Lidl & Kaufland Asia
Job Search Login Bookmarks

Data Protection & Privacy Statement

Data Protection at Lidl & Kaufland Asia Pte. Limited

(Version 4 last updated 15.05.2026)

Privacy Policy Statement

Lidl & Kaufland Asia Pte. Limited (“Lidl”, or the “Company”) has its principal place of business in Singapore and a branch office in Hong Kong. The Personal Data Protection Act (“PDPA”) in Singapore and the Personal Data (Privacy) Ordinance (“PDPO”) in Hong Kong serve as the legal basis for our processing of your personal data.

This Privacy Policy Statement (the “Privacy Policy”) informs you about our data protection practices and the type and scope of processing (“processing” includes the collection, use, disclosure and transfer) of your personal data conducted by us. Personal data is information that can be assigned directly or indirectly to an identified or identifiable natural person, as defined under applicable data protection laws. 

You consent and agree to the data collection and processing described in this Privacy Policy by visiting, accessing, and/or using our websites, portals, applications or digital platforms (together, the “Websites”). Your use of the Websites is voluntary. 

This Privacy Policy may change from time to time and your continued use of our Websites is deemed to be acceptance of those changes.

Scope of Privacy Policy

This Privacy Policy applies to Lidl & Kaufland Asia Pte. Limited and any of its affiliates within the Lidl Group in Asia, which may exist from time to time.

This Privacy Policy applies when your personal data is collected by us, such as when you contact us or respond to our requests, enter into commercial discussions and/or transactions with us, visit our Websites or premises, apply for jobs or otherwise share information with us at your own accord. This Privacy Policy also applies to personal data in our possession or under our control, including personal data in the possession of our affiliates within the Lidl Group in Asia and service providers which we have engaged to process personal data on our behalf. 

Personal data that you provide us with is treated confidentially. We use your data solely for the Purposes (as defined below). In order to do so, we may use and transfer data that you have provided to us to our affiliates or service providers for those Purposes.

We will not retain your personal data for longer than is necessary to fulfil the purpose for which you have provided your personal data to us, for our business purposes, or to satisfy such other legal or statutory requirements which we need to comply with.

You may write to our data protection officer using the contact details provided below to enquire about this Privacy Policy and our data protection practices.

1. Collection of personal data

We collect personal data about you from various sources, directly and indirectly:

2. Types of personal data we may process

The type of personal data we collect about you depends on the nature of your interactions with us and the purposes of such interactions. Such personal data may include the following:

3. Use of personal data and purpose of processing

We process your personal data when it is necessary for our business purposes (as specified below) or to meet the purposes for which you have submitted the information to us.

Your personal data may be used for one or more of the following purposes ("Purposes"):

  1. communicating with you or other employees in your company;
  2. verifying your identity;
  3. performing contractual obligations between us;
  4. assessing your suitability as an employee, a contractor or a business partner;
  5. handling and responding to your inquiries, suggestions or complaints;
  6. conducting analysis, interviews or surveys to help us better understand our business partners and to improve our operations, services and products;
  7. operating (including allowing access) the Websites, by us and our third-party service providers; 
  8. facilitating website access and compiling aggregate statistics on website usage;
  9. conducting evaluations and audit, and follow-ups on evaluations including investigation of compliance violation cases and the corresponding remedial actions where applicable or required; 
  10. managing the Company’s business accounts and records; onboarding due diligence and maintaining the Company’s business partnerships; registrations of business partners, fulfilment of the Company’s contractual obligations, onsite visits in the course of business; administering our relationship as applicable; 
  11. complying with applicable laws and contract-related requirements and implementation under those requirements, such as to administer technical, quality, safety checks and review to inspect and qualify our business partners for performing work in accordance with applicable quality standards, laws and contractual terms; 
  12. assessing compliance risk of business partners, monitoring and ensuring compliance of the Company’s business partners with our applicable internal policies and procedures, contractual, legal and regulatory requirements including investigations of identified compliance violation cases, and derivation of remediation plans, to see whether our business partners have breached legal and/or contractual obligations owed to the Company, and to exercise the Company’s contractual rights where applicable;
  13. communicating within the Company and its intra- group companies within the Schwarz Group, and/or affiliated third parties (such as existing or potential business partners, sub-contractors, third party service providers, counterparties, customers, end-customers or government officials); 
  14. managing the Company’s operational risk (such as security and fraud preventions), improving the Company’s operational efficiency and complying with corporate financial responsibilities, including invoicing and payment for products and services; audit requirements (both internal and external) and conducting analysis; research and control;
  15. responding to and complying with requests and legal demands from regulators or other authorities in or outside of Singapore or Hong Kong; 
  16. supporting any rights, claim or defence that the Company and group companies within Schwarz Group could face in any legal proceedings before any jurisdictional, and/or administrative authority, arbitration or mediation panel; resolving any disputes; enforcing any of the Company’s agreements; and to cooperate with – or to inform – law enforcement or regulatory authorities to the extent required by law; and
  17. performing other functions and activities incidental to and/or in connection with any direct purposes stated above; and any other legitimate purposes as permitted by applicable laws (e.g., for protection of vital interest of others, and processing information where you have already publicly disclosed within a reasonable scope); as otherwise stated at or about the time your personal data is collected from you with your separate consent.

