jobs.lidl.mk

Privacy Policy

Data protection at Lidl North Macedonia
(Version 1.0; Status 25/04/2023)

 

Data protection information for our career website as well as data protection information included in our Recruitment Privacy Policy for Applicants as a document that supplements all our existing data protection information.

Thank you for your interest in data protection at Lidl. We want to offer you a safe and secure experience when visiting our online portals and applying for career opportunities at Lidl on the career site). Protecting your personal data is just one way of offering quality customer service.

1.  On the career website

The following data protection notices inform you about in what way and to what extent your personal data is processed when you visit our career website. Personal data is information that can be directly or indirectly traced back to your person. The General Data Protection Regulation (GDPR) and the Law on Personal Data Protection (LPDP)  serve as the legal basis for data protection.

1.1. Overview

When you access our career website, various information is exchanged between the device you are using and our server, to include personal data. The information collected is used, among other things, to optimize our career website or to display advertising in your devices' browser.

1.2. Accessing our website

Purposes of data processing/ legal bases:

When you visit our career website, your device's browser will automatically and without any action on your part send the following data to our career website’s server:

  • the IP address of the requesting internet-enabled device,
  • the date and time of access,

  • the name and URL of the retrieved file,
  • the website/ application from which the access was made (referrer URL),
  • the browser you are using and, if applicable, the operating system of your internet-enabled computer and
  • the name of your access provider

This data is temporarily saved in a so-called log file for the following purposes:

  • to ensure a smooth connection,
  • to ensure seamless use of our website/ application,
  • to evaluate system security and stability.

If you have consented to the so-called geolocation in your browser or in the operating system or other settings of your device, we will use this function to offer you individual services (e.g. the location of the closest job offer) based on your current location. We process your location data exclusively for this purpose.

The legal basis for processing the IP address is Article 6 (1) (f) GDPR and Article 10 (1) 6) of the LPDP. Our legitimate interest lies in the purposes of data processing listed above.

Retention period/ criteria for determining the retention period:

The data is stored for a period of seven days and then automatically deleted. If you stop using our career website, the geolocation data will be deleted.

1.3. Use of cookies and similar techniques to process usage data

Purposes of data processing/ legal bases:

We, Company for retail LIDL North Macedonia DOOEL Skopje, with registered seat at bul. Kiro Gligorov no.2/3, Gazi Baba, Skopje, Republic of North Macedonia, use so-called cookies on our websites.

Your consent includes the use of cookies and other technologies to process usage data on all (sub) domains at www.jobs@lidl.mk.

In addition to us, the joint controllers within the meaning of Article 26 GDPR and Article 30 of the LPDP responsible for data processing in connection with marketing cookies (see cookies under the "Marketing" category in our cookie notices) are Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook), and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (LinkedIn). As part of our cooperation with our partners on our website, we use their special technologies with your consent to record your browsing behavior so that we can tailor the ads of our customers to you on our website or platform. In connection with this, our partners may also compare the data collected on our website with the data in their own databases.

When exercising your rights as a data subject described below with regard to the data processing described in this paragraph, you can also contact either us or our aforementioned partners.

You can also find further information on the data processing and on exercising your rights as a data subject in the privacy policies of our respective partners:

Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware. Information relating to the specific device used is stored in the cookie. However, this does not mean that we gain immediate knowledge of your identity.

The use of cookies and other technologies for processing usage data serves the following purposes, depending on the category of the cookie or other technology:

  • Technically necessary: These are cookies and similar methods without which you cannot use our services (for example, to display our website correctly/ functions you want to use, to save your login in the login area).
  • Ease of use: With the help of this technology, we can take into account your actual or presumed preferences for easy use of our career website. For example, your settings allow us to display our careers website in a language that works best for you. In addition, we avoid showing you options that may not be available in your region.
  • Statistics: allow us to compile pseudonymized statistics on the use of our services. This allows us to determine, for example, how we can adapt our career website even better to suit the needs of the website users.
  • Marketing: This allows us to display advertising content that suits you based on the analysis of your usage behavior. Your usage behavior can also be tracked via different websites, browsers or devices using a user ID (unique identifier).

