Privacy Notice

Privacy Notice
Shamir Website

Shamir Optical Industry Ltd. and its subsidiaries (collectively – “Shamir”, “we”, “us”, “our”), respect the privacy and data protection rights of website visitors. Under this Privacy Notice, we, inform you about the personal data we collect when you visit our website, https://shamir.com/ (“Website”), why we collect it, and how we use it. Your personal data means any information relating to you, in particular your name and contact details such as your telephone number or your email address.

If you have any question regarding our use of your personal data, you can of course contact us as set out below:

Our contact details are: Shamir Optical Industry Ltd., Kibbutz Shamir, Upper Galilee 1213500, Israel; info@shamir.com.

 

WHAT PERSONAL DATA WE COLLECT AND WHY

 

Scenario	Purpose	Specific Types of Personal Information Collected
When you submit an inquiry through the Contact Form on the Website	To handle and respond to your inquiry when you contact us.	Name, email address, company affiliation, phone number, country, and content of inquiry.
When you subscribe to our “latest trends, products &news” or click the “Keep me updated and tell me what’s new” button on the contact form	For our business development efforts in sending you marketing communications and other industry insights and announcements. This data is processed with your consent, given by clicking the “Submit” button.	Email address
Whenever you access and use the Website	Providing us insights into how the Website is used. This helps our development and enhancement of the website, ensures optimal display and functionality on your device.	This information is collected through cookies. It includes data related to your browsing on our website- the pages that you accessed, the date and time you accessed to these pages, your search queries, information on your device (hardware model, operating system version, unique device identifiers, Internet protocol address, hardware settings, browser type, browser language), the date and time of your request and referral URL.
We receive your information as a representative of an existing or prospective vendor or service provider	Administering the business relationship with vendors and service providers. Facilitating our use of vendors’ and service providers’ products and services.	Name, email address, company, position, professional skills, phone number, country, communications exchanged with you.
To enforce this Notice and comply with applicable law and judicial orders	We will use your information to prevent fraud, resolve disputes, troubleshoot problems, assist with any investigations, enforce this Notice and take other actions otherwise permitted by law	Subject to the specific scenario

 

You are not legally obligated to provide us the personal information described above. However, if you choose not to, we will not be able to respond to your inquiry, maintain business contact with you, or process your request to receive updates on our latest trends, products, and news.

HOW WE USE PERSONAL DATA WE COLLECT

We only use your personal data within the limits authorized by all applicable laws and regulations. In any case, we do not make any automated decisions solely on automatic processing which may produce legal effects concerning you, or similarly significantly affect you.

 

HOW LONG WE KEEP PERSONAL DATA WE COLLECT

The retention periods for your personal data depend on the purpose for which we collect this data is processed for. We will retain your personal data only for as long as (i) necessary for the respective purpose, (ii) necessary to carry out our relationship with you, and (iii) required by statutory retention laws.

PERSONAL DATA WE SHARE

We will not sell, share, rent, or license your Information to third parties except for the cases listed below or when you provide us with your explicit and informed consent – :

• Shamir’s affiliate or corporate transactions: we may share your information with Shamir’s affiliates for legitimate business purposes, including, processing operations, such as data hosting and maintenance.
• As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, sale of assets, dissolution, or similar event, we may share your information as part of the transaction.
• Third Party Service Providers: We may use third party service providers (including cloud storage and web hosting providers) to host the Services and store data processed in the scope of the Services; or other Services providers that may handle, data management, customer data pooling or aggregating, feature administration, email distribution, market research, information analysis, and promotions management. These service providers will only have access to the information needed to perform these limited functions on our behalf and not for their own promotional purpose.
• Legal or Regulatory Obligations. We may disclose and/or share your information to comply with legal or regulatory obligations (including to comply with a court order, judicial subpoena or other subpoena or warrant), industry standards, judicial process, and our policies, as well as to protect against, identify, investigate, prevent and respond to fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our Service), and claims and other liabilities.
• If you abused your rights to use the Website or violated any applicable law while doing business with us. We may take necessary actions to respond to, address, and mitigate suspected legal violations related to our business.

Third party cookies. For more details, refer to our Cookie Policy available here.

Additional information for those in the EEA or UK

When we share your personal data as described above, the recipients of the data are located in countries outside the European Union/European Economic Area. Some of these countries do not provide the same standard of legal protection for your information as in the EU.

We share your personal data with recipients located in Israel. The European Commission has decided that this country ensures an adequate level of data protection.

