When you visit the career website of Lidl, various information is exchanged between your device and our server. This may also include personal data. Information collected in this way is used to promote job opportunities at Lidl, provide information about Lidl, optimize our website and display advertising in your device's browser as well as to pursue the purposes set out in this privacy policy.

Purposes of data processing / legal bases:

When you visit our career website, the browser used on your device sends the following information automatically and without any action on your part to our website’s server:
  •    the IP address of the requesting web-enabled device; 
  •    the date and time of access; 
  •    the name and URL of the viewed file; 
  •    the website/application from which access is made (referrer URL);
  •    the browser you are using and, if applicable, the operating system of your Internet-enabled; computer and the name of your access provider;
  •    in general, your browsing data in accordance with the Cookie Policy available at section 1.3 of this privacy policy.
and stores it temporarily in log files for the following purposes:
  •    to browse the website;
  •    to ensure a smooth connection and that our website is easy to use; 
  •    to evaluate system security and stability;
  •    to comply with legal obligations. 

If you have consented in your browser or in the operating system or other setting in your device to geolocalization, we use this feature to offer you individualized services related to your current location (e.g. job offers closest to you). We only process your location data in this way for this function.

The processing of the aforementioned personal data is necessary as essential in order to provide the service requested by you through the features available on our website (article 6, paragraph 1, letter b) GDPR) and fulfil the obligation to comply with the applicable legislation (article 6, paragraph 1, letter c) GDPR).

Recipients /Categories of recipients:

For the aforementioned purposes, your personal data may be transferred to the following categories of recipients: (i) third-party suppliers of assistance and advice for Lidl with reference (e.g.) to the following sectors: technological, accounting, administrative, legal, insurance, IT; (ii) companies of the group to which Lidl belongs; (iii) subjects and authorities which right of access to personal data is recognized by law, regulations or provisions issued by the competent authorities. Depending on the specific case, these recipients will process such personal data as Data Controllers or Processors.

Storage period / Criteria for determining the storage period:

The data described in this section will be stored for a period of seven days and in any case for the period necessary to pursue the purposes set out in this policy. After then the personal data are automatically deleted. When you finish using our website, the geolocalization data is also deleted.

Data Controller, purpose of data processing and legal bases

Lidl Malta Ltd., with registered office in Vassallo Business Park, Burmarrad Road, Naxxar NXR 6345, Malta, is the Controller for data processing activities in the context of the use of cookies and other similar technologies for processing usage data on all (sub-) domains under www.jobs.lidl.com.mt.

When cookies and similar technologies are used to process usage data (in particular local storage), files are stored locally on your end device (laptop, tablet, smartphone or similar) when you visit our website. These files do not cause any harm to your end device, nor do they contain any viruses, trojans or other malware. They store information in connection with the end devices you use. This does not, however, mean that we will immediately become aware of your identity.
The use of cookies and other technologies serves the following purposes, depending on the category of the cookie or other technology:

• Technically necessary: These are cookies and similar technologies, without which you cannot use our services (e.g. to display our website/functions you have requested correctly, save login data).
• Convenience: These technologies allow us to take into account your actual or assumed preferences for the convenient use of our websites. For example, your preferences allow us to display our web pages in a language that is appropriate for you. It also helps us to avoid showing you offers that may not be available in your area. 
• Statistics: These technologies enable us to compile anonymous statistics on the use of our services in order to tailor them to your needs. This enables us to determine, for instance, how we can adapt our websites even better to the habits of the users.
• Marketing: These technologies enable us to display advertising content that is suitable for you, based on the analysis of your pattern of use. In this context, your pattern of use can also be tracked via different websites, browsers or terminal devices using a User ID (unique identifier).

You can find an overview of the cookies and other similar technologies used, including the respective processing purpose, the storage period and any third-party provider involved, here.
Within the scope of the use of cookies and similar technologies, depending on the purpose, the following categories of personal data are processed:

Technically necessary:
•    User entries to remember the input over several sub-pages (e.g. to select your preferred job offer in the section “current vacancies”);
•    Security-relevant incidents (e.g. detection of multiple failed login attempts);
•    Data to play multimedia content (e.g. playback of (product) videos selected by the user).