Here you can find an information overview of the cookies and other technologies used along with the respective processing purposes, retention periods and any third-party providers involved.

When using cookies and similar techniques for processing usage data, the following types of personal data are processed in particular depending on the purpose:

Technically necessary:

  • Consent to cookie preferences.

Ease of use

  • Settings that serve to optimize the output of the cards.
  • Output of recently viewed jobs.
  • Output of saved jobs.

Statistics:

  • Pseudonymized user profiles with information about the use of our career website. These include in particular:
    • Browser type/ version,
    • Operating system used,
    • Referrer URL (the previously visited page),
    • Host name of the accessing computer (IP address),
    • Time of the server request,
    • individual user ID and
    • Events triggered on the career website (surfing behavior).
  • The IP address is regularly anonymized so that it cannot be traced back to you.
  • No conclusions can be drawn about your person from the user ID itself.

Marketing

  • Pseudonymized user profiles with information about the use of our website. These include in particular:
    • IP address,
    • individual user ID;
    • potential product interests,
    • events triggered on the website (surfing behavior).
  • The IP addresses are regularly anonymized, so that no conclusions can be drawn about your person.
  • No conclusions can be drawn about your person from the user ID itself. We may share the user ID and the associated usage profiles with third parties via the providers of advertising networks.

The legal basis for using ease of use, statistics and marketing cookies is your consent in accordance with Article 6 (1) (a) GDPR and Article 10 (1) 1) of the LPDP. The legal basis for the use of technically necessary cookies is Article 6 (1) (f) GDPR and Article 10 (1) 6) of the LPDP, i.e., we process your data on the basis of our legitimate interest in being able to present the website with its statements in a fully functional manner.

You can withdraw/ adjust your consent at any time with effect for the future. Just click here and make your selection. By removing the corresponding checkmark, you simply and easily withdraw your consent for the respective processing purposes.

Recipients/ categories of recipients:

When processing data by means of cookies and similar techniques for processing usage data, we may use specialized service providers, in particular from the area of online marketing. These process your data on our behalf as contract processors, are carefully selected and contractually bound in accordance with Article 28 GDPR and Article 32 of LPDP. All companies listed as providers in our Cookies Policy act as processors who provide data processing for us.

As part of our cooperation with Google LLC and Facebook Ireland Limited, the above-mentioned data is usually also processed on servers in the US for statistical and marketing purposes.

Retention period/ criteria for determining the retention period:

The retention period for cookies can be found in our Cookie Policy. If the information “persistent” is indicated in the “Expiration” column, the cookie is stored permanently until the corresponding consent is withdrawn. The retention period of the session storage is limited to the respective session and ends when the browser is closed.

1.4. Email contact/phone calls

Purposes of data processing/ legal bases:

Personal data that you provide to us by e-mail or telephone will of course be treated confidentially. We use your data exclusively for the purpose of processing your request. The legal basis for data processing is Article 6 (1) (f) of GDPR and Article 10 (1) 6) of the LPDP or Article 6 (1) (b) GDPR and Article 10 (1) 2) of the LPDP. Our and your concurrent (legitimate) interest in data processing arises from the goal of answering your request, solving any existing problems and thus maintaining and promoting your satisfaction as a user of our career website.

Recipients/categories of recipients

We generally do not forward data to third parties. As an exception, data is processed on our behalf by data processing providers. These are carefully selected, are also audited by us and contractually bound in accordance with Article 28 GDPR and Article 32 of LPDP.

Retention period/criteria for determining the retention period:

All personal data that you send us by e-mail or telephone in the event of inquiries (suggestions, praise or criticism) will be deleted or anonymized by us at the latest 12 after the final response. Experience has shown that after 3 months there are usually no more inquiries regarding our answers. When asserting your rights as a data subject (see below), your personal data will be stored for 12 months after the final response to prove that we have provided you with comprehensive information and that the legal requirements are complied with.

