warning sign Your browser version is not supported

We have detected a browser version (Internet Explorer 9 or older) that is not supported by our application (support starts with IE11). This can lead to erroneous representations of individual components of the web site.

Data Privacy of www.info.lidl

(Version 1.0; Dated May 25, 2018)

Data Protection Provisions

Thank you for your interest in the data privacy on our website. When you visit our website we want you to feel safe and comfortable and for you to see our implementation of data protection as a customer-oriented quality feature.

The following data privacy policy will inform you of how and to what extent Lidl Stiftung & Co. KG processes your personal data. Personal data is information that can be directly or indirectly attributable to or assigned to you. The main legal basis for data privacy is the General Data Protection Regulation (GDPR).

Table of Contents

  1. Overview
  2. Visiting our website
  3. Contact form/E-mail contact/Phone calls/Customer surveys
  4. Online presence and website optimization
  5. Recipients outside the EU
  6. Your rights as data subject
  7. Contact
  8. Name and contact details of the controller responsible for the processing and contact details of the company's privacy officer

1. Overview

When you visit the website of Lidl Stiftung & Co. KG, various information is exchanged between your device and our server. This may also include personal data. Information collected in this way is used to optimize our website, among other things.

2. Visiting our website

Purpose of data processing/Legal basis:

When you visit our website, the browser used on your device sends the following information automatically and without any action on your part:

  • the IP address of the requesting web-enabled device
  • the date and time of access
  • the name and URL of the viewed file
  • the website/application from which access was made (referrer URL)
  • the browser you are using and, if applicable, the operating system of your Internet-enabled computer and the name of your access provider

to our website's server and stores it temporarily in log files for the following purposes:

  • To ensure a smooth connection
  • To ensure that our website/application is easy to use
  • To evaluate system security and stability.

If you have consented in your browser or in the operating system or other setting in your device to geolocalization, we use this feature to offer you individualized services related to your current location (e.g. the location of the nearest store). We only process your location data processed in this way for this function.

The legal basis for processing the IP address is Art. 6 (1) f) GDPR. Our legitimate interest arises from the purposes of data processing listed above.

Recipients/Categories of recipients:

We categorically rule out sharing this data with third parties.

Storage period/ Criteria for determining the storage period:

The data will be stored for a period of 7 days and then automatically deleted. When you finish using our website, the geolocalization data is deleted.

3. Contact form/E-mail contact/Phone calls/Customer surveys

Purpose of data processing/Legal basis:

Personal information that you provide to us when filling out contact forms, over the telephone or by e-mail is of course treated confidentially. We use your data solely for the purpose of processing your inquiry. The legal basis for the data processing is Art. 6 (1) f) GDPR. Our and your concurrent (legitimate) interest in this data processing arises from the aim of responding to your inquiry or resolving any problems and thus maintaining and encouraging your satisfaction as a customer or user of our website.

If you participate in one of our customer surveys, you do so on a purely voluntary basis. No information from these anonymous surveys is stored which will enable conclusions to be drawn about the participants. We only store the date and time of your participation. Any personal information which you provide when responding to our survey questions is considered to be given voluntarily and in accordance with the provisions of the GDPR. Please do not insert any names or similar information into free text fields which could allow conclusions to be drawn about you or other persons. If a declaration of consent is provided as part of a customer survey, Art. 6 (1) a) GDPR is the legal basis for the data processing based on this consent. If you have declared your consent in the context of a customer survey, you can revoke this consent at any time with future effect. Further details in these cases are governed in the special data protection principles of the customer survey concerned.

Recipients/Categories of recipients:

We categorically rue out any disclosure of the data to third parties. In exceptional cases, data is processed on our behalf by processors. These are carefully selected in each case, are also audited by us and bound by contract in accordance with Art. 28 GDPR.

It may also be necessary for us to share excerpts of your inquiry with contracting parties (e.g. suppliers, where inquiries are product-specific) in order to process your inquiry. In these cases, your inquiry will be anonymized in advance to ensure that the third party cannot relate it to you. If sharing your personal data is necessary in an individual case, we will inform you of this and obtain your consent.

