Privacy policy
I. Information regarding the processing of personal data
1. Below we provide information about the processing of personal data when using our website https://shop.voltmax.lu/shop and when placing an order for goods. Personal data is all data that can be identified, e.g., name, address, email address, user behavior.
2. The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: "GDPR") is:
VOLTMAX Sàrl
with its registered office at 47 Rue Mathias Tresch, 2626 Luxembourg
email address:ecommerce@voltmax.lu .
tel. +352 26 33 86
3. Your personal data is processed using appropriate technical and organizational measures to ensure the protection of this data. Despite the use of security measures in line with current knowledge and standards, the risk of personal data being used by unauthorized persons as a result of theft cannot be completely ruled out.
4. If you contact us by email, the data you provide (email address, first and last name, and telephone number, if applicable) will be stored by us in order to respond to your questions. We delete the data created in this context once storage is no longer necessary, or restrict processing if there are statutory storage obligations.
5. Your personal data will only be processed for the following purposes:
· use of our website based on your interest in our offer (basis under Article 6(1)(b) of the GDPR);
· fulfilling your order;
· fulfilling a legal obligation, if such an obligation is imposed on us (basis under Article 6(1)(c) of the GDPR);
· archiving (evidence) for the purpose of securing information in the event of a legal need to prove facts, which is our legitimate interest (basis under Article 6(1)(f) of the GDPR);
· possible establishment, investigation, or defense against claims, which is our legitimate interest (basis under Article 6(1)(f) of the GDPR);
· sending commercial information, if you have consented to receiving commercial information (legal basis under Article 6(1)(a) of the GDPR);
6. If we have obtained your personal data on the basis of your consent, it will be stored until you withdraw your consent, unless a different storage period results from specific provisions. In other cases, your personal data will be stored until your order has been successfully completed and, after its completion, until the expiry of the limitation period for claims arising from each contract. With regard to data resulting from mutual settlements and accounting data, until the expiry of the storage period resulting from specific provisions (e.g., the Accounting Act).
7. Personal data is stored for the following periods:
– User Account data – until the account is deleted;
– Order and settlement data – for the period required by tax and accounting law (as a rule, 10 years);
– complaint data – for the period of limitation of claims;
– data processed for marketing purposes – until consent is withdrawn;
– data processed on the basis of the Administrator's legitimate interest – until an effective objection is lodged or the purpose of processing ceases to exist.
8. Without your explicit consent, the controller will not disclose your personal data to companies or third parties that could use it for their own purposes. The exception is authorized state authorities, acting within the framework of applicable law, to whom we are obliged to disclose your data.
9. When you place an order for goods, we may share some of your data with other service providers that we have engaged to perform services on our behalf (e.g., couriers who deliver orders placed online or companies that perform services for you on our behalf, IT service providers). However, these service providers are required by relevant agreements to use the data entrusted to them only in accordance with our guidelines and for a purpose strictly defined by us. We also require them to adequately secure your data and keep it confidential.
10. For the purpose of processing payments, personal data may be transferred to the following payment operators:
– PayPal (Europe) S.à r.l. et Cie, S.C.A.,
– Przelewy24 (PayPro S.A.),
– Stripe Payments Europe Ltd. (card payments).
11. The administrator does not process or store payment card data – this data is processed exclusively by the indicated payment operators as independent data administrators.
12. In connection with the use of tools such as Google Analytics, Meta (Facebook/Instagram), PayPal, or other technology providers, personal data may be transferred to third countries outside the European Economic Area, in particular to the United States. Data transfers are carried out exclusively on the basis of Standard Contractual Clauses (SCC) approved by the European Commission or other mechanisms provided for in the GDPR.
II. Your rights
1. You have the following rights in relation to us with regard to your personal data:
a. The right to information about the processing of your personal data, as referred to in Article 12 of the GDPR
As the Controller, we are obliged to provide you, as the data subjects, with the information specified in the GDPR (including information about our data, the purposes and legal basis for the processing of personal data, the recipients or categories of recipients of personal data, if any, the period for which the data will be processed or the criteria for determining that period) this obligation must be fulfilled at the time of data collection (i.e., when a customer places an order), and if the data is not obtained from the data subject but from another source, within a reasonable time, depending on the circumstances; the Controller may refrain from providing this information if the data subject already has it.