1.5. Transmission to recipients in a third country

If we transfer data to recipients in a third country (headquartered outside the European Economic Area), you can read about this in the information on the recipients/ categories of recipients in the description of the respective data processing. The European Commission certifies that some third countries have a data protection standard that is comparable to the level of data protection in the European Economic Area. A list of these countries can be found at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html. If there is no comparable data protection standard in a third country, we ensure that data protection is sufficiently guaranteed by other measures via, for example, binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates, or recognized codes of conduct. Please contact our data protection officer (Section 1.7), should you like to receive more information.

1.6. Embedded content

1.6.1. YouTube Videos

We have integrated YouTube videos into our online content, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", meaning that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data be transferred. We have no influence on this data transfer.

Further information on the purpose and scope of data processing by YouTube, which also takes place on servers in the US, can be found in the privacy statements of the provider. There you will also find further information about your rights in this regard and setting options to protect your privacy. YouTube address and privacy policy: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy .

1.6.2. Bing Maps

We use Bing Maps on our career website. This enables us to display interactive maps directly on the career website and allows you to conveniently use the map function to find job offers in your area.

We use Bing Maps for an appealing presentation of our online services and to easily find the locations indicated by us on the website. This is based on a legitimate interest within the meaning of Article 6 (1) (f) GDPR and Article 10 (1) 6) of the LPDP.

By visiting our careers website, the provider of Bing Maps, Microsoft Corporation, receives the information that you have accessed the corresponding sub-page of our careers website. To use the functions of Bing Maps, it is necessary to process your IP address as part of Internet communication. This data is usually processed on a Microsoft server in the US.

We have no influence on the specific data processing by Bing Maps. Further information on the purpose and scope of data processing by Bing Maps can be found in the privacy statements of the provider. There you will also find further information about your rights in this regard and setting options to protect your privacy. Address and privacy policy of the provider of Bing Maps: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.

1.7. Name and contact details of the person responsible for processing as well as contact details of the company data protection officer

These data protection regulations apply to the data processing by Company for retail LIDL North Macedonia DOOEL Skopje, with registered seat at bul. Kiro Gligorov no.2/3, Gazi Baba, Skopje, Republic of North Macedonia “responsible person”) and to the career website jobs.lidl.mk. The data protection officer of Company for retail LIDL North Macedonia DOOEL Skopje can be reached at the above address for the attention of the data protection officer or at data.protection@lidl.mk.

Further information and additional contact persons regarding your rights as a data subject can be found in Section 3.9 of this data protection information.

2. Recruitment Privacy Policy for applicants

This Recruitment Privacy Policy explains how LIDL SEVERNA MAKEDONIJA DOOEL Skopje ("LIDL") processes your personal data when you apply for a position advertised by us. It also describes your data protection rights, including the right to object to some of LIDL’s processing operations.

This Recruitment Privacy Policy supplements our existing Privacy Policy, which gives you specific information on how we process personal data obtained from you related to non-application-specific topics.

2.1. Data controller and contact details

Responsible for the processing of personal data is the company stated in the job application, i.e. LIDL NORTH MACEDONIA DOOEL Skopje, blvd. Kiro Gligorov no. 2 - 3rd floor, Skopje, Republic of North Macedonia, corporate ID no. 7485620.

2.2. Collection of personal data

Within the recruitment process, we collect and store the following categories of personal data about you:

  • Your name, address and contact details, including email address and telephone number;
  • Details of your qualifications, skills, experience and employment history;
  • Information about your current and desired levels of remuneration; and
  • Other relevant information related to a specific job opening.

We collect personal data directly from you or from our external partners, e.g. job boards. We can also obtain information from professional social networks, such as LinkedIn and from other publicly accessible sources (only information relevant to your professional life) for the purposes of actively approaching you with job offers or for the purpose of confirming the accuracy of the information presented by you within the course of the application.

2.3 Purpose of processing of personal data

Your personal data may be used for following purposes:

  • To assess your application for the job offered and to communicate with you within the recruitment process;
  • To contact you in case of an alternative career opportunity at LIDL;
  • To contact you following your unsolicited application; and
  • Based on your consent to send you personalized information on current open job postings.

2.4. Legal basis for processing

 Personal data within the recruitment process will be used for the assessment of your application and, if an employment relationship is established, also for the execution of the employment relationship. Providing your personal data as part of the application process is voluntary. However, the provision of personal data is necessary for the processing of your application or the conclusion of an employment contract with us.

