Below we would like to inform you, in accordance with Article 13 of the EU General Data Protection Regulation (GDPR), about the processing of your personal data in the context of the handling of your inquiries by Lidl’s customer service.

The Data Controller according to article 4, paragraph 1, number 7) of the GDPR is Lidl Cyprus, Industrial Area, 2, Pigasou Street, CY-7100 Aradippou - Larnaka. If necessary, you can contact Lidl Cyprus at the following number 800 944 04 or by email at info@lidl.com.cy.

Personal information provided by you when filling out our contact form, by telephone or submitted by e-mail, letter, through social media is, of course, treated as confidential. We use your data exclusively for the purpose of responding to customer enquiries. When contacting us, please enter only the personal data required to answer your inquiry. The legal basis for the data processing is Article 6(1)(f) or Article 6(1)(b) of the GDPR. Our shared legitimate interest in this data processing arises in this respect from the purpose of answering your questions, solving any problems you may have and receiving and enhancing your satisfaction as a customer.

As a rule, we do not transfer the data to third parties. In exceptional cases, we will have a data processor process the data on our behalf. Such data processors are carefully selected, audited by us and bound by contract in accordance with Article 28 GDPR.

In addition, for requests for assistance/support in relation to legal warranty or the purchase of spare parts for our products, it may be necessary to transmit the request including your personal data necessary to handle your request to the relevant contracted external service partner. In such cases, we will inform you in advance of the transfer of your personal information and will give you the contact details of the relevant external service partner. The personal data forwarded to our responsible external service partner is your full name, your address, your e-mail address and your contact telephone number. The purpose of this transmission is to handle your request and to process your case. The legal basis for the processing is the performance of the contract (Article 6(1)(b) GDPR). In such cases, the data controller is the relevant external service provider and the data protection policy of that external service provider applies to the data processing.

All personal information that you send to us in case of inquiries (suggestion, praise or criticism), when filling out contact forms, by telephone or submitted by e-mail, letter, fax, through social media will be deleted by us no later than 90 days after the given final response to you, or securely anonymized. The retention of 90 days is explained by the fact that you, as a customer, may occasionally need to contact us regarding the same issue again and we have to be able to refer to the previous correspondence. Experience has shown that usually after 90 days, questions about our answers no longer occur.

Occasionally it may happen that for legal reasons (e.g. in insurance cases) we need to store your personal details for longer period. In these cases, we do not save your information longer than the statutory retention requirements allow.

If you exercise your data rights under Clause 18, the response to your request will be documented for a period of 3 years. The period begins with the final reply to you. The storage takes place as proof of compliance with the legal requirements.

This website uses the "Google Signals" function to expand statistical reports created with Google Analytics to include a cross-device evaluation of visitor flows. Google signals only applies to users who are logged into the sessions with a Google account and have activated the "Personalized advertising" function in the Google account. Google signals do not give us any more in-depth information about specific individuals or ways to uniquely identify you or the device you are using. Google only provides us with general demographic information (gender, age group), possible interests and, if applicable, information on whether stationary Lidl branches have been visited. If you wish to deactivate this function for yourself, you can set this in your Google account. You can find more information about the customization options for Google advertising settings at https://support.google.com/ads/answer/2662856. You can find more information about Google signals here.

According to the GDPR, you as the data subject also have the following general rights:

• According to article 15, paragraph 1 of the GDPR, you have the right, upon request, to obtain information free of charge about the personal data stored by Lidl concerning your person.

• In addition, if the legal prerequisites exist, you are entitled to obtain rectification (article 16 of the GDPR), cancellation (article 17 of the GDPR) and restriction of the processing (article 18 of the GDPR) of your personal data.

• If the data processing is based on article 6, paragraph 1, letter e) or f) of the GDPR, you are entitled to exercise the right to object pursuant to article 21 of the GDPR. When an objection is entered, the processing of data ceases, unless Lidl can prove compelling and legitimate reasons requiring the continuation of the further data processing, which outweigh the interest of the person concerned in the objection.

• If you have provided the processed data yourself, you are entitled to data portability according to article 20 of the GDPR.

Insofar as the data processing is based on consent pursuant to article 6, paragraph 1, letter a) or article 9, paragraph 2, letter a) of the GDPR, you can revoke the consent at any time with future effect, without affecting the lawfulness of the previous processing of data.

You also have the right to lodge a complaint with the appropriate Data Protection Supervisory Authority. Responsible Data Protection Supervisory Authority for Cyprus is Office of the Commissioner for Personal Data Protection (Kypranoros 15, Nicosia 1061, Cyprus, P.O.Box 23378, 1682 Nicosia, Cyprus, Tel: +357 22818456, Email: commissionerdataprotection.gov.cy).

In the above cases, if you have any open-ended questions or complaints please contact the Data Protection Officer in writing or by email.

Below are the contact details of our Data Protection Officer:

Lidl Cyprus,

Data Protection Officer

Industrial Area, 2, Pigasou Str, CY- 7100, Aradippou - Larnaca

dataprotection@lidl.com.cy