Data protection at Lidl North Macedonia

The following data protection notices inform you about in what way and to what extent your personal data is processed when you visit our career website. Personal data is information that can be directly or indirectly traced back to your person. The General Data Protection Regulation (GDPR) and the Law on Personal Data Protection (LPDP) serve as the legal basis for data protection.

Purposes of data processing/legal bases:

When you visit our career website, your device's browser will automatically and without any action on your part send the following data to our career website’s server:

• the IP address of the requesting internet-enabled device,
• the date and time of access, 

• the name and URL of the retrieved file, 

• the website/ application from which the access was made (referrer URL),
• the browser you are using and, if applicable, the operating system of your internet-enabled computer and
• the name of your access provider

This data is temporarily saved in a so-called log file for the following purposes:

• to ensure a smooth connection,
• to ensure seamless use of our website/ application,
• to evaluate system security and stability.

If you have consented to the so-called geolocation in your browser or in the operating system or other settings of your device, we will use this function to offer you individual services (e.g. the location of the closest job offer) based on your current location. We process your location data exclusively for this purpose.

The legal basis for processing the IP address is Article 10 (1) (6) of LPDP. Our legitimate interest lies in the purposes of data processing listed above.

Retention period/ criteria for determining the retention period:

The data is stored for a period of seven days and then automatically deleted. If you stop using our career website, the geolocation data will be deleted.

Purposes of data processing/ legal bases:

We use so-called cookies on our websites

Your consent includes the use of cookies and other technologies to process usage data on all (sub) domains at www.jobs.lidl.de.

In addition to us, the joint controllers within the meaning of Article 30 LPDP responsible for data processing in connection with marketing cookies (see cookies under the "Marketing" category in our cookie notices) are Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook), and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (LinkedIn). As part of our cooperation with our partners on our website, we use their special technologies with your consent to record your browsing behavior so that we can tailor the ads of our customers to you on our website or platform. In connection with this, our partners may also compare the data collected on our website with the data in their own databases.

When exercising your rights as a data subject described below with regard to the data processing described in this paragraph, you can also contact either us or our aforementioned partners.

You can also find further information on the data processing and on exercising your rights as a data subject in the privacy policies of our respective partners:

• Facebook: https://de-de.facebook.com/policy.php,
• LinkedIn: https://www.linkedin.com/legal/privacy-policy.

Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware. Information relating to the specific device used is stored in the cookie. However, this does not mean that we gain immediate knowledge of your identity.

The use of cookies and other technologies for processing usage data serves the following purposes, depending on the category of the cookie or other technology:

• Technically necessary: These are cookies and similar methods without which you cannot use our services (for example, to display our website correctly/ functions you want to use, to save your login in the login area).
• Ease of use:
• Statistics: allow us to compile pseudonymized statistics on the use of our services. This allows us to determine, for example, how we can adapt our career website even better to suit the needs of the website users.
• Marketing: This allows us to display advertising content that suits you based on the analysis of your usage behavior. Your usage behavior can also be tracked via different websites, browsers or devices using a user ID (unique identifier).

Here you can find an information overview of the cookies and other technologies used along with the respective processing purposes, retention periods and any third-party providers involved.

When using cookies and similar techniques for processing usage data, the following types of personal data are processed in particular depending on the purpose:

Technically necessary:

• Consent to cookie preferences.

Ease of use:

• Settings that serve to optimize the output of the cards.
• Output of recently viewed jobs.
• Output of saved jobs.

Statistics:

• Pseudonymized user profiles with information about the use of our career website. These include in particular:
  • Browser type/ version,
  • Operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,
  • individual user ID and
  • Events triggered on the career website (surfing behavior).
• The IP address is regularly anonymized so that it cannot be traced back to you.
• No conclusions can be drawn about your person from the user ID itself.

Marketing

• Pseudonymized user profiles with information about the use of our website. These include in particular:
  • IP address,
  • individual user ID;
  • potential product interests,
  • events triggered on the website (surfing behavior). 
• The IP addresses are regularly anonymized, so that no conclusions can be drawn about your person.
• No conclusions can be drawn about your person from the user ID itself. We may share the user ID and the associated usage profiles with third parties via the providers of advertising networks.

