Privacy

Welcome and thank you for visiting our innovation.aldi-sued.com

The following data protection notice will provide you with an initial overview of how we process your data, followed by more detailed information structured by topics. 

Which data do we collect? 

In order to properly display our website, we collect access and device-specific data each time our website is accessed. Subject to your consent, we create user profiles under pseudonyms by means of tracking services and cookies. These user profiles contain information regarding the behaviour of the specific user during their visit to our website. Apart from this, we only collect data received as a result of the entries you make on our website. 

Controller 

The Controller pursuant to Article 4 para. 7 GDPR is 

ALDI International Services SE & Co. oHG 
Unternehmensgruppe ALDI SÜD 
Mintarder Straße 36‒40 
45481 Mülheim an der Ruhr 

The Data Protection Officer of the Controller can be reached at the following e-mail address: Datenschutz(at)aldi-sued.de 

Please note that the above is a shared e-mail address and as such, e-mails may be read by people other than the DPO. If you would like to exchange confidential information, please use the above e-mail address to request direct contact first. 

Purposes and legal basis 

We generally only collect and use the personal data of our users if this is required to provide a functional website, our content and services, as well as for the appropriate design and improvement of these. This also constitutes our legitimate interest in data processing. 

If we obtain the consent of the data subject, Article 6 para. 1 lit. a GDPR forms the legal basis for the processing of personal data. Article 6 para.1 lit. b GDPR in conjunction with Section 26 BDSG (German Federal Data Protection Act) serves as the legal basis for processing personal data that is required to initiate/fulfil contracts. Article 6 para. 1 lit. c GDPR serves as the legal basis for processing personal data required for the fulfilment of legal obligations which our company is subject to. 

Article 6 para. 1 lit. f GDPR serves as the legal basis for processing personal data required to maintain the legitimate interest of our company or of a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the legitimate interest. If the TTDSG is applicable, the collection and use of information about the equipment will also be based on Section 25 TTDSG. 

Recipient 

ALDI SOUTH commissions third-party service providers in order to support us in providing our technological infrastructure, designing our websites and offering our services. These service providers may be granted access to your personal data in this context. These service providers are obliged by contract to only process data as instructed by ALDI SOUTH and to take all measures necessary to ensure an appropriate level of data protection and data security. Data is only processed in states outside the European Union and/or the European Economic Area if the EU Commission has decided that this country offers an appropriate level of data protection or if the processor has committed to ensuring an appropriate level of data protection by concluding Standard Contractual Clauses, among other things. 

In individual cases, data is also transferred to other companies within ALDI SOUTH Group, e.g. ALDI Data & Analytics Services GmbH or ALDI AHEAD GmbH, for example if a request submitted via the contact form can only be answered by this business entity. 

Data processing in the USA 

On our website, we also use some applications by providers located in the USA. With a ruling by the European Court of Justice dated 16 July 2020 (case C-311/18), the EU-US Privacy Shield was declared invalid on the grounds that the USA do not provide a data protection level comparable to that of the EU. If data is transferred to the USA, the legal situation in the USA entails the risk of the data being recorded and analysed by US authorities, thus preventing the implementation of data subject rights granted under EU law. To protect your rights, however, we have concluded individual contracts with the service providers (by means of standard contractual clauses pre-approved by the EU Commission) that guarantee your rights in the best possible way. 

Retention period 

Your personal data will be either erased or blocked once the purpose of its storage becomes obsolete and its erasure is not opposed by legally defined retention periods. Data will also be blocked or erased once the storage periods defined by the above-mentioned standards expire, unless continued storage of the data is required in order to conclude or fulfil a contract. Please refer to the following sections for information on the retention periods applicable to the individual data collected. 

Data subject rights 

Provided that the necessary requirements as stipulated by Article 15 et seq. GDPR are met, you are entitled to exercise your rights of access, rectification, erasure, restriction of processing and data portability at any time. 

For this purpose, please contact us via e-mail: datenschutz(at)aldi-sued.de 

If you feel that the processing of your personal data infringes statutory provisions, you have the right to lodge a complaint with the competent supervisory authority. 

Log files 

Each time you access or attempt to access our website, at least the following data is collected and stored in a log file: 

• IP address 
• Name of the file retrieved 
• Date and time of retrieval 
• Transferred data volume 
• Notification as to whether data retrieval was successful 
• Notification as to why the data retrieval failed, if applicable 
• Operating system and browser software installed on your computer 
• Screen resolution 
• Browser language 
• Colour depth 
• Browser plug-ins (JavaScript, Flash Player, Java, Silverlight, Adobe Acrobat Reader, etc.) 
• Website from which you visit us 

The processing is based on Article 6 para. 1 lit. f GDPR in order to provide our website, guarantee the stability of our systems, ensure data protection and the reliability of our systems, and implement legal provisions. The data will be erased after seven days. 