Convenience: 
•    User interface customization settings that are not linked to a permanent identifier (e.g. the active language selection or the specific display of search queries or maps in the section “current vacancies”).

Statistics:
•    Pseudonymized User profiles with information about the use of our websites. These include in particular:

1. browser-typ/ -version,
2. the operating system used,
3. referrer URL (the previously visited website),
4. host name of the accessing computer (IP address),
5. time of the server request,
6. individual user ID and
7. triggered events on the website (browsing patterns)

•    The IP address is anonymized, so that it cannot be traced back to your person.
•    Based solely on the user ID itself, we cannot draw any conclusions about your person.

Marketing:
•    Pseudonymized user profiles with information about the use of our website. These include in particular:

1. IP address,
2. individual user ID,
3. potential product interest and
4. triggered events on the website (browsing patterns).

•    The IP address is anonymized, so that it cannot be traced back to your person.
•    Based solely on the user ID itself, we cannot draw any conclusions about your person.

The legal basis for the use of convenience, statistical and marketing cookies and of similar technologies is your consent in accordance with article 6, paragraph 1, letter a) GDPR. The legal basis for the use of technically necessary cookies and similar technologies is article 6, paragraph 1, letter b) GDPR, i.e. we process your data to provide our services in the course of initiation or performance of the contract.

You can withdraw / adjust your consent for future processing at any point, without impacting the lawfulness of the processing based on the consent until the moment of withdraw. Simply click here and make your selection.

Cookies can also be blocked at a general level. However, this block would have an impact on the use of the website and the services offered therein. All the latest browsers allow you to change the settings on cookies that are usually found in the menu of your browser under 'options' or 'preferences'. To understand how to set them up, you can consult the following links:

Google Chrome
Microsoft Edge

Mozilla Firefox
Safari browser

For information on how to manage cookies through other browsers, it is useful to consult the online help files. If this information is not sufficient, we advise you to consult the "Help" section of the browser for more details.

Additionally, our site includes third party content. These third parties may use, with prior consent (where necessary), their own cookies as part of the content integrated on our site. Although these cookies are included in the overview of the cookies and other technologies used, we have no access to these cookies and we are in no way (joint) Data Controllers. For more information see paragraph 6 of this privacy policy.

Recipients / Categories of recipients:

Within the scope of data processing by means of cookies and similar technologies, we use specialised service providers, especially from the sector of online marketing. These service providers process your data on our behalf as processors, are in each case carefully selected and contractually obliged in accordance with article 28 GDPR, except for those third parties identified under paragraph 6 of this privacy policy. 
In the context of our collaboration with Google LLC and Facebook Ireland Limited, your personal data may be also processed on servers located in the USA for statistical and marketing purposes.

Storage period / Criteria to determine the storage period:

You can find the storage period for cookies and other similar technologies in our list of cookies. If "persistent" is stated in the "expiration" column, the cookie or other similar technology is stored permanently until the corresponding consent is revoked.

Purpose of data processing and legal basis:

Personal information that you provide to us by e-mail or over the telephone is of course treated confidentially. For this purpose we may process, for example, your name, surname, e-mail address, mailing address, telephone number.

We use your data solely for the purpose of processing your inquiry, resolving complaints and disputes as well as for complying with applicable legal obligations.

The processing of the aforementioned personal data is necessary as essential in order to provide the service requested by you by e-mail or over the telephone (article 6, paragraph 1, letter b) GDPR) and fulfil the obligation to comply with the applicable legislation (article 6, paragraph 1, letter c) GDPR).

Recipients / Categories of recipients:

For the abovementioned purposes, your personal data may be transferred to the following categories of recipients: (i) where necessary contracting parties (e.g. suppliers) in order to process your inquiry, (ii) third-party suppliers of assistance and advice for Lidl with reference (e.g.) to the following sectors: technological, accounting, administrative, legal, insurance, IT; (iii) companies of the group to which Lidl belongs; (iv) subjects and authorities which right of access to personal data is recognized by law, regulations or provisions issued by the competent authorities. Depending on the specific case, these recipients will process such personal data as Data Controllers or Processor.

