Data Confidentiality Policy

GDPR (General Data Protection Regulation)

Customers-suppliers relationship

Who is responsible for data processing?

Personal data are processed by Rosier SA.

Route de Grandmetz 11A

7911        Moustier               T : 069/871510

To whom does our data protection policy applies?

This policy applies to all of our customers/suppliers, former customers/suppliers and individuals/companies we prospect or show interest in our products.  

Which personal data categories are being processed?


Last name, first name, phone number (telephone/mobile), delivery address.


Name of the company, VAT number, bank account number, contact person(s): last name, first name, gender, language, address, delivery address, phone number (telephone/mobile), email address.

As far as possible, we also record the date on which personal data were communicated or updated. 

Information linked to your purchases

Recorded personal data may include transactional information linked to your purchases such as the ordered items, the date on which the purchase was placed, potential claims, potential remarks regarding the purchased items, payment related information.

To what purpose do we use your personal data and what is the legal basis of this processing?

Your personal data are used:

With your consent (legal basis: Article 6a of the privacy regulation):

- When you are asking questions via our website.

As part of the performance of your contract (legal basis: Article 6b of the privacy regulation):

- Follow-up and processing of your order;

- Follow-up and processing of claims and returned items;




- Overall management of customers/suppliers including the accountability, litigation management and legal proceedings, claim transfer or recovering and the protection of our overall rights.  

When having legitimate rights as part of our marketing related business. In such a case, we make sure to always find a balance in order to meet your privacy rights. (legal basis : Article 6f of the privacy regulation) :  

- To inform you of our products;

- To prevent and tackle potential frauds and abuses.

To meet legal obligations we are subjected to (legal basis: Article 6c of the privacy regulation):

We are also subject to tax and accounting liabilities which require the retention and transfer of some personal data to the tax and accounting administrations.

May your personal data be transferred to third parties?

We may disclose your data to contractors working for us (e.g.:  IT service provider…) but only upon our instructions.  

How long are your personal data retained?

Your personal data are retained as long as you are registered in our customer/supplier basis. When the relationships officially ends, personal data are retained in our system with no time limit except in case of an official request from the customer/supplier to erase data.  

How is the security of your personal data preserved?

Your personal data are kept confidential. We strive to implement the necessary technical and organisational actions aimed at protecting your data.

What are your rights? How can you exercise them?

In compliance with the privacy regulation, you have the right of access and rectification of your personal data. Subject to the exceptions provided by applicable law, you also have the right to ask for deletion or “right to forget” of your personal data. When you dispute the accuracy of your personal data you have the right to limit the processing of this data until the dispute is solved. Finally, you have the right of portability. You can object, whenever you wish and without justification, to any processing of your personal data that would be based on direct marketing purposes. 

How to exercise your rights:

Contact us by sending a written request accompanied by a copy of any identity document to: Route de Grandmetz 11 A à 7911 Moustier or  

You also have a right of appeal to the Commission for the protection of privacy:

Réalisation SIP