Contact 

You have various possibilities to contact us, e.g. via our contact form or the e-mail addresses provided. In this context, we will only process your data for the purpose of communicating with you. Article 6 para. 1 lit. b GDPR forms the legal basis for this. We will ask for your consent in advance before contacting you via e-mail or telephone for advertising purposes; you can revoke your consent at any time. The data we collect through our contact form will be automatically erased once we have fully processed your request unless we need to store your request to fulfil contractual or legal obligations (see the “Retention period” section). 

Technologies

Based on Article 6 para. 1 lit. a, b and f GDPR and Section 25 TTDSG, we use self-developed and third-party technologies in order to support us in improving our offers and conducting website analysis and optimisation measures, among other things by creating and assessing pseudonymised user profiles. 

If the use of the technologies requires your consent (Article 6 para. 1 lit. a GDPR), we will ask for your consent to their use when you visit our site for the first time or in the area of the relevant content elements. You can revoke your consent with future effect at any time by deleting the set cookies, clicking on the opt-out link or deactivating the function within the relevant content elements. For further information on the technologies used and your possibilities to subsequently object to tracking, please refer to the following sections. 

Cookies

We use (third-party) cookies in order to provide you with the maximum possible level of convenience and to make our online presentation as attractive as possible for you. 

Cookies are text files that the browser saves to your computer, contain information on how you use our website and can recognise users that go back to the website in the future. Via your browser settings, you can deactivate or erase set cookies. For further information, please refer to the “Help” function of your browser. 

The following cookies will not be set until you have provided your consent: 

• gpv_pn: Stores information about the visitor journey (in this case identification of the current page) Storage time 1 hour
• OneTrust: OptanonConsent: Contains the user decisions regarding consent. Storage time: 1 year.
• OneTrust: OptanonAlertBoxClosed: Stores the information whether an interaction with the OneTrust Banner/Preference Center has taken place. Storage period: 1 year.
• s_cc: The cookie detects whether cookies are enabled. Storage time: Session
• s_invisit: Adobe:Information whether a user is visiting the website for the first time. Storage time: Session
• s_nr: Adobe: The cookie contains a Unix timestamp that indicates the current time and status of the visitor. Storage period: 356 days
• s_sq: Adobe Analytics: Information about the visitor journey. Storage duration: Session
• s_vnum: Adobe: Number of visits traceable to a single visitor. Storage period: 356 days

Adobe Experience Cloud

Our website uses services provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland (hereinafter referred to as “Adobe”). 

These services use cookies. If the information generated by a cookie on website usage is transmitted to an Adobe server, the settings ensure that your IP address is truncated before it is saved. On behalf of the owner of this website, Adobe uses this information to analyse the usage of the website by the users, compile reports on the website’s activity, personalise the user experience, and provide the owner of the website with additional services relating to website and internet usage. The IP address transmitted by your browser in conjunction with Adobe services is not collated with any other data in Adobe’s possession. 

You can disable the storage of cookies by adjusting your browser settings accordingly. You can also disable the collection of data generated by the cookie related to your use of the website (including your IP address) and the processing of this data by Adobe under this link: http://www.adobe.com/de/privacy/opt-out.html. 

OneTrust Advanced Analytics

We use the „Advanced Analytics“ analytics service provided by OneTrust Technology Limited, 82 St John St, Farringdon, London EC1M 4JN, United Kingdom (UK) (hereinafter „Advanced Analytics“) on our website or app.
If you give us your consent, we will use a OneTrust cookie for technical analysis of browser types and versions used and for banner optimisation. The following data is processed

• Gerätetyp
• Browser
• Ländercode

If you do not wish to have your data processed by Advanced Analytics as described above, you can deactivate the future storage of the data described in the OneTrust cookie by using the toggle control in the cookie settings.

Contact form

Using the contact form you have the ability to get into contact with us and to express your interest in a potential partnership between ALDI and the company on behalf of which you are acting. We collect and use the following personal data through this contact form:

• First name and surname
• Job title / role in the company 
• Phone number
• E-mail address

In addition, further data about the company on behalf of which you are acting, can be provided (e.g. company presentation or pitch deck). Mandatory data provided for the purpose of registration are marked with an asterisk in the input mask as a mandatory field. By submitting your information, you express your interest in working with ALDI as a potential project partner. The collected data is needed to create a company profile and to evaluate, if the company on behalf of which you are acting, is suitable for such work. If consent is given in connection with the submission of your data, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR. 

In order to delete the company profile, including all data which were submitted by you, please contact a message to the responsible contact: datenschutz(at)aldi-sued.de

Notes from further communications

For any future or ongoing with you or any other Person, that is acting on behalf oft he same company, we will make and store relevant notes as appropriate for pursuing a potential business relationship. This encompasses communication or exchange of information via email, telephone or other means of communication.