The legal basis for using ease of use, statistics and marketing cookies is your consent in accordance with Article 10 (1) (1) LPDP. The legal basis for the use of technically necessary cookies is Article 10 (1) (6) LPDP, i.e. we process your data on the basis of our legitimate interest in being able to present the website with its statements in a fully functional manner.

You can withdraw/ adjust your consent at any time with effect for the future. Just click here and make your selection. By removing the corresponding check mark, you simply and easily withdraw your consent for the respective processing purposes.

Recipients/ categories of recipients:

When processing data by means of cookies and similar techniques for processing usage data, we may use specialized service providers, in particular from the area of online marketing. These process your data on our behalf as contract processors, are carefully selected and contractually bound in accordance with Article 32 LPDP. All companies listed as providers in our Cookie Settings act as processors who provide data processing for us.

As part of our cooperation with Google LLC and Meta Platforms Ireland Limited, the above-mentioned data is usually also processed on servers in the US for statistical and marketing purposes.

Retention period/ criteria for determining the retention period:

The retention period for cookies can be found in our Cookie Settings . If the information “persistent” is indicated in the “Expiration” column, the cookie is stored permanently until the corresponding consent is withdrawn. The retention period of the session storage is limited to the respective session and ends when the browser is closed.

Purposes of data processing/ legal bases:

Personal data that you provide to us by e-mail or telephone will of course be treated confidentially. We use your data exclusively for the purpose of processing your request. The legal basis for data processing is Article 10 (1) (6) or Article 10 (1) (2) LPDP. Our and your concurrent (legitimate) interest in data processing arises from the goal of answering your request, solving any existing problems and thus maintaining and promoting your satisfaction as a user of our career website.

Recipients/categories of recipients

We generally do not forward data to third parties. As an exception, data is processed on our behalf by data processing providers. These are carefully selected, are also audited by us and contractually bound in accordance with Article 32 LPDP.

Retention period/criteria for determining the retention period:

All personal data that you send us by e-mail or telephone in the event of inquiries (suggestions, praise or criticism) will be deleted or anonymized by us at the latest 12 months after the final response. Experience has shown that after 12 months there are usually no more inquiries regarding our answers. When asserting your rights as a data subject (see below), your personal data will be stored for 3 years after the final response to prove that we have provided you with comprehensive information and that the legal requirements are complied with.

If we transfer data to recipients in a third country (headquartered outside the European Economic Area), you can read about this in the information on the recipients/ categories of recipients in the description of the respective data processing. The European Commission certifies that some third countries have a data protection standard that is comparable to the level of data protection in the European Economic Area. A list of these countries can be found at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en. If there is no comparable data protection standard in a third country, we ensure that data protection is sufficiently guaranteed by other measures via, for example, binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates, or recognized codes of conduct. Please contact our data protection officer (Section 1.7), should you like to receive more information.

1.6.1. YouTube Videos

We have integrated YouTube videos into our online content, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", meaning that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data be transferred. We have no influence on this data transfer.

Further information on the purpose and scope of data processing by YouTube, which also takes place on servers in the US, can be found in the privacy statements of the provider. There you will also find further information about your rights in this regard and setting options to protect your privacy. YouTube address and privacy policy: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://policies.google.com/privacy.

1.6.2. Bing maps

We use Bing Maps on our career website. This enables us to display interactive maps directly on the career website and allows you to conveniently use the map function to find job offers in your area.

We use Bing Maps for an appealing presentation of our online services and to easily find the locations indicated by us on the website. This is based on a legitimate interest within the meaning of Article 10 (1) (6) LPDP.

By visiting our careers website, the provider of Bing Maps, Microsoft Corporation, receives the information that you have accessed the corresponding sub-page of our careers website. To use the functions of Bing Maps, it is necessary to process your IP address as part of Internet communication. This data is usually processed on a Microsoft server in the US.

We have no influence on the specific data processing by Bing Maps. Further information on the purpose and scope of data processing by Bing Maps can be found in the privacy statements of the provider. There you will also find further information about your rights in this regard and setting options to protect your privacy. Address and privacy policy of the provider of Bing Maps: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA.

1.6.3. Social Media Walls

Purposes of the Processing/Legal Bases:

In addition to the information you provide us directly via social network platforms ("platforms"), we also use "social walls" to present content shared by you on platforms relating to our Group. To that end, for instance, as part of individual marketing campaigns or prize draws, publicly available content from platforms that you have posted using a specific hashtag is displayed together on a wall integrated into our website.

