview of the cookies and similar technologies we use, including the storage periods and any third-party providers involved, please see our cookie policy.

You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. You can find the option to withdraw your consent in our cookie policy. Simply uncheck the respective box to withdraw your consent for the given data processing purpose.

4.2. Responsibilities When Using Cookies and Similar Technologies

We (point 1) and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, act as joint controllers under Article 26 GDPR for data processing activities (marketing category) associated with the Meta Pixel.

Our advertising partner The UK Trade Desk Ltd, ℅ The Trade Desk, Inc., 42 N. Chestnut Street, Ventura, CA 93001, USA, processes the data as a separate controller to display personalised advertising and to measure success (marketing category).

4.3. Use of Google Analytics

We also use the Google Analytics web analytics service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 operates largely without using traditional cookies, but rather analyses your behaviour on our website.

What personal data is collected:For what purposes we use the data:Our legal basis for this processing:Our retention period:
  • IP address of the end device;
  • The date and time of access;
  • The name and URL of the requested file;
  • Browser used and, if applicable, operating system of the end device
  • To optimise user navigation.
  • To carry out statistical analyses, e.g., on user access.
  • To adapt our website to the needs of our visitors.

The legal basis for the use of cookies and similar technologies in these categories is Regulation 5(1) of the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01). Data is subsequently processed based on your consent pursuant to Article 6(1)(a) GDPR.

 

The user data collected via Google Analytics is deleted after 14 months.

 

You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. You can find the option to withdraw your consent in our cookie policy. Simply uncheck the respective box to withdraw your consent for the given data processing purpose.

5. Social Media Walls

We compile the content shared publicly and voluntarily by you and others on social media platforms using certain hashtags with reference to our Company on "social media walls". Below you will find an overview of the data we process:

Which personal data we process:For what purposes we use them:Our legal basis for this processing:Our retention period:

Depending on the type of content, the following data is processed:

  • Timestamp and other metadata of the posts;
  • Post ID;
  • Post content;
  • Pictures and videos, if any;
  • Links;
  • Comments and reviews;
  • Profile data (name, profile URL, profile picture);
  • User ID;
  • Website URL.
  • To present our company externally.
  • To publish marketing campaigns.
  • To publish prize draws.
  • To strengthen and promote customer loyalty.

The legal basis for this data processing is Article 6(1)(f) GDPR. The purposes listed constitute our legitimate interest.

 

The content displayed on the social media wall is processed until you delete your post on the respective social media platform. After that, the post will no longer be displayed by us and the data from it will no longer be processed.

 

6. Newsletter including Tracking and Profiling

We offer you the opportunity to subscribe to our PARKSIDE newsletter. Our newsletter contains information about products, offers, promotions, services, competitions, surveys and other events relating to PARKSIDE.

If you subscribe to our PARKSIDE newsletter and consent to receiving the newsletter by clicking on the confirmation link as part of the registration process, we process your personal data as follows:

Which personal data we process:For what purposes we use them:Our legal basis for this processing:Our retention period:

For signing up and the process for verifying that the decision to subscribe originates from you ("double opt-in process"):

  • Your e-mail address;
  • Your first name and surname (optional);
  • Your IP address;
  • Date and time of signing up and verification by clicking on the confirmation link.
  • To add you to our newsletter mailing list.
  • To check that your e-mail address has been entered correctly.
  • To ensure that the decision to subscribe originates from the owner of the e-mail address and thus prevent misuse of the e-mail address.

The legal basis for processing for inclusion in the distribution list is your consent pursuant to Article 6(1)(a) GDPR and Regulation 9 of the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01).

The legal basis for verification measures as part of the double opt-in process is Article 6(1)(f) GDPR. Our legitimate interest is to be able to trace any possible misuse of the e-mail address and, in case of doubt, to be able to prove that the actual owner of the e-mail address has subscribed.