Storage period / Criteria for determining the storage period:

All the personal data that you provide us in inquiries (suggestions, praise or criticism) via this website or by e-mail will be stored as long as necessary to pursue the purposes set out in this policy and will be deleted, no later than 90 days after the final response is sent, or anonymized, excepting for the case in which storage for a further period is required for any claims, requests by the competent authorities or for compliance with a legal obligation. In our experience, we generally receive no further inquiries to our responses after 90 days.

If you exercise your rights as a Data Subject, your personal data will be stored for a period of 5 years from our response, as evidence of the completeness of the information provided to you and of compliance with legal requirements.

The recipients / categories of recipients, including those located in a third country, outside the European Union (EU) or the European Economic Area (EEA), are indicated in correspondence with each type of processing activity described in this privacy policy. Some third countries are certified by the European Commission through the so-called adequacy decisions, when they guarantee a level of protection of personal data comparable to that within the EU and the EEA. The list of these third countries is available at the following link. If a comparable level of protection is not guaranteed in a third country, it will be our concern to verify that the level of protection of personal data is adequately guaranteed through other measures. These are for example binding corporate rules, standard data protection clauses adopted by the Commission, certificates or codes of conduct. For more information, please contact our Data Protection Officer.

1.6.1    YouTube Videos

YouTube videos, which are saved on www.YouTube.com, are made available and can be viewed directly from our website. These are included in the "advanced privacy mode", which means that your personal data is not stored by YouTube if it does not play the videos.

Further information about the purposes and methods of the processing of personal data carried out through YouTube, also on server located in the USA, can be found in the provider's privacy policy. It also contains information relating to your rights and system settings to protect your privacy. YouTube address and privacy policy: Google LLC, 1600 Amphitheater Parkway. Mountain View, CA 94043, USA.

1.6.2    Bing Maps

On our website we use the services offered by Bing Maps. In this way you can view and use the interactive maps directly from our website to find, for example, the job offers closest to you.

As part of browsing our website, the Bing Maps provider, i.e. the Microsoft Corporation, receives the information if you access the relevant page on our website. To use the Bing Maps functions, it is necessary to process your IP address. As a rule, this is processed on a Microsoft server in the USA. We have no possibility to influence the processing carried out through Bing Maps.

The processing of the aforementioned personal data is necessary as essential in order to provide the service requested by you through the features available on our website (article 6, paragraph 1, letter b) GDPR) and fulfil the obligation to comply with the applicable legislation (article 6, paragraph 1, letter c) GDPR).

Further information about the purposes and methods of the personal data processing carried out by Bing Maps can be found in the provider's privacy policy. It also contains information relating to your rights and system settings to protect your privacy. Address and privacy policy of the Bing Maps service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.

The section 1) of this privacy policy applies to the data processing carried out on the website www.jobs.lidl.com.mt by Lidl Malta Limited, Vassallo Business Park, Burmarrad Road, Naxxar NXR 6345, Malta (“Data Controller”). The Data Protection Officer for Lidl Malta Limited can be contacted using the above address or the e-mail address privacymt@lidl.com.mt.

Further information and additional contact persons regarding your rights as a Data Subject can be found in section 4.9 of this data protection information.

In order to apply for a position in the Lidl Group, you must register in the Recruiting Portal. When registering, you can either actively create a candidate profile or simply apply (see section 2.1.2 for the EasyApply function). If you choose the latter option, the profile will be created automatically.

In particular, your personal data are collected via the recruiting portal operated by Lidl Stiftung & Co. KG and forward to the Lidl company that advertises the job to which you apply. 

The Lidl company where you submit your application is the Data Controller of your application data. The Lidl company acting as data controller will be stated in the specific job advertisement associated with the position for which you are applying or will be disclosed by the responsible recruiter when he or she contacts you, assuming you have consented to global or local (limited to your country of residence) visibility of your profile.