Only those posts are processed which you have made freely available to the public (public posts).

The scope of the data collected relates to various content that has been publicly published on platforms (timestamps, post IDs, post texts, images, videos, links, comments, ratings) and is primarily determined by the type and content of the respective post. In addition, attachments and metadata (technical data on publications) of platform content can be shared, as well as corresponding user data (first and last name, user ID, profile URL, profile pictures, website URL).

Data is processed for the purpose of advertising the Group of companies externally, realizing marketing campaigns or prize draws on specific occasions or relating to specific topics and customer loyalty purposes. Data is processed based on our legitimate interests pursuant to Article 10 (1) (6) LPDP. Our legitimate interest follows from the aforementioned purposes.

We have only limited control over the processing of data by the operators of the platforms (the information shared by you). You will find further information on the processing of this data in the relevant operator's privacy policy. You can find a list of privacy policies of operators on whose platforms we use channels here.

Recipients/Categories of Recipient:

Data processing agreements within the meaning of Article 28 GDPR have been entered into with all recipients who are bound by instructions. This means that these recipients may only process personal data on the basis of our instructions and, in particular, processing for purposes other than those listed above is excluded.

Storage Time/Criteria for Determining Storage Time:

The content of the social media walls can be accessed on the respective website for as long as the respective wall is operated in the individual case and data processing is therefore necessary for the intended purpose. If you delete a post that is part of the wall from your own profile or this is no longer publicly visible, the respective post is also no longer part of the wall.

These data protection regulations apply to the data processing by Lidl North Macedonia Dooel Skopje, st.Kiro Gligorov n.2, 1000, Skopje and to the career website jobs.lidl.mk. The data protection officer of Lidl Noth Macedonia DOOEL Skopje   can be reached at the above address for the attention of the data protection officer or at data.protection@lidl.mk.

Further information and additional contact persons regarding your rights as a data subject can be found in Section 4.9 of this data protection information.

We process:

• the data that you make available to us during registration / application and in the recruiting portal;
• this includes at least your e-mail address, password, first name, last name, country/ region of your place of residence;
• it can also include any data you choose to disclose to us in your uploaded documents (such as CV, references, or cover letter) and any other data you add to your candidate profile or application.

The processing of your profile data takes place on the basis of the user contract for the recruiting portal according to Art. 10 (1) 2 LPDP.

2.1.1. Creating your candidate profile

If you are interested in a job posted on the career site, you can first register / create a candidate profile and then create an application for that job from your candidate profile.

If you are also interested in other positions, you can apply for these by creating applications based on your candidate profile as well.

Please note that, depending on your visibility settings, recruiters may be aware of your multiple active applications through your candidate profile.

It is also possible to create a candidate profile for later use when you are not interested in a specific job yet but would like to apply in the future. This way you can log in with your profile at any time and create, send or withdraw applications from it. You can also change, add or delete information in your user profile at any time, view the status of your application(s), submit additional documents or change your data at a later date.

The candidate profile itself is not yet an active application but, depending on your visibility settings, it may be found by recruiters through portal-wide searches for specific characteristics. When you register in our recruiting portal with the corresponding visibility settings of your profile (“Visibility for all recruiters of the Lidl Group”), we can consider you for other positions based on your qualifications. Your candidate profile data can be searched and accessed by all Lidl companies listed under 3.3.

2.1.2. EasyApply

If you would like to save time when applying for a specific job, you can use our EasyApply function, if available: By filling in the application form that appears following the selection of the EasyApply function, your data is automatically used to create a candidate profile in the background and, at the same time, to create an application for the job you have chosen. After applying via EasyApply, you will receive an email with further information on how to access your candidate profile in the future. This includes all functionalities mentioned in section 2.1.1.

2.1.3. Registering for a talent pool via data capture forms

When visiting a career fair or after being approached and interviewed by an active sourcer, you have in some countries the opportunity to register in the recruiting portal via a data capture form without having to apply for a specific position, but with the aim to be included in a talent pool and considered for future vacancies that suit your qualifications.