b. The right to access personal data and request a copy thereof, referred to in Article 15 of the GDPR
By providing us with your personal data, you have the right to inspect and access it; however, this does not mean that you have the right to access all documents containing your data, as they may contain confidential information; however, you have the right to know what data we process and for what purpose, and the right to obtain a copy of your personal data, with the first copy being provided free of charge and each subsequent copy subject to an administrative fee in accordance with the provisions of the GDPR, corresponding to the costs of preparing such a copy and providing it to you upon request.
c. The right to rectify or update data referred to in Article 16 of the GDPR
If your personal data has changed, please inform us as the Controller so that we can update our data to reflect the actual situation; also in a situation where there has been no change in your personal data, but for any reason your data is incorrect or has been recorded in an incorrect manner (e.g., due to a clerical error), please inform us so that we can correct or rectify such data.
d. The right to erasure of personal data (the right to be forgotten) referred to in Article 17 of the GDPR
You have the right to request the so-called "erasure" of your data held by us as the Controller and the right to request us, as the Controller, to inform any processors acting on our behalf to whom we have transferred your data of the need to erase it. You may request the erasure of your personal data, in particular, where:
· the purposes for which the personal data were transferred have been fulfilled, e.g., we have fully performed the contract concluded with you,
· the basis for the processing of your personal data was solely your consent, which was subsequently withdrawn, and we, as the Controller, have no other legal basis for further processing your personal data,
· you have objected on the basis of Article 21 of the GDPR and you believe that we have no overriding legal grounds for further processing your personal data,
· your personal data has been processed unlawfully, i.e. for unlawful purposes or without any basis for processing personal data – please note that in this case you must have a basis for your request,
· the need to delete your personal data arises from legal provisions,
e. Right to restriction of processing referred to in Article 18 of the GDPR
You have the right to contact us as the Controller with a request to restrict the processing of your personal data (which would mean that until the matter is clarified, our company would primarily only store your data), in particular if:
· you question the accuracy of the personal data provided, or
· you believe that we are processing your data without a legal basis, but at the same time you do not want us to delete this personal data (i.e. you do not exercise the right referred to in point 1 d above), or
· you have objected to the processing of your data referred to in point 1 g below, or
· your personal data is necessary for us to establish, pursue, or defend our claims, e.g., in court or other proceedings;
f. The right to data portability referred to in Article 20 of the GDPR
You have the right to obtain your data in a format that allows it to be read on a computer and the right to send this data in such a format to another controller; you are only entitled to this right if the basis for the processing of your data was consent or if the data was processed automatically,
g. The right to object referred to in Article 21 of the GDPR and the right not to be subject to automated decision-making (profiling) referred to in Article 22 in conjunction with Article 4(4) of the GDPR
You have the right to object to the processing of your personal data in cases where the processing is based on Article 6(1)(f) of the GDPR (legitimate interest of the Administrator), for reasons related to your particular situation.
Notwithstanding the above, you have the right to object at any time to the processing of personal data for direct marketing purposes. If such an objection is raised, personal data will no longer be processed for this purpose.
When using the website https://shop.voltmax.lu/shop, you are not subject to automated decision-making, including profiling, which would have legal effects on you or similarly significantly affect your situation within the meaning of Article 22 of the GDPR.
The store may use marketing and analytical tools provided by third parties, in particular:
Meta (Facebook Pixel, Instagram), Google (Analytics, Ads, YouTube), LinkedIn Insight Tag, TikTok Pixel, Pinterest Tag.
These tools may use cookies and similar technologies to analyze traffic, remarketing, and measure the effectiveness of advertising campaigns only after obtaining the User's prior consent, expressed via a cookie banner (Consent Management Platform).
The administrator may use marketing profiling consisting of the automatic analysis of selected information about the User in order to tailor the offer, recommend products, and use upselling and cross-selling mechanisms. This profiling:
· has no legal consequences for the User,
· does not significantly affect the User's situation,
· is carried out solely on the basis of the User's consent.
The legal basis for data processing for marketing profiling purposes is Article 6(1)(a) of the GDPR (consent).
The User may withdraw their consent or object to the processing of data for marketing purposes at any time.
h. Right to withdraw consent to the processing of personal data
In addition, you have the right to withdraw your consent to the processing of your personal data at any time if your data is processed on the basis of your consent. Please note that your withdrawal of consent does not affect the lawfulness of the processing of your data that was carried out on the basis of your consent prior to its withdrawal.
i. Right to lodge a complaint with the President of the Personal Data Protection Office, referred to in Article 77 of the GDPR
In addition, you also have the right to lodge a complaint with the data protection supervisory authority in relation to our processing of your personal data, i.e.
Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux
Grand Duchy of Luxembourg
j. Objection to data processing or withdrawal of consent
If you have consented to the processing of your data, you may withdraw your consent at any time. Such withdrawal of consent to data processing affects the processing of your personal data after you have notified us of your withdrawal of consent.
If the processing of personal data is based on a balancing of interests, you may object to the processing. This is the case if the processing is not necessary in particular for the performance of a contract with you, as described by us in the following description of functions. When raising such an objection, please explain the reasons why we should not process your personal data in the manner we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the processing or point out to you the compelling legitimate grounds on which we will continue to process the data.
You can, of course, withdraw your consent to the processing of your personal data at any time or object to the processing of your personal data for advertising and data analysis purposes by contacting . You can inform us of your objection by sending it to the following email address:ecommerce@voltmax.lu .
III. Collection of personal data when visiting our website
1. When you use our website for informational purposes only, i.e. if you do not provide us with any personal data in any way or for any other purpose, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary to display our website and to ensure stability and security (the legal basis is Article 6(1)(f) GDPR):
IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred each time
Website from which the request originated
Browser
Operating system and its interface
Language and version of the browser software.
2. In addition to the above-mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on the hard drive of the browser you are using and through which certain information flows to the place that sets them (in this case, to us). Cookies cannot run programs or deliver viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
3. Use of cookies:
This website uses the following types of cookies, the scope and function of which are explained below:
Short-term session cookies (see a)
Long-term persistent cookies (see b)
a. Temporary cookies are automatically deleted when you close your browser. This applies in particular to session cookies. They store a so-called session ID, which can be used to assign various browser requests to a shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
b. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies manually at any time in your browser's security settings.
As a user, you can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that this may prevent you from using certain features of the website.
Cookies are never used to personally identify you and never provide confidential or personal data.
You can modify the use of cookies (delete cookies) at any time.
All cookies already on your computer can be deleted. Most browsers also offer the option to block cookies. You can change your cookie settings at any time and specify the conditions under which cookies are stored on your device and accessed. You can change your cookie settings using your web browser settings or by configuring the service. For detailed information about storing cookies in your browser, you can change the settings on the website used by your web browser.
The most popular browsers are:
· Chrome
· Firefox
· Internet Explorer
· Opera
· Android
· Safari
Detailed information can be found at AboutCookies.org.
However, restricting the use of cookies may affect some of the functionality of our website. The data we share with third parties is used solely to provide the services described in this document. We use analytics tools to collect statistical data in order to optimize our website and present information that may be of interest to you.
IV. Direct marketing, behavioral marketing, and newsletters
1. The administrator may process Users' personal data (in particular their email address) for the purpose of sending commercial information about VOLTMAX products and services, including newsletters, only if the User has given their voluntary consent.
2. The newsletter is sent using the Odoo system, and subscription to the newsletter is based on a double opt-in model, which means that after subscribing, the User receives an email asking them to confirm their subscription.
3. The user may withdraw their consent to receive the newsletter at any time by clicking on the unsubscribe link included in each message or by contacting the Administrator.
4. The legal basis for data processing is Article 6(1)(a) of the GDPR (consent).
5. The Administrator may process Users' personal data for the purpose of sending reminders about unfinished purchases (so-called abandoned shopping carts), provided that the User has consented to receiving marketing communications.
6. This processing is carried out within the framework of the Administrator's legitimate interest or on the basis of consent, depending on the User's settings.
7. The legal basis for data processing is Article 6(1)(a) or (f) of the GDPR.
V. Use of Google Analytics
1. This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyze how Users use the website.
2. Google Analytics is only used after the user has given their prior consent via the cookie banner (Consent Management Platform – CMP). The user has the option to give, refuse, or withdraw their consent at any time via the cookie settings available on the website.
3. Information generated by cookies about the use of the website may be transferred to Google servers outside the European Economic Area, in particular to the United States. Data transfer is based solely on Standard Contractual Clauses (SCC) approved by the European Commission.
4. This website uses IP anonymization, which means that your IP address is truncated before further processing.
5. The legal basis for data processing within Google Analytics is Article 6(1)(a) GDPR (consent).
6. You can also prevent Google Analytics from collecting data by installing a browser add-on available at:
http://tools.google.com/dlpage/gaoptout
7. Cookies used for analytical and marketing purposes, including Google Analytics, are stored on the User's device only after obtaining their prior consent via the cookie banner.