After creating your candidate profile, you can upload your application documents and view and change your data, apply for other positions, withdraw individual applications or delete your entire profile, including all current applications. You can delete your profile at any time in the profile settings. 

The documents concerning your job application will be processed for the sole purpose of allowing the evaluation of your job application and hence the possibility of employment.

For this purpose the following personal data are processed:
  •    data you submit as part of your application, 
  •    any data contained in your attachments (e.g. resume).

Please note that we may need additional personal data from you later in the application process in order to complete your application. We will inform you about this in a separate e-mail.

We invite you not to send any data of a "particular" or sensitive nature (e.g. related to health, political opinions, sex life, etc.), except those strictly necessary in accordance with the law for the purpose of evaluating your job application.

Information in your profile including personal data, resume, cover letter and other documents will always be updated based on what you provided for your latest application. This allows you to reuse the personal data, resume, cover letter and other documents from your most recent application and adjust them if needed for your next application. 

You can also apply to several positions without logging into your profile by using the EasyApply function. Please be aware that if you do not upload new documents or adjust personal data, the recruitment portal will reuse the information and documents from your candidate profile and apply this information to your new application. In the background all your applications are added to your profile.

The Lidl company where you submit your application process your data for the sole purpose of conducting the recruitment process, allowing the evaluation of your job application and hence the possibility of employment, on the basis of Article 6, paragraph 1, letter b) GDPR, where applicable in conjunction with Article 88 GDPR, and the specific national regulations on the protection of personal data.

The personal data provided will not be disclosed in any way but may be communicated, for the aforementioned purposes, to the following categories of recipients:

• companies belonging to the same group of the Data Controller, also for administrative and accounting purposes; 
• persons, companies, associations or professional companies that provide services or activities of assistance and advice or provide services to the Data Controller, with particular but not exclusive reference to the matters of accounting, administrative, legal, tax and financial matters; 
• subjects whose faculty to access the data is recognized by law provisions and secondary legislation or provisions issued by authorities legally bound by law. 

The subjects belonging to the above categories will use the data as independent Data Controllers or as Data Controllers, duly appointed by the Data Controller pursuant to the Data Protection Act and to Article 28 of the GDPR.

The Lidl company where you submit your application uses data (excluding names and application documents submitted) from the recruitment processes (e.g., time taken to process applications) – without being able to identify you – to draw conclusions about the effectiveness of the recruitment process and leverages the insights gained therefrom to further simplify and streamline the process. The legal basis for this processing is Article 6, paragraph 1, letter f) GDPR. The legitimate interest lies in optimizing and simplifying the recruitment process.

Transfer to recipients in a third country

If we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if an adequate level of data protection has been confirmed for that third country by the European Commission, if an adequate level of data protection has been agreed with the data recipient (e.g., by means of EU standard contractual clauses) or if we have received your consent.

You can withdraw your application at any time.

In the event of rejection or employment, the data processed as part of the application process will be deleted after the end of the application process in accordance with the country-specific deadline of the Lidl company to which you have applied. 

Here you will find an overview of our country-specific deletion periods:

There is no legal or contractual obligation on your part to provide us with personal data. Without the data, we cannot contact you or carry out an application process. The data is also required if a contract is signed.

If you have any questions about the application process or the exercise of your rights in the processing of your applicant data (Data Subject rights), you can contact the following contact:

Lidl Malta Ltd.
Recruiting Department
Vassallo Business Park, 
Burmarrad Road, Naxxar NXR 6345, Malta
jobs@lidl.com.mt

Information and contact persons regarding your rights as a Data Subject can be found in section 4.9 of this data protection information.

If you have further questions about the processing of your data, you can contact the company-internal Data Protection Officer of Lidl Malta Ltd. (see section 3.6).

Lidl Malta Limited
Data Protection Officer
Vassallo Business Park,
Burmarrad Road, Naxxar NXR 6345, Malta

The Data Protection Officer of Lidl Malta Ltd. can be reached at the specified address for the attention of the Data Protection Officer or at privacyforyou@lidl.com.mt
Further information and contact persons regarding your rights as a Data Subject can be found in section 4.9 of this data protection information.