Your data is automatically used to create a candidate profile in the background. This includes all functionalities mentioned in section 2.1.1. In this context, we would like to give you the opportunity to conveniently apply internationally to all Lidl companies from one portal and present them with your profile in one simple step. This is why your candidate profile is automatically visible worldwide by default when you register for a talent pool via data capture form. You can change this setting in your profile to limit visibility to your own country and will receive further information in an email following your registration. Find more information on visibility settings in section 2.2.

 Logfiles

Regardless of which option you choose in order to apply or register, when you visit the recruiting portal, log files are generated with the following content:

•           your IP address

•           the path of the page

•           a description of the type of user agent used (e.g., your web browser)

•           the website from which you came to the current page (referrer)

•           as well as the date and time of the query.

In active applications, we use the data that you provide to us as part of the application process exclusively for the purposes of applicant selection and recruitment. This is done on the basis of Article10 (1) (2) LPDP.

When creating your candidate profile without applying for a specific job yet, the processing of your profile data takes place on the basis of the user contract for the recruiting portal according to Article 10 (1) (2) LPDP.

When registering for a talent pool, the data you provide to us through your candidate profile is processed based on your consent pursuant to Article 10 (1) (1) LPDP.

If you have applied for a specific position and would also like to be seen by all recruiters of the Lidl Group worldwide or within your country of residence, you can choose this setting at any time in „Search options and data protection notice“ in your profile or when you create a profile you can select "Visibility for all recruiters in the Lidl Group" or "Visibility for all recruiters in my country of residence". The recruiters of all companies may then view the data in your profile in accordance with Article 10 (1) (1) LPDP in order to suggest positions that suit you. If there is a suitable position, we will contact you by e-mail and invite you to apply for this position. You decide whether you want to apply.

If you select the option "Visibility for all recruiters worldwide “, you consent to your profile being visible to all recruiters and, where applicable, managers of all Lidl national organizations and Regional Distribution Centers as well as Lidl Stiftung & Co. KG across all Lidl countries. This visibility option is automatically set when you register via a data capture form for a talent pool as in all cases where we use data capture forms (career fairs, active sourcing) we want to give you the opportunity to get matched to any job worldwide suiting your qualifications. Our recruiters will invite you to apply and therefore the decision whether you seize this opportunity lies with you.

If you select "Visibility for all recruiters within my country of residence", you consent to your profile being visible to all recruiters and, where applicable, managers of the Lidl national organization and the associated Regional Distribution Centers in your country of residence.

These two options mean that all responsible employees have access to your candidate profile including your documents and permission to see for which jobs you have applied.

If you have selected one of these options, you will be considered for later vacancies once the application process has ended.

Note: If data is transmitted to a Lidl company that is headquartered in non-EU/ non-EEA countries ("third countries"), the data protection level in this third country may be lower compared to that in the EU/ EEA, which may mean that the rights of data subjects may not be enforced at all or not in the same way. If we transfer personal data to data recipients outside the EU/ EEA, the transfer will only take place if an adequate level of data protection in the third country has been confirmed by the EU Commission, an appropriate level of data protection has been agreed with the data recipient (e.g. by means of EU standard contractual clauses) or you have given us your express consent.

Multiple applications: If you apply for multiple jobs with Lidl companies the recruiters in charge will have access to the following information from your other applications within the limits set by your selected visibility option: date of the application, position title, status of the application, recruiter’s first and last name.

If you select "Only the recruiting team responsible for the position" recruiters in charge of other positions you have applied for will be informed about the fact that your application to their role is not your only application with Lidl but they will not see any details regarding your other applications.

If you select "Visibility for all recruiters within my country of residence" and you have applied to several jobs within your country of residence, then the information as listed above on these other applications will be available to the recruiters in charge of filling the other positions. They will also have access to the aforementioned information on applications you submitted to Lidl companies outside of your country of residence. However, recruiters in charge of filling positions outside of your country of residence to which you have applied will only see that the application to their role is not your only application with Lidl – they will not see any details regarding other applications.

If you select "Visibility for all recruiters worldwide" all recruiters in charge of positions you have applied for will have access to the information as listed above from any of your other applications with any Lidl company.