The results of our customer surveys are only used for internal evaluations. We categorically rue out any disclosure of the data to third parties. We do not share personal data with third parties unless you have given your express consent for this.

Storage period/ Criteria for determining the storage period:

All the personal data that you send us in inquiries (suggestions, praise or criticism) via this website or by e-mail will be deleted or anonymized no later than 90 days after the final response is sent. In our experience, we generally receive no further inquiries to our responses after 90 days.

4. Online presence and website optimization

4.1 Cookies - General information

We use cookies on our website in accordance with Art. 6 (1) f) GDPR. Our interest in optimizing our website is considered to be a legitimate interest within the meaning of the above provision. Cookies are small files which are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device, they do not contain any viruses, Trojans or other malware. Cookies store information which relates to the specific device used. However, this does not mean that we obtain any direct knowledge of your identity through them. Using cookies enables us to design our services to be more enjoyable for you to use. For example, we use session cookies in order to identify that you have already visited individual pages of our website or you have already logged into your user account. These are automatically deleted after you leave our website. In addition, we use temporary cookies to improve user-friendliness, which are stored on your device for a specific period of time. When you revisit our website to use our services, it recognizes automatically that you have visited previously, any inputs you made or settings you used and which items you may have placed in your shopping cart, so that you do not need to repeat these actions.

We also use cookies to collect statistics on the use of our website in order to optimize our service and to display information that is specifically tailored to you. These cookies allow us to recognize that you have previously visited our website the next time you visit it. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. You can configure your browser not to store cookies on your computer or to always display a warning before a new cookie is saved. However, full deactivation of cookies may mean that you are not able to use all functions of our website.

You can find an overview of the cookies used and further information (e.g. storage period) and how to object to them in our Cookie Policy.

4.2 Google Analytics

Purpose of data processing/Legal basis:

For the purposes of demand-oriented design and ongoing optimization of our websites, we use Google Analytics on the basis of Art. 6 (1) f) GDPR, a web analytics service provided by Google Inc. ("Google"). Our legitimate interest arises from the purposes set out. In this context, pseudonymized usage profiles are created and cookies are used. The cookies generate the following information about your use of this website:

  • Browser type/version
  • Operating System used
  • Referrer URL (the page previously visited)
  • Host name of the accessing computer (IP address)
  • Time of the server request

The information is used to evaluate the use of our website, to compile reports about the website activities and to provide services associated with use of the web pages and use of the Internet for the purposes of market research and demand-oriented design of these Internet sites. The IP addresses are anonymized so that it not possible to assign them (known as IP masking).

You can prevent the installation of cookies in your browser software settings; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You can also prevent collection and processing of the data generated by the cookie and related to your use of the website (including your IP address) by Google by downloading and installing this browser add-on. As an alternative to the browser add-on, in particular when using browsers on mobile devices, you can prevent the collection of data by Google Analytics by clicking on this link. This creates an opt-out cookie to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website, and it is stored on your device. If you delete the cookies in this browser you will have to reset the opt-out cookie. Further information about data privacy with regard to Google Analytics can be found on the Google Analytics website.

Recipients/Categories of recipients:

The information generated in the cookie is transferred to a Google server in the USA and stored there. Your IP address is never associated with other data held by Google. This information may also be transferred to third parties if it is required to do so by law or if third parties process this data on Google's behalf.

Storage period/ Criteria for determining the storage period:

After the IP address has been anonymized, it is no longer possible to draw conclusions about you. The statistically processed data will be deleted in Google Analytics after 14 months. There is no longer any personal reference to individuals in reports generated on the basis of Google Analytics.

5. Recipients outside the EU

With the exception of the processing set out in Section 11, we do not share your data with recipients established outside the European Union or the European Economic Area. The processing specified in Section 11 does not result in any transfer of data to the server of the service providers of tracking or targeting technologies engaged by us. Some of these servers are based in the USA (you can find details on this in the statements related to the specific recipients). The data is transferred in accordance with the principles of the Privacy Shield and on the basis of the standard contract clauses of the European Commission.

