Data protection policy

Foreword

LUX’US s.à r.l. (hereinafter referred to as “LUX’US”) places great importance on respecting your privacy and is aware of the importance you attach to it.

LUX’US therefore makes every effort to ensure that you can use the services offered by this website with confidence, in particular by processing your data transparently, in strict compliance with applicable laws and regulations regarding the protection of personal data, as well as in accordance with your own preferences.

Controller of your personal data

The personal data concerning you collected via this website is subject to automated processing, for which the controller is:

LUX’US s.à r.l.
Address: 33 rue Hicht, L-6238 Breidweiler

When is your personal data collected?

During the use of this website, LUX’US may collect your personal data at different times or places when:

you browse the pages of the website,
you subscribe to our information feeds (newsletter, RSS feed, notifications, etc.),
you contact us (via the “Contact” section),

LUX'US ensures that only data strictly necessary for providing the services you wish to use is collected.

Purposes of processing your personal data (“Purposes”)

The personal data concerning you collected via this website is processed for the following purposes:

to provide you with the requested service or information
to compile statistics and traffic analyses in order to improve the quality of the services offered
to inform you about products, events, services & offers from LUX’US and its partners if you are subscribed to these information feeds (newsletter, RSS, etc.)
to offer you personalized commercial offers or benefits as part of our loyalty program, if you participate
to send you advertising or marketing messages, provided that you have given your consent
to ensure the security of access to your personal data and detect possible intrusion attempts
to manage your feedback via surveys in which you participate
to offer you participation in competitions or lotteries

For each of the purposes listed above, the processing of your personal data is legally based on:

the necessity for the performance of a contract between LUX’US and yourself, or pre-contractual measures taken at your request;
compliance with a legal obligation to which LUX’US is subject;
your consent;
a legitimate interest of LUX’US (fraud prevention, data and infrastructure security, etc.).

Difrulux ensures that your personal data is processed in a manner fully compatible with the purposes described above. If your data is processed for a purpose other than the one initially intended, you will be informed in advance and will have the possibility to object to this new processing.

Nature of the personal data collected

Your “personal data” refers to any information relating to you as a natural person that allows you to be identified, directly or indirectly.

The personal data that LUX’US may collect when you browse this website includes:

basic identification data, such as your first and last name, postal address, email address, phone number, etc.
technical connection and browsing data, such as your IP address, date & time of connection, pages visited, browser characteristics (type, language, etc.) and device characteristics (type, resolution, etc.), cookies, etc.
geolocation data
publication data, such as your interests, opinions, comments, ratings, messages posted via forums and community or social features of the website

Some information is mandatory to achieve the purposes described above, while others are optional. You are always informed whether providing data is mandatory or optional at the time of collection. Failure to provide mandatory information may result in LUX’US being unable to provide the requested product or service or guarantee its expected quality.

Recipients of your personal data

The personal data collected on this website is intended exclusively for use by LUX’US. However, it may be transmitted:

to subcontractors used by LUX’US for service provision, such as website hosting and IT operations, newsletter distribution, management, processing and payment of online purchases
to commercial partners, provided that you have given your consent to receive communications from them

Finally, LUX’US may be required to transmit your personal data to a third party upon request from judicial authorities or any administrative authority authorized by law.

Your data is not shared with any other third parties.
LUX’US also ensures that any transfer of your personal data to authorized third parties does not result in a transfer outside the European Union.

Retention period of your personal data

Your personal data collected and processed by LUX’US will only be retained for as long as strictly necessary for the intended purpose or to comply with legal obligations. Thus, LUX’US will retain:

up to 3 years after the end of the commercial relationship for data used for marketing, promotional, or prospecting purposes
up to 10 years after the end of the commercial relationship for data related to contractual (contracts, guarantees, claims, disputes, etc.) or accounting matters (invoices, orders, delivery notes, etc.)

Protection of your personal data

LUX’US implements appropriate and reasonable security measures in view of the risks associated with processing, in order to protect your personal data against destruction, loss, alteration, unauthorized disclosure or access, and any other unlawful processing.

All employees and subcontractors of LUX’US who have access to your personal data in the course of their duties are bound by strict professional confidentiality. They only access the data necessary to perform their tasks and are regularly made aware or trained regarding compliance and security rules applicable to personal data.

Your rights

As LUX’US processes your personal data, you have the following rights at any time, within the limits set by law:

to access your personal data (to know what data has been collected and processed and obtain a copy), request its correction if inaccurate or incomplete, or its deletion if outdated
to object to the processing of your data for legitimate reasons (particularly for marketing purposes)
where applicable, to request restriction of processing or erasure of your data (right to be forgotten)
to receive a copy of the personal data you have provided in a structured format (data portability), unless this infringes the rights and freedoms of others
not to be subject to decisions based solely on automated processing, including profiling, if such decisions produce legal effects or significantly affect you; you may request information about the logic involved, contest the decision, and request human review
to withdraw your consent at any time where processing is based on consent

You can exercise these rights free of charge by contacting us:

by email: info@fooddelux.com
by post: 33 rue Hicht, L-6238 Breidweiler

To process your request and prevent identity fraud, a copy of a valid ID (front and back) must be attached.
LUX’US undertakes to respond within a maximum period of one month after receiving a complete request.

You may also lodge a complaint with the **Commission nationale pour la protection des données via their website: www.cnpd.lu