Withdrawal of consent

You can revoke your consent to the worldwide or national visibility of your profile or for participation in the talent pools at any time with effect for the future. Please send your withdrawal to Talent_Sourcing@lidl.com or change your settings directly in your profile. The legality of the processing that has already taken place up until the receipt of your withdrawal is not affected by this. In your profile, you can adjust the setting at any time in "Data protection and search options". Please note that this setting applies to all of your submitted and still active applications. Only the recruiting teams responsible for the respective positions for which you have an active application can then access your job-related data. Besides these specific positions, we can no longer consider you without an application for other positions.

If you select the visibility option “Only the recruiting team responsible for the position”, only the recruiters and managers responsible for filling the position can see your profile in accordance with Article 10 (1) (2) LPDP. Your data will not be forwarded, even for other suitable positions. If you had been part of a talent pool (e.g. after registration through a data capture form), the recruiters in charge of the talent pool no longer have permission to see your profile and are therefore not able to contact you or consider you for other suitable positions.

Cookies and Other Technologies

In our recruiting portal, technically necessary cookies and other technically necessary technologies are used to process usage data (for example, to display our website correctly/ functions you require, to save your login in the login area).

You can find an information overview of the cookies and other technologies used here, along with the respective processing purposes, storage periods and any third-party providers involved.

The legal basis for the use of technically necessary cookies is Article 10 (1) (6) LPDP, i.e. we process your data on the basis of our legitimate interest in being able to present the website with its statements in a fully functional manner.

Log files

Log files are stored for the following purposes:

• Ensuring a smooth connection,
• Ensuring comfortable use of our website/ application,
• Evaluation of system security and stability.

The legal basis for processing the log files is Article 10 (1) (6) LPDP. Our legitimate interest lies in the purposes of data processing listed above.

The transfer of your data to external service providers who support our application process in individual cases will only take place after careful selection and contractual obligation. External IT and consulting service providers as well as companies of the Schwarz Group support us in the provision of the system and may receive access to your data in individual cases as part of the service provision. These are the following service providers:

• Schwarz IT KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany
• Mmmake GmbH, Großgartacher Str. 61, 74080 Heilbronn, Germany

You can delete your candidate profile and the saved attachments at any time in the profile settings. You are the owner of your data.

In the event of inactivity, your account will be deleted 12 months after the last login. If you forgo creating an account with a personal password upon applying, the date of your application will be set as the date of the last login.

If you initiate the deletion yourself, the deletion will take place within 24 hours, provided that this does not conflict with retention requirements or our legitimate interests.

If the terms of use are changed, please note that you will be prompted to accept the changed license agreement the next time you log in. If this consent is not given, you will be unable to access your profile and the previous terms of use remain valid.. If you reject, your data will be deleted within 24 hours and no longer processed, unless this is contrary to retention requirements or legitimate interests on our end. Existing applications will be treated as withdrawn and will also be deleted according to these deadlines.

The retention period for cookies can be found in our cookie settings. If the information “persistent” is indicated in the “Life span” column, the cookie is stored permanently until the corresponding consent is revoked. The retention period of the session storage is limited to the respective session and ends when the browser is closed.

Log files are stored for a period of seven days and then automatically deleted.

There is no legal or contractual obligation on your part to provide us with personal data. Without the data, we cannot contact you or carry out an application process.

For candidates who do not register via a data capture form and thereby consent to a membership in a talent pool, but submit their profile otherwise to the system, Lidl Stiftung & Co. KG is controller regarding any profile data and therefore solely responsible for such data. The data protection officer of Lidl Stiftung & Co. KG can be reached at datenschutz@lidl.com or at the following address for the attention of the data protection officer:

Lidl Stiftung & Co. KG

Stiftsbergstraße 1

74172 Neckarsulm

Germany

With respect to any additional applicant data (such as CV, cover letter, certificates etc.) the individual country is controller and therefore solely responsible for such data. Please refer to Section 3.6 for the contact details of the responsible country’s data protection officer.

All Lidl companies that use talent pools are jointly responsible for processing the candidate data entered into the system via the Data Capture Form. A list of all participating companies including links to their webpages with contact details can be found in section 3.3.

Joint controllership means that all participating companies have jointly determined the purposes and means of data processing. The companies involved are part of a group of companies, which means that candidate profiles can be relevant not only for one company, but for all of them. Therefore, all participating companies have access to profiles. The companies enter into an agreement to determine responsibilities and rights under the GDPR and the Law on Personal Data Protection. Primarily, the Lidl Stiftung & Co. KG named under section 2.5 serves as a contact point for information obligations and for exercising data subject rights. Please contact them if you would like more information about the joint controllership.

