Privacy policy

PRIVACY POLICY

Version effective as of 16 June 2026

This Privacy Policy (the "Policy") describes how Nomatic Luxembourg S.à r.l., registered with the Luxembourg Trade and Companies Register under number B270084, VAT number LU34173160, with its registered office located at 8 rue des Mérovingiens, L-8070 Bertrange, Grand Duchy of Luxembourg, collects, uses, stores and protects the personal data of users, customers, suppliers and business partners.

This Policy applies to all services provided under the commercial brands Nomatic Fresh and Nomatic Logistics, as well as to the website www.nomatic.lu, associated applications and authorized partner platforms.

Capitalized terms not defined in this Policy shall have the meanings assigned to them in the Terms and Conditions of Sale available on the Website.

1. COMPLIANCE WITH DATA PROTECTION REGULATIONS

Nomatic Luxembourg S.à r.l. is committed to complying with all applicable data protection laws and regulations, including:

Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation – GDPR).
The Luxembourg Law of 1 August 2018 implementing the GDPR.
Guidelines and decisions issued by the Luxembourg National Commission for Data Protection (CNPD).
Any applicable Luxembourg or European legislation relating to e-commerce, logistics and distance selling.

2. DATA CONTROLLER AND CONTACT DETAILS

The data controller responsible for processing personal data is:

Nomatic Luxembourg S.à r.l.
RCS Luxembourg: B270084
VAT Number: LU34173160
8 rue des Mérovingiens
L-8070 Bertrange
Luxembourg

For any questions regarding personal data protection or to exercise your rights, please contact:

E-mail: info@nomatic.lu
Telephone: +352 661 663 332

3. PURPOSES OF PROCESSING

We collect and process personal data only where necessary for the following purposes:

Creating and managing customer accounts.
Processing orders and payments.
Preparing and delivering orders.
Providing warehousing, fulfilment and logistics services through Nomatic Logistics.
Managing gift cards and loyalty programmes.
Providing customer support.
Preventing fraud and securing transactions.
Complying with legal, accounting and tax obligations.
Improving our services and user experience.
Sending commercial communications where permitted by law.

4. LEGAL BASIS FOR PROCESSING

In accordance with Article 6 of the GDPR, personal data processing is based on one or more of the following legal grounds:

The performance of a contract or pre-contractual measures.
Compliance with legal obligations.
The consent of the data subject where required.
The legitimate interests of Nomatic Luxembourg S.à r.l., particularly regarding security, fraud prevention and service improvement.

5. PERSONAL DATA COLLECTED

Depending on the services used, we may collect the following categories of personal data:

Identification data (name, surname, address, telephone number, e-mail address).
Delivery and billing information.
Order and purchase history.
Payment-related information processed by authorized payment providers.
Loyalty programme and gift card information.
Customer service communications.
Connection and device information (IP address, browser type, operating system).
Logistics and delivery data.

6. DATA RETENTION

Personal data is retained only for the period necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations.

Certain accounting, invoicing and transaction records may be retained for up to ten (10) years in accordance with Luxembourg legislation.

7. DATA SHARING

Personal data may be shared only with:

Payment service providers.
Transport and logistics partners.
IT service providers and hosting providers.
Accounting, legal and professional advisers.
Public authorities where required by law.

8. INTERNATIONAL DATA TRANSFERS

Certain personal data may be processed or hosted by service providers located within the European Union or, where necessary, in third countries providing an adequate level of protection in accordance with the GDPR.

Where transfers take place outside the European Economic Area, appropriate safeguards shall be implemented as required by applicable law.

9. DATA SECURITY

Nomatic Luxembourg S.à r.l. implements appropriate technical and organisational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss or destruction.

10. YOUR RIGHTS

Under the GDPR, you may exercise the following rights:

Right of access.
Right to rectification.
Right to erasure.
Right to restriction of processing.
Right to data portability.
Right to object.
Right to withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact: info@nomatic.lu

11. COOKIES AND SIMILAR TECHNOLOGIES

The Website uses cookies and similar technologies to ensure proper functionality, improve user experience, analyse website performance and secure customer accounts.

Users may manage cookie preferences through the tools available on the Website.

12. COMPLAINTS

If you believe that your personal data rights have not been respected, you may lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD).

CNPD
15 Boulevard du Jazz
L-4370 Belvaux
Luxembourg
www.cnpd.lu

13. CHANGES TO THIS PRIVACY POLICY

Nomatic Luxembourg S.à r.l. reserves the right to amend this Privacy Policy at any time to reflect legal, technical or business developments.

The applicable version shall be the version published on www.nomatic.lu.