We store the record of your consent for the duration of your subscription to the newsletter. We then store the data for a further three years after you have unsubscribed from the newsletter or revoked your consent by other means in order to be able to prove that our newsletter was lawfully sent until then.

Your e-mail address, your name (if provided) and your usage data will be deleted as soon as you unsubscribe from the newsletter.

When you regularly receive the newsletter, we process:
 

  • Your e-mail address;
  • Your consent;
  • Your usage of the newsletters:
    • Opening;
    • Clicking on links;
    • Other newsletter activities.
  • To send you the desired newsletter.
  • To verify that you have not withdrawn your consent.
  • To create personalised user profiles in order to improve newsletter content and tailor it to your interests.

Data processing in order to send you regular newsletters and analyse your usage behaviour is based on your consent in accordance with Article 6(1)(a) GDPR.

Cookies and similar technologies in connection with the newsletter are deployed on the basis of Regulation 5(1) of the Processing of Personal Data (Electronic Communications Sector) Regulations (S.L. 586.01)..

You may withdraw your consent to receive the newsletter and to the recording of newsletter activities at any time with effect for the future, e.g., by clicking on the unsubscribe link at the bottom of each newsletter. When you unsubscribe, we consider your consent to receive the newsletter and any newsletters based on it, as well as the recording of your usage behaviour, to be withdrawn. We will delete your usage data. The lawfulness of the processing carried out until such time as we receive your notice of withdrawal shall not be affected.

7. Making Contact

You have the option of contacting your preferred customer service centre via our website, e.g. the sales outlet where you purchased the PARKSIDE device. The following overview informs you about data processing by Lidl customer service.

If you wish to contact Kaufland customer service, you will be redirected to the Kaufland website. Please note the privacy policy published there.

Which personal data we process:For what purposes we do this:Our legal basis for this processing:Our retention period:

We process the following data when you contact us:

  • Contact via e-mail: your e-mail address;
  • Contact via telephone: your telephone number;
  • Your concern.
  • To process your query for a specific purpose and to assist you with your query.

The legal bases for the data processing is Article 6(1)(b) and Article 6(1)(f) GDPR. Our shared legitimate interest in this data processing arises from the objective of answering any inquiries and resolving any issues you may have and thus ensuring and improving your level of satisfaction as a customer or other user of our App.

 

We delete or anonymise all information we receive from you when you make inquiries no later than 90 days after the final response is sent. Based on experience, we generally do not receive any questions concerning our responses after 90 days.

If you assert your rights as a data subject pursuant to clause 12, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met.

 

8. Recipients to Whom We Transfer Your Personal Data

8.1. Disclosure to Service Providers Bound by Instructions

We also use external service providers bound by our instructions to process your data on our behalf. Such processors are carefully selected and also bound by contract in accordance with Article 28 GDPR. We currently transmit data to the following categories of service providers:

  • IT service providers who process your personal data on our behalf and in accordance with our instructions. This enables us to guarantee secure IT operations.
  • Service providers who process your personal data on our behalf and in accordance with our instructions in the area of customer service and marketing consulting.

8.2. Other Data Transfers

If it is necessary to investigate unlawful or improper use of the website or for legal prosecution, personal data will be forwarded to law enforcement or other authorities and, if necessary, to injured third parties or legal advisors. However, this only happens if there are indications of unlawful or improper behaviour. Data may also be transferred if this serves to enforce terms of use or other legal claims. We are also legally obliged to provide information to certain public bodies on request. These are law enforcement authorities, authorities that prosecute administrative offences subject to fines, and the tax authorities. Any transfer of personal data is justified by the fact that (1) the processing is necessary to fulfil a legal obligation to which we are subject pursuant to Article 6(1)(c) GDPR or (2) we have a legitimate interest in transferring the data to the aforementioned third parties if there are indications of improper behaviour or to enforce our terms of use, other terms and conditions, or legal claims, and your rights and interests in the protection of your personal data within the meaning of Article 6(1)(f) GDPR do not outweigh this interest.

