Privacy Policy for crivit.com
Version 1.0, dated 06/02/2026
Thank you for visiting www.crivit.com and your interest in our Privacy Policy. We want you to feel comfortable and safe when you visit our website, and to know that one of the things that sets us apart is our commitment to protecting our customers' data.
The following Privacy Policy is designed to inform you about the nature and scope of the processing of your personal data by Lidl Stiftung & Co. KG (also referred to in this policy as "Lidl", "we" and "us").
Personal data is information that identifies you or could identify you directly or indirectly. The statutory basis for data protection is, in particular, the EU General Data Protection Regulation (GDPR).
Unless otherwise stated, the data controller responsible for data processing when visiting this website is Lidl Stiftung & Co. KG, Stiftsbergstraße 1, 74167 Neckarsulm, Germany, info@crivit.com, tel. +49 7132 / 94-2000 ("Controller").
For general questions, you can also contact us at info@crivit.com.
Our company data protection officer can be contacted at the above address for the attention of the data protection officer or by e-mail at datenschutz@crivit.com.
When you visit our website, we process your data so that
| Which personal data we process: | For what purposes we do this: | Our legal basis for this processing: | Our retention period: |
When you visit our website, the following data is automatically transmitted to our servers and temporarily stored:
|
| The legal basis for this processing is Article 6(1) sentence 1(f) GDPR.
We have a legitimate interest in the listed purposes of data processing.
If data is used for purposes of preparing a contract, the legal basis for the data processing is Article 6(1) sentence 1(b) GDPR. | We store the data for a period of 90 days. The data is automatically deleted thereafter. |
| If you have given consent for data processing on one or more occasion, we store the time stamp and fact that you have given your consent together with your user ID. If you do not give your consent, we store information to the effect that you have not consented to data processing. |
| The legal basis for this processing is Article 6(1) sentence 1(c) GDPR. We fulfill our legal obligation to be able to prove the lawfulness of data processing based on consent. | We store data demonstrating your consent for a maximum of 24 months after we have ceased processing your personal data based on your consent. |
When cookies and similar technologies are used to process usage data (in particular local storage), files are stored locally on your end device when you visit our website. They store information in connection with the end device you use. This does not, however, mean that we will immediately become aware of your identity.
The use of cookies and similar technologies to process usage data serves the following purposes, depending on the category:
| Explanation of the categories: | For what purposes we use them: | Our legal basis for this processing: | Our retention period: |
Technically necessary: These are cookies and similar technologies without which you cannot use our services. Depending on the purpose, the following in particular are processed:
|
| The legal basis for using technically necessary cookies and similar technologies is your consent given pursuant to section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG). Data is subsequently processed based on our legitimate interests pursuant to Article 6(1) sentence 1(f) GDPR. The legitimate interests arise from the purposes listed. | You can find more information about cookies in our cookie policy. |
Statistics: These methods enable us to tailor the design of our services by producing pseudonymized and, if applicable, cross-device statistics about how they are used. We use pseudonymized user profiles for this purpose:
|
| The legal basis for the use of cookies and similar technologies in these categories is section 25 (1) TDDDG. Data is subsequently processed based on your consent pursuant to Article 6(1) sentence 1(a) GDPR. | |
Marketing: These techniques enable us to use and evaluate our advertising measures in a targeted manner.
|
|
For an overview of the cookies and similar technologies we use, including the storage periods and any third party providers involved, please see our cookie policy.
You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. You can find the option to withdraw your consent in our cookie policy. Simply uncheck the respective box to withdraw your consent for the given data processing purpose.
We (point 1) and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, act as joint controllers under Article 26 GDPR for data processing activities (marketing category) associated with the Meta Pixel.
Our advertising partner The UK Trade Desk Ltd, ℅ The Trade Desk, Inc, 42 N. Chestnut Street, Ventura, CA 93001, USA, processes the data as its own controller to display personalized advertising and to measure success (marketing category).
We also use the Google Analytics web analytics service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4 operates largely without using traditional cookies, but rather analyzes your behavior on our website.
| What personal data is collected: | For what purposes we use the data: | Our legal basis for this processing: | Our retention period: |
|
| The legal basis for the use of this technology is section 25 (1) TDDDG. Data is subsequently processed based on your consent pursuant to Article 6(1) sentence 1(a) GDPR. | The user data collected via Google Analytics are deleted after 14 months. |
You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. You can find the option to withdraw your consent in our cookie policy. Simply uncheck the respective box to withdraw your consent for the given data processing purpose.
We compile the content shared publicly and voluntarily by you and others on social media platforms using certain hashtags with reference to our Company on "social walls". Below you will find an overview of the data we process:
| Which personal data we process: | For what purposes we use them: | Our legal basis for this processing: | Our retention period: |
Depending on the type of content, the following data is processed:
|
| The legal basis for this data processing is Article 6(1) sentence 1(f) GDPR. The purposes listed adjacently constitute our legitimate interest. | The content displayed on the social wall is processed until you delete your post on the respective social media platform. After that, the post will no longer be displayed by us and the data from it will no longer be processed. |
| Which personal data we process: | For what purposes we do this: | Our legal basis for this processing: | Our retention period: |
We process the following data when you contact us:
|
| The legal bases for the data processing is Article 6(1) sentence 1 (b) and Article 6(1) sentence 1 (f) GDPR. Our shared legitimate interest in this data processing arises from the objective of answering any inquiries and resolving any issues you may have and thus ensuring and improving your level of satisfaction as a customer or other user of our website. | We delete or anonymize all information we receive from you when you make inquiries no later than 95 days after the final response is sent. Based on experience, we generally do not receive any questions concerning our responses after 95 days.