When you subscribe for our job boards to receive information on current open job postings the relevant legal basis is your consent.

Furthermore, we may process personal data about you where this is necessary to defend ourselves against legal claims arising from the application process that are brought against us. The legal basis for this is Article 10 (1) paragraph 2 and 6 of the Macedonian Law on Personal Data Protection (LPDP).

2.5. Data sharing

We may transfer your personal data to companies affiliated with us provided this is permissible within the scope of the purposes and legal bases outlined above. If you do not wish to be further considered for relevant job offerings, you can request the deletion of your candidate profile, see section “Data retention”.

Furthermore, your information may be shared internally for the purposes of the recruitment exercise. This includes members of the HR and recruitment team, interviewers involved in the recruitment process, managers in the business area with a vacancy and IT staff if access to the data is necessary for the performance of their roles.

Personal data may be processed on our behalf on the basis of contracts pursuant to Article 32 of the LPDP, especially by providers of systems for applicant management and selection procedures. We do not share data with third parties that have no reference to our application management and application procedures or other use cases we describe in section "Purpose of processing personal data".

2.6. Rights of the data subjects in relation to personal data and how to exercise them

2.6.1. Right of access

You can request information about your personal data (commonly known as data subject access request). You can exercise this right by contacting us under the above-mentioned contact details of the controller.

2.6.2. Right to rectification and erasure

If you wish to update the personal data provided to us, you can send us an email to jobs@lidl.mk or you modify the data yourself in the relevant application within your candidate profile. Under certain conditions, you can ask us to erase your personal data.

2.6.3. Right to restriction of processing

Under certain conditions you have the right to restrict the processing of your personal data, e.g., when you want us to verify the accuracy of your personal data.

2.6.4. Right to data portability

Under certain conditions you have the right to receive the personal data concerning you which you provided to us in a structured, commonly used, and machine-readable format.

2.6.5. Right to object

If we process your data to protect legitimate interests, you may object to such processing for reasons arising from your particular situation.

If you would like to exercise any of these rights or have any questions, please contact our data protection officer available at the following e-mail address , data.protection@lidl.mk

Furthermore, you have the right to lodge a complaint with the Agency for personal data protection concerning the processing of your personal data.

2.7. Data retention

We retain your data for a period of one year from the date of collection of the data. We retain your personal data in that period in case there is a relevant job offering for which you will be a fitting candidate. You can request the deletion of your candidate profile or the withdrawal of your application by contacting us at jobs@lidl.mk.

In case your application is successful we may store your personal data within the subsequent employment in compliance with the applicable legal regulations.

2.8. Withdrawal of your consent to the processing of personal data

If you have given your consent to the processing of your data, you can withdraw your consent at any time. Such a withdrawal influences the permissibility of processing your personal data after you have given it to us.

3. Your rights as a data subject

3.1. Overview

In addition to the right to withdraw your consent, you are entitled to the following additional rights if the respective legal requirements are met:

  • Right to information about your personal data stored by us in accordance with Article 15 GDPR and Article 19 of the LPDP,
  • Right to correct incorrect or complete incomplete data in accordance with Article 16 GDPR and Article 20 of the LPDP,
  • Right to deletion of your data stored by us in accordance with Article 17 GDPR and Article 21 of the LPDP,
  • Right to restrict the processing of your data in accordance with Article 18 GDPR and Article 22 of the LPDP,
  • Right to data portability under Article 20 GDPR and Article 24 of the LPDP,
  • Right of objection under Article 21 GDPR and Article 25 of the LPDP.

3.2. Right to information under Article 15 GDPR and Article 19 LPDP

In accordance with Article 15 (1) GDPR and Article 19 (1) LPDP, you have the right to request information about your personal data stored by us free of charge. This includes in particular:

  • the purposes for which your personal data is processed;
  • the categories of personal data that are processed;
  • the recipients or categories of recipients to whom your personal data has been or will be disclosed;
  • the planned storage duration of your personal data or, if specific information is not possible, criteria for determining the storage period;
  • the existence of a right to rectify or delete your personal data, a right to restrict the processing by the responsible person or a right to object to this processing;
  • the existence of a right to lodge a complaint with a supervisory authority;
  • all available information about the origin of the data if the personal data is not collected from the data subject;
  • The existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and Article 26 (1) and (4) LPDP and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

If personal data is transferred to a third country or to an international organization, you have the right to be informed about the appropriate guarantees under Article 46 GDPR and Article 50 LPDP in connection with the transfer.