8. Information about the third party – Google Analytics
The provider of the Google Analytics service is Google Ireland Ltd.,
Gordon House, Barrow Street, Dublin 4, Ireland.
Detailed information on Google's data processing policies is available at the following addresses:
– Google Terms of Service:
https://policies.google.com/terms
– Google Privacy Policy:
https://policies.google.com/privacy
– Google Analytics privacy information:
https://www.google.com/analytics/learn/privacy
Google Analytics is used on the VOLTMAX website only after obtaining the User's prior consent, expressed via a cookie banner.
VI. Google Maps
1. The https://volt-max.odoo.com/shop website uses Google Maps to display interactive maps and enable route planning.
2. The provider of the Google Maps service is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The use of Google Maps may involve the processing of Users' personal data, in particular such as IP address, location data, device information, date and time of visit to the website, and data relating to the use of the map service.
3. When using Google Maps, personal data may be transferred to third countries outside the European Economic Area, in particular to the United States. Data transfers are carried out exclusively on the basis of Standard Contractual Clauses (SCC) approved by the European Commission.
4. The use of Google Maps on the VOLTMAX website is only possible with the prior consent of the user, expressed via a cookie banner (Consent Management Platform). Google Maps will not be loaded until consent has been given.
5. The legal basis for data processing in connection with the use of Google Maps is Article 6(1)(a) GDPR (consent).
6. Detailed information on data processing by Google is available in Google's privacy policy at:
https://policies.google.com/privacy
and in the Google Maps Terms of Use:
https://www.google.com/intl/de_de/help/terms_maps.html
7. The controller has no influence on the scope or manner of data processing by Google within the Google Maps service.
VII. Social media and social plugins
1. The website https://shop.voltmax.lu/shop uses social media tools and plugins that enable interaction with content published on social media sites and analysis of the effectiveness of marketing activities.
2. In particular, tools provided by the following providers may be used:
Meta Platforms (Facebook, Instagram), Google (YouTube), X Corp. (Twitter/X), Pinterest, as well as other comparable marketing and analytical tools.
3. Social media plugins are implemented in a way that ensures the protection of Users' privacy, in particular by using a "two-click" mechanism or an analogous technical solution. This means that until the User takes active action (e.g., clicks on the plugin icon), personal data is not transferred to social media providers.
4. Only after the plugin has been activated may the User's personal data be transferred to the relevant provider, in particular data such as IP address, browser and device information, date and time of visit, and the address of the page visited. If the User is logged into a social media service at the same time, this information may be assigned to their user account.
5. Social media providers may process User data as independent data controllers, in particular for marketing, analytical, and market research purposes. The controller has no influence on the scope or manner of data processing by these providers.
6. The use of social media plugins on the VOLTMAX website is only possible with the prior consent of the User, expressed via the cookie banner (Consent Management Platform).
7. The legal basis for data processing in connection with the use of social media plugins is Article 6(1)(a) GDPR (consent).
8. In connection with the use of social media, personal data may be transferred to third countries outside the European Economic Area, in particular to the United States. Data transfers are carried out exclusively on the basis of Standard Contractual Clauses (SCC) approved by the European Commission.
9. Detailed information on data processing by individual providers can be found in their privacy policies:
· Meta (Facebook, Instagram): https://www.facebook.com/privacy/policy
· X (Twitter): https://twitter.com/privacy
· Pinterest: https://policy.pinterest.com/privacy
· Google (YouTube): https://policies.google.com/privacy
VIII. VIII. YouTube (video content)
1. The VOLTMAX website may embed video content from YouTube, which is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
2. YouTube video content is only loaded after the User has given their prior consent via the cookie banner. Until consent is given, no connection to YouTube servers is established.
3. When playing video content, YouTube may process the User's personal data, in particular their IP address, device information, data on how the video content is used, and, if logged into a Google account, link this information to the User's account.
4. Personal data may be transferred to third countries outside the European Economic Area, in particular to the United States. Data transfer takes place exclusively on the basis of Standard Contractual Clauses (SCC).
5. The legal basis for data processing in connection with the use of YouTube content is Article 6(1)(a) GDPR (consent).
6. For more information about data processing by Google, please refer to Google's privacy policy:
https://policies.google.com/privacy
IX. Changes to the privacy policy
The data controller reserves the right to change this privacy policy. The current version of the data protection information is always available on the website at https://shop.voltmax.lu/privacy-policy
Status: February 2026
Your VOLTMAX