We only collect, use, and share your personal data where it is appropriate and permitted under applicable laws. In some cases, we may ask for your permission to collect or use your data—for example, when you sign up for marketing updates and use non-essential cookies on our website. Where we rely on your consent, you may withdraw your consent at any time.

We will not process your personal data (including providing your personal data to third parties) for direct marketing purposes without your explicit and prescribed consent in accordance with the stringent requirements of the PDPO and PDPA. If we intend to use your data for direct marketing, we will provide you with a separate notification outlining the specific types of data to be used, the classes of marketing subjects, and an option to opt-out.

4. Disclosure and sharing of personal data

The Company may share your personal data with third parties in the following circumstances:

5. Cross-Border Data Transfer

The Company and its group companies within Schwarz Group operate a global business. The Company may transfer personal data that the Company processes about you to its affiliated companies in countries or regions outside of Singapore or Hong Kong. 

Where we transfer your personal data outside of Singapore or Hong Kong, we will take appropriate steps to ascertain whether the foreign recipient is bound by legally enforceable obligations to ensure that your personal data receives a standard of protection that is at least comparable to that provided under the PDPA and the PDPO. The Company transfers your personal data to other countries or regions, the Company will protect such information as described in this Privacy Policy, as disclosed to you at the time of data collection or as described in our program-specific privacy notice (if any).

We implement appropriate safeguards to protect your personal data when it is transferred internationally in line with applicable data protection laws. These may include standard contractual clauses, binding corporate rules, or other lawful mechanisms. 

 

6. Retention of personal data

We retain your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, operational, and business requirements. 

Where personal data is no longer required for these purposes, we will take appropriate steps to securely delete or irreversibly anonymize it. In cases where data is anonymized, it will no longer be associated with you and may be used for analytical, research, or business purposes. We regularly review the personal data we hold to ensure it is kept only for as long as necessary. 

7. Your rights as a data subject in relation to this Privacy Policy

This section applies to all data processing under this Privacy Policy. 

  1. Right to access: You can request a copy of the personal data we hold about you, along with information about how we use it. We will respond to your access request within 30 calendar days (and in any event, no later than 40 calendar days as required under the PDPO).
  2. Right to rectification/correction: If any of your personal data is inaccurate or incomplete, you can ask us to correct or update it.
  3. Right to withdraw consent: If we rely on your consent to use your personal data, you can withdraw it at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent. Please note that if you withdraw your consent, depending on the nature of your request, we may not be in a position to continue to provide our services or products to you, administer any contractual relationship in place, or process your job application. This may result in the termination of any agreements with us.
  4. Right to data portability: Where applicable under local law (such as the Singapore PDPA), you may have the right to ask us to provide your personal data in a commonly used format so that you can transfer it to another service provider. 
  5. Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority (such as the Personal Data Protection Commission in Singapore or the Office of the Privacy Commissioner for Personal Data in Hong Kong) if you believe that your data protection rights have been infringed.

If you would like to exercise your rights, please contact us using the details set out in this Privacy Policy. We may ask for additional information to verify your identity before facilitating the exercise of your rights. We reserve the right to charge a reasonable fee for complying with access requests where permitted by applicable law.

8. Personal data collected when accessing our website at www.lidl.asia

9. Data Processing for Job Applicants via our Recruitment Portal

While Lidl & Kaufland Asia Pte. Limited processes your personal data primarily in accordance with the PDPA (Singapore) and PDPO (Hong Kong) as outlined above, our job application process utilizes a centralized global recruitment portal. This portal is operated and managed by our affiliated company in Germany, Lidl Stiftung & Co. KG. Because the recruitment platform is hosted within the European Union, the processing of personal data submitted through our candidate portal engages the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

The following sections explain how your data is collected, used, and protected when you register for a candidate profile or apply for a position via this portal, and detail your specific rights under the GDPR regarding this processing.

10. Contact person for exercising your rights as a data subject

11. Changes to our Privacy Policy

We may update this Privacy Policy from time to time without prior notification to you or your prior consent. You may determine if any such revision has taken place by referring to the date on which this Privacy Policy was last updated. Your continued use of our services constitutes your acknowledgement and acceptance of such changes. Where required by applicable laws, we will notify you of any material changes — for example, by email or through a notice on our website.