3.3. Right to rectification under Article 16 GDPR and 20 Article LPDP

In the event of incorrect data, you have the right to request that we correct your personal data which we shall comply with immediately (based on GDPR) or within 15 days as of the submission of your request at the latest (based on LPDP). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of an additional explanation.

3.4. Right to deletion (“right to be forgotten”) according to Article 17 GDPR and Article 21 LPDP

You have the right to request that we delete your personal data, which we shall comply with immediately (based on GDPR)  or within 30 days as of the submission of your request at the latest (based on LPDP), if one of the following reasons applies:

  • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • You withdraw your consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and Article 10 (1) 1) and Article 13 (2) LPDP, and there is no other legal basis for the processing;
  • You object to the processing under Article 21 (1) or (2) GDPR and Article 25 (1) or (2) LPDP and in the case of Article 21 (1) GDPR and Article 25 (1) LPDP, there are no overriding legitimate grounds for processing;
  • the personal data was processed unlawfully;
  • The deletion of the personal data is necessary to fulfill a legal obligation;
  • The personal data was collected in relation to the services offered by the information company in accordance with Article 8 (1) GDPR and Article 12 (1) LPDP.

If we have made the personal data public and are obliged to delete it, we will take appropriate measures, taking into account the available technology and implementation costs, to inform the third parties processing your data that you wish for them to also delete all links to or copies of your personal data.

3.5. Right to restriction of processing according to Article 18 GDPR and Article 22 LPDP

You have the right to request that we limit processing if one of the following conditions is met:

  • you dispute the accuracy of the personal data;
  • The processing is unlawful and you request limited use of the personal data instead of the deletion;
  • the responsible person no longer needs the personal data for processing purposes, but you need them to assert, exercise or defend legal claims or
  • you have objected to the processing in accordance with Article 21 (1) GDPR and Article 25 (1) LPDP, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the data subject.

3.6. Right to data portability under Article 20 GDPR and Article 24 LPDP

You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another responsible person without any hindrance from us, if

  • the processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and Article 10 (1) 1) or Article 13 (2) 1) LPDP or on a contract in accordance with Article 6 (1) (b) GDPR and Article 10 (1) 2) LPDP and
  • The processing is carried out using automated procedures.

When exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another person responsible, insofar as this is technically feasible.

3.7. Right to object under Article 21 GDPR and Article

Under the conditions of Article 21 (1) GDPR  and Article 25 (1) LPDP, you can object to data processing for reasons arising from your particular situation.

The above general right of objection applies to all processing purposes described in these data protection provisions, which are processed on the basis of Article 6 (1) (f) GDPR and Article 10 (1) 6) LPDP. In contrast to the special right to object to data processing for advertising purposes (we are only obliged to implement such a general objection under the GDPR and LDPD if you give us reasons of overriding importance, e.g. a possible danger to life or health.

3.8. Right of appeal to the data protection supervisory authority according to Article 77 GDPR and Article 97 LPDP

You also have the right to lodge a complaint with the responsible data protection supervisory authority. You can contact the data protection supervisory authority in the country in which you are resident or the authority of the country in which the responsible Lidl company is located.

3.9. Contact person for exercising your rights as a data subject

Contact person for questions or to exercise your rights as data subject:

  • If you have any questions about the career website or to exercise your rights in the processing of your data (data subject rights), please contact:

jobs@lidl.mk

  • If you have any questions about your application, the application process and the exercise of your rights in the processing of your application data (data subject rights), you can contact the company to which you have applied.

Contact details:

LIDL North Macedonia DOOEL Skopje

Blvd. Kiro Gligorov no.2/3, Gazi Baba,

1000 Skopje, Republic of North Macedonia

Email: jobs@lidl.mk