Lidl Asia Pte. Limited | Hong Kong Branch - Data Protection & Privacy Policy

Application

You must register on the recruitment portal to apply for a job within the Lidl Group. You create a candidate profile when you register.

After you have created your profile, you can view and edit your data, apply for other jobs, withdraw specific applications, or delete your entire profile including all current applications. You can delete your profile at any time under "Options/settings".

As the operator of the recruitment portal, we, Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74172 Neckarsulm, Germany, process the data that you provide as part of your application, including the data that may be contained in the attachments submitted by you (e.g., your résumé), on behalf of the Lidl companies advertising vacancies to which you are applying, and forward your data to those companies when you click on the button to send your application.

The Lidl company advertising the vacancy is the controller with respect to processing the data in your application.

Please note that we may require additional personal data from you to complete your applicant profile as the recruitment process progresses. We will notify you of this in a separate e-mail.

Employees recruiting employees – what happens to my data and the data of the employee making the recommendation?

If you are recommended as a candidate as part of the "Employees recruiting employees" program, we process your first name and last name and, where necessary, your future employee number, position and start date for the purposes of paying the referral bonus to the employee making the recommendation. The basis for this processing is to perform the contract with the employee making the recommendation as part of the "Employees recruiting employees" program. This program helps us widen our prospective candidate pool and raise Lidl's profile as employer for a wide variety of job opportunities. For this purpose, the company potentially hiring you provides information on your status to the company at which the employee making the recommendation works.

Recruitment portal/candidate profile

Your application aside, we want to stay in contact with you and offer you additional services. For example, you can also register on the recruitment portal after visiting a careers fair or completing an internship or work experience placement, without having to apply for a specific job. We process the data that you provide to us upon registering (minimum of e-mail address, password, first name, last name, country/region of residence) and enter in the recruitment portal. By registering on our recruitment portal and selecting the corresponding visibility settings for your profile ("visible to all recruiters worldwide"), we will be able to consider you for other jobs that match your skills and qualifications. This also gives you the opportunity to be included in our talent relationship management activities (e.g., interesting work insights from Lidl).

Lidl Stiftung & Co. KG is the controller responsible for processing your data as part of the candidate profile.

If you have applied for a specific job and want to be visible to all recruiters as well, you can change your profile settings at any time under "Search options and privacy policy" or alternatively select "visible to all recruiters worldwide" when creating your profile. Recruiters from all companies will then be able to view your profile data and recommend relevant jobs. If a match comes up, we will send you an e-mail inviting you to apply for the job. The decision whether to apply is yours.

By selecting "visible to all recruiters worldwide", you consent to your profile being visible to all recruiters and supervisors at all Lidl national and regional companies, as well as Lidl Stiftung & Co. KG and Lidl Digital International GmbH & Co. KG. This means that all responsible employees will have access to your application and/or your profile. If you select this option, your data will automatically be saved in our recruitment portal so that we can continue to consider you for subsequent jobs once a recruitment process ends.

Withdrawal

You can withdraw consent for your profile to be visible worldwide at any time with effect for the future. Any such withdrawal of consent will not affect the lawfulness of processing prior to receiving the notice of withdrawal. You can change the settings at any time under "Data protection and search options" in your profile. Please note that this setting will be applied to all open and pending applications. Doing so will mean that only the recruitment team handling the specific job for which you have an active application will be able to access your data pertaining to the job. Beyond these specific positions, you will have to apply again in order for us to consider you for other vacancies.

Applying for a specific job

If you select the visibility option "Recruitment team for this job only", your application and/or profile will only be visible to the recruiter and supervisors responsible for that vacancy. Your data will not be forwarded, even if there are other jobs that may be relevant. Your profile will not be included in talent relationship management.

Notification options – what do the options mean?

If you select "Please notify me of jobs matching my search", you will be able to create matching search agents that we will use to notify you of vacancies by e-mail. You can unsubscribe from our search agents at any time under "Options/job notifications" in your profile.

Deleting your profile

You can delete your profile at any time under "Options/settings".

Application

The Lidl companies advertising vacancies process your data as part of an application for the purpose of conducting the recruitment process, and to decide whether to enter into an employment relationship, on the basis of Article 6(1)(b) GDPR, where applicable in conjunction with Article 88 GDPR, and the specific national regulations on protection of applicant data.

The Lidl company advertising vacancies uses data (excluding names and application documents submitted) from the recruitment processes (e.g., time taken to process applications) – without being able to identify you – to draw conclusions about the effectiveness of the recruitment process and leverages the insights gained therefrom to further simplify and streamline the process. The legal basis for this processing is Article 6(1)(f) GDPR. The legitimate interest lies in optimizing and simplifying the recruitment process.

If we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if an adequate level of data protection has been confirmed for that third country by the European Commission, if an adequate level of data protection has been agreed with the data recipient (e.g., by means of EU standard contractual clauses) or if we have received your consent.

Recruitment portal/candidate profile

If you have registered a candidate profile in our recruitment portal (which you can also do without an active application), we process your data in accordance with Article 6(1)(b) GDPR for the purpose of offering you the additional services of your choice on the basis of the user agreement accepted by you.

General

You can delete your profile and any attachments at any time under "Options/settings". You have control of your data.

Application

If your application is rejected, or if you are hired, the data processed as part of the recruitment process will be erased after the end of the recruitment process in accordance with the country-specific deadline to which the Lidl company where you applied is subject. The country-specific deadlines for erasure can be found in the overview at the end of this document.

