Information notice on data protection (GDPR)

Introduction US

In accordance with its personal data policy, OBERWEIS S.A. (hereinafter “Oberweis,” “we,” or “our”) ensures the protection of personal information that you provide under the conditions described below.

The personal data that you consent to or agree (in accordance with the legal basis described below) to provide to us is used for strictly professional purposes, in particular:

product order management;

marketing activities (newsletters, contests, statistical studies);

recruitment.

This notice applies to all personal information collected in-store, on our website, and on our social media accounts oberweis.lu or through any other channel managed by Oberweis (paper form, email, telephone).

1. Who is responsible for processing?

Data controller: OBERWEIS S.A., 1 rue Guillaume Kroll, L-1882 Luxembourg.

GDPR contact: rgpd@oberweis.lu – +352 40 31 40-1.

2. What data do we collect?

We only collect data that is strictly necessary for our activities. This data falls into several categories:

Identity data: last name, first name. This information is essential for the performance of our services.

Contact details: postal address, email address, and phone number. These are used to confirm your order, send you an invoice, or contact you in case of a delivery issue.

Transaction-related data: products ordered, amounts, payment method, VAT number (if applicable). This data is essential for managing your orders.

Browsing data: technical and analytical cookies. Only cookies that are strictly necessary for the proper functioning of the site are collected without consent. Others (e.g., analytical cookies) require your consent.

Recruitment data: resume, cover letter, interview history. This data is required to evaluate any application.

*Without a valid email address or phone number, we will not be able to process your order or keep you informed in the event of a delivery incident.

All data is processed in accordance with Regulation (EU) 2016/679 of April 27, 2016 (“GDPR”) and the Luxembourg law of August 1, 2018.

3. Why do we use your data?

Your data is used solely for the following purposes:

To fulfill and track your orders: this includes order taking, payment, delivery, and after-sales service. The legal basis is the performance of a contract.

To meet our legal obligations: particularly in terms of accounting, billing, archiving, or combating fraud.

For commercial prospecting, sending newsletters, or contests: based on our legitimate interest or your consent, as applicable. You may opt out of receiving these communications at any time by clicking on the unsubscribe link in our communications.

As part of our recruitment process: to evaluate your application, based on pre-contractual measures.

To perform statistical analyses and improve our products and services. The data used for this purpose is always aggregated and anonymized.

4. How long do we keep them?

The retention period varies depending on the type of data and its purpose:

Data related to orders and invoices is used for the duration of the commercial relationship, then stored in legal archives for 10 years. It is then irreversibly anonymized.

Prospecting data (such as subscriptions to our newsletter) is retained for 3 years after your last contact with us, then deleted.

Applications are kept for two years after the recruitment process has closed, before being deleted.

Cookies are stored for the periods indicated in the consent banner and are automatically deleted upon expiration.

5. Who can receive your data?

Oberweis internal services (customer service, logistics, accounting, marketing).

Subcontractors: carriers, payment service providers, hosting providers, marketing agencies (contracts compliant with Article 28 of the GDPR).

Competent authorities when required by law.

No transfers outside the European Economic Area are made without adequate safeguards (standard contractual clauses or adequacy decisions).

6. Your rights

Vous disposez : droit d’accès, de rectification, d’effacement, de limitation, d’opposition, de portabilité, et du droit de définir des directives post-mortem.

To exercise your rights:

e-mail : rgpd@oberweis.lu

mail: Oberweis S.A. – GDPR – 1 rue Guillaume Kroll, L-1882 Luxembourg

by telephone : +352 40 31 40-1.

We will respond within one month (extendable by two months in complex cases).

You can contact the CNPD (15 bd du Jazz, L-4370 Belvaux, info@cnpd.lu) if you believe that your rights are not being respected.

7. Cookies

When you browse our website, essential technical cookies are stored by default. Analytics and marketing cookies (Google Analytics, Meta Pixel, etc.) are only stored after you have given your explicit consent via our banner. You can manage your preferences at any time in the “Manage my cookies” section.

Below are some useful links for disabling cookies:

Chrome

Firefox 

Internet Explorer 

Safari 

8. Updates to the package insert

We may amend this notice to reflect legal developments or changes in our practices. Any new version will be published on oberweis.lu with the date of the update; in the event of a substantial change, we will notify you by email or via a dedicated banner.