We also share your personal data with recipients located in the USA, Hong-Kong, India or Thailand. These countries have no adequacy decision by the European Commission. This means that the level of data protection in such country is not comparable with the level of data protection in the European Union. Therefore, we use as an appropriate safeguard to secure your personal data the EU Standard Contractual Clauses as part of our data transfer and processing agreements with such recipients.

In case you require additional information concerning the transfer and/or safeguards of your personal data we invite you to contact us at info@shamir.com.

Please note that pursuant to the EU General Data Protection Regulation (GDPR), Shamir RX Italia S.r.l is the representative of the non-EU Shamir entities in the EU, to represent it with regard to its respective obligations under the GDPR, in accordance with Article 27 of the GDPR.

Shamir RX Italia S.r.l contact details: Via Castelmorrone 72, 35138 Padova, Italia.

Email address: shamirrxitaliasrl@pec.it

 

Legal basis under EU/EEA law for processing your personal data

• The legal basis for collecting and processing your inquiry information is our legitimate business interests in responding to your inquiry.
• The legal basis for processing your information about your use of the Website to provide us insights into how the Website is our legitimate interest in managing the website, supporting business development, planning, and expanding the reach of our products and services to our audiences.
• The legal basis for providing you with marketing materials is your consent.
• The legal basis for processing information of a representative of an existing or prospective vendor or service provider is our legitimate interests in administering our relationship with vendors and prospective vendors.
• The legal basis for responding to, handling, and mitigating suspected violations of law in connection with our business is our legitimate interest in defending against and addressing violations and breaches that may harm our business.
• The legal basis for sharing your information with competent authorities or other third parties, if you violate the law or abuse your rights to use the website, is our legitimate interest in protecting our business from abuse and legal violations.
• The legal basis for required disclosures of your information to a judicial, governmental, or regulatory authority is our legitimate interest in complying with mandatory legal requirements imposed on us.
• The legal basis for sharing your information within our corporate group is our legitimate interests in operating our business as a corporate group.
• The legal basis for sharing your information in the event of a change in our corporate structure or a corporate transaction is our legitimate interests in our business continuity.

Data subject rights.

If you are in the EU or the UK, you have the following rights under the General Data Protection Regulation (GDPR) –

Right to Access and receive a copy of your personal information that we process.

Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed.

Right to easily and at any time withdraw your consent regarding our processing of your personal data for emailing you about our “latest trends, products & news”, updating you on what’s new, or using non-essential cookies on our website. Withdrawing your consent will not affect the lawfulness of processing that occurred before the withdrawal.

Right to Data Portability, that is, to receive the personal information that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your personal information transmitted directly from us to the person or entity you designate.

Right to Object to our processing of your personal information based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such personal information for the establishment, exercise, or defense of legal claims.

Right to Restrict us from processing your personal information (except for storing it): (a) if you contest the accuracy of the personal information (in which case the restriction applies only for a period enabling us to determine the accuracy of the personal information); (b) if the processing is unlawful and you prefer to restrict the processing of the personal information rather than requiring the deletion of such data by us; (c) if we no longer need the personal information for the purposes outlined in this Notice, but you require the personal information to establish, exercise or defend legal claims; or (d) if you object to our processing based on our legitimate interest (in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours).

Right to be Forgotten. Under certain circumstances, such as when you object to our processing of your personal information based on our legitimate interest and there are no overriding legitimate grounds for the processing, you have the right to ask us to erase your personal information. However, notwithstanding such request, we may still process your personal information if it is necessary to comply with our legal obligations, or for the establishment, exercise, or defense of legal claims.

If you are a French user, you also have the right to set guidelines for the retention, erasure and communication of your personal data after your death.

If you wish to exercise any of these rights, please contact us at: info@shamir.com.

When you contact us, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason.

You have a right to submit a complaint to the relevant supervisory data protection authority. Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, you can lodge a complaint to the supervisory authority, in particular in the Member State of your residence or place of work, of an alleged infringement of the GDPR.

• If you are in the UK, you can lodge a complaint to the Information Commissioner’s Office (ICO) pursuant to the instructions provided here.
• For a list of national supervisory authorities in the member states of the European Economic Area and their contact information, click here.

HOW WE PROTECT PERSONAL DATA

We implement measures to reduce the risks of damage, loss of information and to protect your personal data against unauthorized access, use, or disclosure of information. These include access control and restrictions on access and confidentiality obligations. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure your personal information, there is no guarantee that it will be completely immune to information security risks.

CHANGES TO THIS PRIVACY NOTICE

From time to time, we may change this Notice. While updates may occur, we will not reduce your rights under this Privacy Notice without your explicit consent. The latest version of theNotice will always be accessible on the Website at https://shamir.com/privacy-notice/.

[Last Revised: November 25, 2025]