Source: https://www.lidl.com.mt/en/Social-media-privacy-policy.htm
Timestamp: 2019-04-22 23:54:12+00:00

Document:
See below for information on how your data is used in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
The processing of personal data in this context is carried out in accordance with the European General Data Protection Regulation (the GDPR) and the national legislation on data protection namely, the Maltese Data Protection Act (Chapter 586 of the Laws of Malta) and any Subsidiary Legislation issued under the same as may be amended from time to time.
Along with us, there is also the operator of the social media platform itself, which also acts as data controller; over the data processing carried out by the aforementioned controller we have however a limited control. In those areas where we can exercise influence and parameterize the processing of data, we work to ensure that the social platform operator processes data in accordance with the provisions on personal data protection. However, we are unable to influence the processing of data carried out by the social media platform operator and we are also unaware of exactly which data is processed by the controller himself.
The data you enter on our social pages, such as comments, videos, images, likes, public news, etc., are published by the social platform and are neither used by us nor processed for other purposes at any time. We only reserve the right to (i) delete content, if this becomes necessary, (ii) share your data on our page, if this is a function of the social platform, and (iii) communicate with you via this social media platform. In this context, the data are processed in the interests of our relations with the public and our communications.
In addition to the above, the processing of data for the purposes referred to in point (iii) is necessary with reference to the above mentioned purposes given its essential nature in order to provide the service requested by you in compliance with art. 6, paragraph 1, letter b) GDPR.
If you wish to object to the processing of certain data under our influence, please use the contact details provided in the legal notes. We will assess your objection.
If you submit a query on the social media platform, depending on the answer required we may refer you to other secure communication channels that guarantee confidentiality. You always have the option of sending confidential inquiries to the address provided in the legal notice.
As already stated, where the social media platform provider allows us, we endeavor to design our social media pages to be as compliant with data protection provisions as possible.
The operator of the social media platform uses web tracking methods. Web tracking may also be used regardless of whether you are registered with or have logged on to the social media platform. As previously stated, we are unfortunately unable to influence the social tracking systems used by social media platform. For instance, we cannot disable them.
Please be aware that we cannot rule out the social media site operator using your profile and behavior data to assess your habits, personal relationships, preferences, etc. In this respect, we have no influence on the processing of your data carried out by the social media platform operator.
For the aforementioned purposes, your personal data may be transferred to the following categories of recipients: (i) third-party suppliers of assistance and advice for Lidl Malta Ltd. with reference (e.g.) to the following sectors: technological, accounting, administrative, legal, insurance, IT; (ii) companies of the group to which Lidl Malta Ltd. belongs; (iii) subjects and authorities which right of access to personal data is recognized by law, regulations or provisions issued by the competent authorities. Depending on the specific case, these recipients will process such personal data as data controllers or processor.
We do not share your data with recipients established outside the European Union or the European Economic Area. Should We transfer personal data to recipients outside the European Union (EU) or European Economic Area (EEA), this shall occur exclusively if the EU Commission has identified an appropriate level of data protection in the third country, an appropriate data protection level has been agreed with the recipient (for example through EU standard contractual clauses) or if you have given us your consent (and this, under with all appropriate safeguards in place). You are entitled to contact us (using the details below) to obtain a copy of the safeguards (such as the model EU standard contractual clauses) we have in place to ensure the security of any data transfers we may effect to third countries.
the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Where personal data are transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of a supplementary statement.
the personal data has been collected in relation to the offer of information society services to children as referred to in Art. 8 (1) GDPR.
Where we have made the personal data public and are obliged to erase it, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform third parties which are processing your personal data that you have requested the erasure by such third parties of any links to, or copy or replication of, that personal data.
Under the conditions set out in Art. 21 (1) GDPR, you have the right to object to data processing on grounds relating to your particular situation.
In those cases where we only process your personal data when this is 1. necessary for the performance of a task carried out in the public interest or 2. when processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, you shall have the right to object to processing of your personal data by us. Where an objection is entered, the processing of data shall cease, unless we as data controller provide compelling and legitimate grounds requiring the continuation of the data processing which outweigh the objections you may have raised.
You also have the right, at any time, to lodge a complaint with the competent data protection supervisory authority. The right to lodge a complaint may be exercised in particular with a supervisory authority in the member state in which you reside or work, or in the location of the alleged infringement. We kindly ask that you please attempt to resolve any issues you may have with us first (even though, as stated above, you have a right to contact the competent authority at any time).

References: Art. 13
 art. 6
 Art. 22
 Art. 46
 Art. 8
 Art. 21