As part of the further development of our business, the structure of our company may change as a result of changes to its legal form, or the formation, acquisition, or sale of subsidiaries, parts of the company, or components thereof. In such transactions, customer information may be transferred together with the part of the company to be transferred. Whenever personal data is transferred to third parties to the extent described above, we ensure that this is done in accordance with this Privacy Policy and the applicable data protection law. Any transfer of personal data is justified by the fact that we have a legitimate interest in adapting our legal form to the economic and legal circumstances as required and your rights and interests in the protection of your personal data within the meaning of Article 6(1)(f) GDPR do not outweigh this.

8.3. Embedded Third-Party Content – YouTube

We have embedded YouTube videos on our website, which are stored at http://www.youtube.com and can be played directly from our website. If you have given us your consent to the immediate playback of YouTube videos via our cookie banner, content from the third-party provider YouTube (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland) will be loaded. This informs YouTube that you have accessed our site and provides it with the technical user data required for this purpose. In addition, YouTube is then able to implement tracking technologies, for example cookies to analyse usage. If you are logged in to YouTube at the same time, this information will be assigned to your YouTube user account. We have no control over how data is processed further by YouTube.

The legal basis for this data processing is your consent pursuant to Article 6(1)(a) GDPR. Your consent includes the reloading of content from YouTube and the transfer of the following data to YouTube:

  • the IP address of the end device;
  • the browser and, where relevant, the operating system of your end device;
  • the date and time of access; and
  • the name and URL of the requested file;

Further information on data processing by Google Ltd. and your rights is available at: https://policies.google.com/privacy.

The use of YouTube requires a connection to the servers of Google LLC, USA. Data could therefore be transferred to the USA. Google LLC, USA is a recipient in a third country (i.e. outside the EU or EEA). Google LLC, USA is certified under the Data Privacy Framework. An adequate level of data protection is assumed on the basis of the Data Privacy Framework.

You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. You can find the option to withdraw your consent in our cookie policy. Simply uncheck the respective box to withdraw your consent for the given data processing purpose.

9. Forwarding to Our Own or Partner Websites

If you perform any other function via our website (e.g. to contact us) or select specific content (e.g. in the "Online shop" section), you will be taken to the corresponding sub-pages of our website www.lidl.de or the partner websites located there.

If you access these links, your personal data may be processed on these websites in deviation from this Privacy Policy. This Privacy Policy only applies to our website. We ask you to observe the privacy policies of the linked websites.

10. Transfer of Your Personal Data to Third Countries

In order to provide our services, we also transfer your personal data to "third countries" (i.e., countries outside the European Economic Area). Such a transfer only takes place to countries in which the European Commission has certified a data protection standard comparable to that in the European Economic Area by means of an adequacy decision within the meaning of Article 45(1) GDPR. You can find a list of these countries here. We also transfer your data to countries in which an appropriate level of protection for your data has been ensured by sufficient guarantees, e.g., by concluding certain data transfer agreements with the recipients of the data. For this we use the European Commission's standard contractual clauses.

For further information or a copy of the guarantees, please contact our data protection officer (clause 1).

11. No Obligation to Provide Personal Data

The provision of personal data is neither legally nor contractually required, nor is it required in order to enter into an agreement. You are under no obligation to provide personal data.

12. Your rights as the data subject

If the data processing is carried out on the basis of consent granted under Article 6(1)(a) or Article 9(2)(a) GDPR, you may withdraw that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.

Under Article 15(1) GDPR, you have the right to access information, free of charge, on the personal data stored about you.

If the legal conditions set out in the GDPR are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.

If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.

If the basis of processing is Article 6(1)(f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will only be processed thereafter if we can demonstrate compelling legitimate grounds for the processing which override your interests in the objection.

If you have any questions or wish to exercise your rights, you can contact the data protection officer in writing or by e-mail (see clause 1). You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the country in which you reside or where the controller is based has jurisdiction.