Additional information and contact persons regarding your rights as a data subject can be found in Section 4.9 of this data protection information.

In order to apply for a position in the Lidl Group, you must register in the Recruiting Portal. When you register, you create a candidate profile respectively the profile is created in the background to you applying.

After creating your profile, you can upload your application documents and view and change your data, apply for other positions, withdraw individual applications or delete your entire profile, including all current applications. You can delete your profile at any time in the profile settings. Information in your profile including personal data, resume, cover letter and other documents will always be updated based on what you provided for your latest application. This allows you to reuse the personal data, resume, cover letter and other documents from your most recent application and adjust them if needed for your next application. 

You can also apply to several positions without logging into your profile by using the EasyApply function. Please be aware that if you do not upload new documents or adjust personal data, the recruitment portal will reuse the information and documents from your candidate profile and apply this information to your new application. In the background all your applications are added to your profile.

The Lidl company advertising the job is responsible for the processing of your application data. You will be informed about which company is responsible as part of the contact and the specific job advertisement.

Please note that we may need additional personal data from you later in the application process in order to complete your application. We will inform you about this in a separate e-mail.

The Lidl companies that advertise a position process your data in an application for the purpose of carrying out the application process and for the decision to establish an employment relationship on the basis of Article 10 (1) (2), where applicable in conjunction with Article 85 LPDP and the country-specific standards for applicant data protection.

The transfer of your application data to external service providers who support our application process in individual cases will only take place after careful selection and contractual obligation. External IT and consulting service providers as well as companies of the Schwarz Group support us in the provision of the system and may receive access to your data in individual cases as part of the service provision. These are the following service providers:

• SAP Deutschland SE & Co. KG
• SIT Schwarz IT
• Mmmake GmbH

With the help of statistical data (no names and no submitted application documents) from the application processes (e.g. processing times of applications, etc.), the Lidl company advertising the job draws conclusions on the effectiveness of the application process independently of you as data subject and improves the application process on the basis of these findings. With the final feedback on your application, you will receive a link to a voluntary and anonymous candidate survey so that you can share your experience on the recruitment process with us. The legal basis for this data processing is Article 10 (1) (6) LPDP. The legitimate interest lies in optimizing and simplifying the application process.

Employees recommend employees – What happens to your data and the data of the recommending employee?

If your application is recommended within the framework of the "Employees refer employees" program, we process your first and last name, the first and last name of the referring employee and, if applicable, the future personnel number, the position and your start date in order to process the referral bonus for the referring employee. In accordance with Article 10 (1) (6) LPDP, the basis for this processing is our legitimate interest in fulfilling the contract with the referring employee within the framework of the "Employees refer employees" program. This program also helps us to expand the potential applicant pool and raise awareness of Lidl as an employer for a variety of job opportunities. For this purpose, the company that may be hiring you will send information about your status to the company where the referring employee is employed.

Transfer to recipients outside the EU / EEA

If we transfer your personal data to recipients outside the EU/ EEA, the transfer will only take place if an adequate level of data protection in the third country has been confirmed by the EU Commission, an appropriate level of data protection has been agreed with the data recipient (e.g. by means of EU standard contractual clauses) or you have given us your consent.

You can withdraw your application to us at any time. You decide how your data is used.

In the event of rejection or recruitment, the data processed as part of the application process will be deleted after the end of the application process in accordance with the country-specific deadline of the Lidl company to which you have applied.

Here you will find an overview of our country-specific deletion periods:

There is no legal or contractual obligation on your part to provide us with personal data. Without the data, we cannot contact you or carry out an application process. The data is also required if a contract is signed.

If you have any questions about the application process or the exercise of your rights in the processing of your applicant data (data subject rights), you can contact the following contact:

[jobs@lidl.mk]

Information and contact persons regarding your rights as a data subject can be found in Section 4.9 of this data protection information.

If you have further questions about the processing of your data, you can contact the company-internal data protection officer of Lidl North Macedonia Dooel Skopje (see section 3.6).

„Lidl North Macedonia Dooel“ Skopje, with seat at St. Kiro Gligorov No. 2, 3rd floor Skopje - Gazi Baba.