If you assert your rights as a data subject pursuant to clause 10, your personal data will be stored for three years after the final response in order to document the fact that we provided you with comprehensive information and that the legal requirements have been met. |
Through our website and content, we can give you the opportunity to access other websites of partners or, for example, the online shop (www.lidl.de). If you access these links, your personal data may be processed on these websites in deviation from this Privacy Policy. This Privacy Policy only applies to our website. Please note the respective privacy policies of the linked websites.
We have embedded YouTube videos on our website, which are stored at http://www.youtube.com and can be played directly from our website. If you have given us your consent to the immediate playback of YouTube videos via our cookie banner, content from the third-party provider YouTube (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland) will be loaded. This informs YouTube (Google Ltd.) that you have accessed our site and provides it with the technical usage data required for this purpose. In addition, YouTube (Google Ltd.) is then able to implement tracking technologies, for example cookies to analyze usage. We have no control over how data is processed further by YouTube (Google Ltd.).
The legal basis for this data processing is your consent pursuant to Article 6(1) sentence 1(a) GDPR. Your consent covers loading content from YouTube and transferring of the following data to YouTube (Google Ltd.):
Further information on data processing by Google Ltd. and your rights can be found here: https://policies.google.com/privacy.
The use of YouTube requires a connection to the servers of Google LLC, USA. Data could therefore be transferred to the USA. Google LLC, USA is a recipient in a third country (i.e. outside the EU or EEA). Google LLC, USA is certified under the Data Privacy Framework. An adequate level of data protection is assumed on the basis of the Data Privacy Framework.
You may withdraw/modify your consent at any time with effect for the future without this affecting the lawfulness of the processing based on consent before its withdrawal. You can find the option to withdraw your consent in our cookie policy. Simply uncheck the respective box to withdraw your consent for the given data processing purpose.
We also use external service providers bound by our instructions to process your data on our behalf. Such processors are carefully selected and also bound by contract in accordance with Article 28 GDPR. We currently transmit data to the following categories of service providers:
If it is necessary to investigate unlawful or improper use of the website or for legal prosecution, personal data will be forwarded to law enforcement or other authorities and, if necessary, to injured third parties or legal advisors. However, this only happens if there are indications of unlawful or improper behavior. Data may also be transferred if this serves to enforce terms of use or other legal claims. We are also legally obliged to provide information to certain public bodies on request. These are law enforcement authorities, authorities that prosecute administrative offenses subject to fines, and the tax authorities. Any transfer of personal data is justified by the fact that (1) the processing is necessary to fulfill a legal obligation to which we are subject pursuant to Article 6(1) sentence 1(f) GDPR in conjunction with national statutory requirements to transfer data to law enforcement authorities or (2) we have a legitimate interest in transferring the data to the aforementioned third parties if there are indications of improper behavior or to enforce our terms of use, other terms and conditions, or legal claims, and your rights and interests in the protection of your personal data within the meaning of Article 6(1) sentence 1(f) GDPR do not outweigh this interest.
As part of the further development of our business, the structure of our company may change as a result of changes to its legal form, or the formation, acquisition, or sale of subsidiaries, parts of the company, or components thereof. In such transactions, customer information may be transferred together with the part of the company to be transferred. Whenever personal data is transferred to third parties to the extent described above, we ensure that this is done in accordance with this Privacy Policy and the applicable data protection law. Any transfer of personal data is justified by the fact that we have a legitimate interest in adapting our legal form to the economic and legal circumstances as required and your rights and interests in the protection of your personal data within the meaning of Article 6(1) sentence 1(f) GDPR do not outweigh this.
In order to provide our services, we also transfer your personal data to "third countries" (i.e., countries outside the European Economic Area). Such a transfer only takes place to countries in which the European Commission has certified a data protection standard comparable to that in the European Economic Area by means of an adequacy decision within the meaning of Article 45(1) GDPR. You can find a list of these countries here. We also transfer your data to countries in which an appropriate level of protection for your data has been ensured by sufficient guarantees, e.g., by concluding certain data transfer agreements with the recipients of the data. For this we use the European Commission's standard contractual clauses.
For further information or a copy of the guarantees, please contact our data protection officer (clause 1).
The provision of personal data is neither legally nor contractually required, nor is it required in order to enter into an agreement. You are under no obligation to provide personal data. However, if you do not register, you will not be able to (fully) use certain functions on our website.
If the data processing is carried out on the basis of consent granted under Article 6(1) sentence 1(a) or Article 9(2)(a) GDPR, you may revoke that consent at any time with effect for the future without this affecting the lawfulness of the previous processing.
Pursuant to Article 15(1) GDPR, you have the right to request information, free of charge, on the personal data stored about you.
If the statutory requirements are met, you also have a right to rectification (Article 16 GDPR), erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR) of your personal data.
If you have provided the processed data yourself, you have a right to data portability under Article 20 GDPR.
| If the basis of processing is Article 6(1) sentence 1(e) or (f) GDPR, you have a right to object under Article 21 GDPR. If you object to processing, your data will only be processed thereafter if we can demonstrate compelling legitimate grounds for the processing which override your interests in the objection. |
If you have any questions or wish to exercise your rights, you can contact the data protection officer in writing or by e-mail (see clause 1). You also have a right to lodge a complaint with a data protection supervisory authority. The data protection supervisory authority located in the state in which you live or where the controller is domiciled has jurisdiction.