6. Your rights as data subject

6.1 Overview

In addition to the right to revoke the consent you granted us, you also have the following rights provided the respective statutory requirements are met:

  • The right of access to information about your personal data in accordance with Art. 15 GDPR.
  • The right to rectification of inaccurate data or to have incomplete data completed in accordance with Art. 16 GDPR.
  • The right to erasure of your data stored with us in accordance with Art.17 GDPR.
  • The right to restriction of processing of your data in accordance with Art. 18 GDPR.


  • The right to data portability in accordance with Art. 20 GDPR.
  • The right to object in accordance with Art. 21 GDPR.

6.2 The right of access to information in accordance with Art. 15 GDPR

You have the right, pursuant to Art. 15 (1) GDPR, upon request to receive information free of charge on the personal data about you that have been stored with us. This includes in particular:

  • the purposes for which the personal data is processed;
  • the categories of personal data which are processed;
  • the recipients or categories of recipients to whom the personal data concerning you has been disclosed or will be disclosed;
  • the planned duration of the storage of your personal data or, if specific details are not possible, the criteria used to determine the period;
  • the right to rectification or erasure of your personal data, to restrict the processing by the controller or to object to such processing;
  • the right to lodge a complaint with a supervisory authority;
  • any available information about the source of the data, if the personal data is not collected from the data subject;
  • the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well the significance and the envisaged consequences of such processing for the data subject.

Where personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.

6.3 The right to rectification in accordance with Art. 16 GDPR

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of a supplementary statement.

6.4 The right to erasure in accordance with Art. 17 GDPR

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies:

  • the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
  • you withdraw the consent on which the processing was based in accordance with Art. 6 (1) a) or Art. 9 (2) a) GDPR, and there is no other legal ground for the processing;
  • you object to the processing pursuant to Art. 21 (1) or (2) GDPR, and there are no overriding legitimate reasons for processing;
  • the personal data has been unlawfully processed;
  • the personal data has to be erased for compliance with a legal obligation;
  • the personal data has been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

Where we have made the personal data public and are obliged to erase it, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform third parties which are processing your personal data that you have requested the erasure by such third parties of any links to, or copy or replication of, that personal data.

6.5 The right to restriction of processing in accordance with Art. 18 GDPR

You have the right to obtain from us the restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by you;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defense of legal claims or
  • you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

6.6 The right to data portability in accordance with Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without hindrance from us, where:

  • the processing is based on consent pursuant to Art. 6 (1) a) or Art. 9 (2) a) or on a contract pursuant to Art. 6 (1) b) GDPR; and
  • the processing is carried out by automated means.

In exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

6.7 Right to object in accordance with Art. 21 GDPR

Under the conditions set out in Art. 21 (1) GDPR, you have the right to object to data processing on grounds relating to your particular situation.

The above general right to object applies to all the processing purposes described in these Data Protection Provisions which are based on Art. 6 (1) f) GDPR. Unlike the specific right to object aimed at data processing for marketing purposes (see in particular points 9 and 11.6 above), we are only obliged to implement such a general objection under the GDPR if you specify grounds that take priority, e.g. the potential risk to life or health. In addition, you can contact the competent supervisory authority for Lidl Stiftung & Co. KG or the Privacy Officer of Lidl Stiftung & Co. KG.

7. Contact

7.1 Contacts for questions or to exercise your data protection rights

If you have any questions about our website or would like to exercise your rights with regard to the processing of your data (data protection rights), you can contact our Customer Services:

https://www.lidl.de/de/kontakt/s2483

7.2 Contacts for questions on data privacy

If you have any further questions concerning the processing of your data, you can contact the controller's privacy officer.

7.3 Right to raise an objection with the data protection supervisory authority

You also have the right to object at any time to the competent data protection supervisory authority. You can contact the data protection supervisory authority of the federal state where you are resident or the authority in the federal state where the controller is registered.

8. Name and contact details of the controller responsible for the processing and contact details of the company's privacy officer

These Data Protection Provisions apply to data processing by Lidl Stiftung & Co. KG, Stiftsbergstrasse 1, 74172 Neckarsulm, Germany ("controller") and to the website www.info.lidl. The company privacy officer for Lidl Stiftung & Co. KG can be contact using the above address, for the attention of the Datenschutzbeauftragter, or using the e-mail address datenschutz@lidl.com.