The data protection officer of Lidl North Macedonia Dooel Skopje can be reached at the specified address for the attention of the data protection officer or at data.protection@lidl.mk.

Further information and contact persons regarding your rights as a data subject can be found in Section 4.9 of this data protection information.

In addition to the right to withdraw your consent, you are entitled to the following additional rights if the respective legal requirements are met:

• Right to information about your personal data stored by us in accordance with Article 19 LPDP,
• Right to correct incorrect or complete incomplete data in accordance with Article 20 LPDP,
• Right to deletion of your data stored by us in accordance with Article 21 LPDP,
• Right to restrict the processing of your data in accordance with Article 22 LPDP,
• Right to data portability under Article 24 LPDP,
• Right of objection under Article 25 LPDP.

In accordance with Article 19 (1) LPDP, you have the right to request information about your personal data stored by us free of charge. This includes in particular:

• the purposes for which your personal data is processed;
• the categories of personal data that are processed;
• the recipients or categories of recipients to whom your personal data has been or will be disclosed;
• the planned storage duration of your personal data or, if specific information is not possible, criteria for determining the storage period;
• the existence of a right to rectify or delete your personal data, a right to restrict the processing by the responsible person or a right to object to this processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• all available information about the origin of the data if the personal data is not collected from the data subject;
• The existence of automated decision-making, including profiling, in accordance with Article 26 (1) and (4) LPDP and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

If personal data is transferred to a third country or to an international organization, you have the right to be informed about the appropriate guarantees under Article 50 LPDP in connection with the transfer.

In the event of incorrect data, you have the right to request that we correct your personal data immediately. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of an additional explanation.

You have the right to request that we delete your personal data immediately if one of the following reasons applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• You withdraw your consent on which the processing was based in accordance with Article 10 (1) (1) or Article 13 (2) (1) LPDP, and there is no other legal basis for the processing;
• You object to the processing under Article 25 (1) or (2) LPDP and in the case of Article 25 (1) GDPR, there are no overriding legitimate grounds for processing;
• the personal data was processed unlawfully;
• The deletion of the personal data is necessary to fulfill a legal obligation;
• The personal data was collected in relation to the services offered by the information company in accordance with Article 12 (1) LPDP.

If we have made the personal data public and are obliged to delete it, we will take appropriate measures, taking into account the available technology and implementation costs, to inform the third parties processing your data that you wish for them to also delete all links to or copies of your personal data.

You have the right to request that we limit processing if one of the following conditions is met:

• you dispute the accuracy of the personal data;
• The processing is unlawful and you request limited use of the personal data instead of the deletion;
• the responsible person no longer needs the personal data for processing purposes, but you need them to assert, exercise or defend legal claims or
• you have objected to the processing in accordance with Article 25 (1) LPDP, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the data subject.

You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another responsible person without any hindrance from us, if

• the processing is based on consent in accordance with Article 10 (1) (1) or Article 13 (2) (1) or on a contract in accordance with Article 10 (1) (2) LPDP and
• The processing is carried out using automated procedures.

When exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another person responsible, insofar as this is technically feasible.

Under the conditions of Article 25 (1) LPDP, you can object to data processing for reasons arising from your particular situation.

The above general right of objection applies to all processing purposes described in these data protection provisions, which are processed on the basis of Article 10 (1) (6) LPDP. In contrast to the special right to object to data processing for advertising purposes (see above in particular Section 3), we are only obliged to implement such a general objection under the LPDP if you give us reasons of overriding importance, e.g. a possible danger to life or health.

You also have the right to lodge a complaint with the responsible data protection supervisory authority. You can contact the data protection supervisory authority in the country in which you are resident or the authority of the country in which the responsible Lidl company is located.

Contact person for questions or to exercise your rights as data subject:

• If you have any questions about the career website or to exercise your rights in the processing of your data (data subject rights), please contact:

data.protection@lidl.mk

• If you have any questions about the Recruiting Portal and the exercise of your rights when processing your profile data (data subject rights), please contact:

Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm, talent_sourcing@lidl.com

• If you have any questions about your application, the application process and the exercise of your rights in the processing of your application data (data subject rights), you can contact the company to which you have applied.

„Lidl North Macedonia“ Dooel Skopje with seat at St. Kiro Gligorov No.2, Skopje - Gazi Baba