Recruitment portal/candidate profile

Inactive accounts will be deleted 12 months after your most recent log-in date.
If you have opted to be included in our talent relationship management, you will be sent a reminder e-mail before your account is deleted.
If you request deletion yourself, your account will be deleted within 24 hours in as far as this does not conflict with record-keeping requirements or our legitimate interests.
Please note that when the terms and conditions of use change, you will be requested to accept the amended user agreement the next time you log in. If you do not consent within 28 days, your profile and data will be deleted and thus will not be subject to further processing. If your application is rejected, your data will be erased within 24 hours and will not be subject to further processing, in as far as this does not conflict with record-keeping requirements or our legitimate interests. Existing applications will be treated as withdrawn and likewise deleted in line with these deadlines.

You are under no legal or contractual obligation to provide us with personal data. Without such data we will not be able to establish contact or conduct the recruitment process. However, the data will be required in the event an agreement is entered into if we hire you.

5.1 General

In addition to the right to withdraw any consent you have granted to us, you have the following additional rights provided the respective statutory conditions are met:
• right of access to your personal data stored with us pursuant to Article 15 GDPR and section 34 German Federal Data Protection Act (Bundesdatenschutzgesetz, "BDSG");
• right to rectification of inaccurate personal data and the right to have incomplete personal data completed pursuant to Article 16 GDPR;
• right to erasure of your personal data stored with us pursuant to Article 17 GDPR and section 35 BDSG;
• right to a restriction of processing of your data pursuant to Article 18 GDPR;

• right to data portability pursuant to Article 20 GDPR;
• right to object pursuant to Article 21 GDPR;

5.2 Right of access pursuant to Article 15 GDPR

Pursuant to Article 15(1) of the GDPR, you have the right to request information, free of charge, on the personal data stored about you. This particularly includes:
• the purposes for which personal data is being processed;
• the categories of personal data that are being processed;
• the recipients or categories of recipient to whom personal data concerning you has been or will be disclosed;
• the planned duration of the storage of the personal data concerning you or, if it is not possible to give any specific details, the criteria used to determine the storage duration;
• the existence of a right to rectification or erasure of the personal data concerning you, a right to request from the controller that processing be restricted or a right to object to this processing;
• the right to lodge a complaint with a supervisory authority;
• all available information regarding the origin of the data if the personal data is not being collected from the data subject;
• the existence of any automated decision-making processes including profiling pursuant to Article 22(1) and (4) GDPR and – at least in these cases –meaningful information regarding the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

If personal data is transferred to a third country or an international organization, you have the right to be notified about appropriate safeguards pursuant Article 46 GDPR in connection with the transfer.

5.3 Right to rectification pursuant to Article 16 GDPR

You have the right to request the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

5.4 Right to erasure pursuant to Article 17 DSGVO

You have the right to require us to erase any personal data concerning you without undue delay where one of the following grounds applies:
• the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
• you withdraw your consent on which the processing pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR was based and there is no other legal basis for the processing;
• you object to the processing pursuant to Article 21(1) or (2) GDPR, and in the case of Article 21(1) GDPR there are no overriding legitimate grounds for the processing;
• the personal data was unlawfully processed;
• the erasure of personal data is necessary in order to comply with a legal obligation;
• the personal data was collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data public and are obliged to erase it, taking account of available technology and the cost of implementation we will take reasonable steps to inform any third parties processing your data of the fact that you have requested the erasure by such third parties of any links to, or copies or replications of, such personal data.

5.5 Right to restriction of processing pursuant to Article 18 GDPR

You have the right to require us to restrict the processing where one of the following applies:
• you contest the accuracy of the personal data;
• the processing is unlawful and you request the restriction of the use of the personal data rather than its erasure;
• the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defense of legal claims or
• you have objected to the processing pursuant to Article 21(1) GDPR pending verification of whether the legitimate grounds of the controller override those of the data subject.

5.6 Right to data portability pursuant to Article 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller without hindrance by us, where
• the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) GDPR and
• the processing is carried out by automated means.

In exercising your right to data portability you have the right to have the personal data transmitted directly from us to another controller where technically feasible.

5.7 Right to object pursuant to Article 21 GDPR

Provided the requirements of Article 21(1) GDPR are met, you may object to the data processing on grounds relating to your particular situation.

The aforementioned general right to object applies to all processing grounds set out in these data protection provisions, which are processed on the basis of Article 6(1)(f) GDPR. In contrast to the specific right to object regarding data processing for promotional purposes (cf. above, in particular clause 3.5), we are only obliged to action such general right to object if you cite grounds of overriding importance, e.g. a possible risk to life or health.

Application

If you have questions about your application or about exercising your rights with respect to the processing of your data during the recruitment process, please contact the recruitment department indicated in the confirmation of receipt.

If you have any further questions about the processing of your application data, please contact the competent data protection officer. You can find them in the overview of national companies to which you have applied (see the end of this document) or in the confirmation of receipt for your application.

Recruitment platform

If you have any questions about exercising rights relating to the recruitment platform, please contact talent_sourcing@lidl.com.

If you have any questions relating to data processing, please contact the Lidl Stiftung & Co. KG data protection officer:

Lidl Stiftung & Co. KG
Data protection officer
Stiftsbergstraße 1
74167 Neckarsulm, Germany
E-mail: kontakt@lidl.com

You also have a right to lodge a complaint with the competent data protection supervisory authority at any time. In order to do this you can contact the data protection supervisory authority of the country where you have your place of residence or the authority of the country where the processor is headquartered.

Company
Lidl Hong Kong

Deadline for deleting applications that have been rejected or withdrawn
1 year (12 months)

Deadline for deleting successful applications
31 days after hiring step in the system

Data protection officer's contact details
Data.protection@lidl.com.hk