INFORMATION ON PERSONAL DATA
Following the provision of the EU Regulation 679/2016 (“GDPR – General Data Protection Regulation”) Luigi Lavazza S.p.A. and the other affiliated companies inform that any personal data provided by the Data Subject (meaning the individual who is the subject of personal data) will be used in accordance with the applicable regulation and in compliance with the following criteria:
1) DATA CONTROLLER
Data Controller the person recognized by law who determines the purposes for which and the manner in which any personal data are, or are to be, processed is the Luigi Lavazza S.p.A (hereinafter Lavazza) having its registered office at Torino, Via Bologna 32–10152 - Italy in person of his pro-tempore legal representative. Lavazza Coffee (UK) Limited is is a wholly-owned subsidiary of Luigi Lavazza S.p.A. This privacy notice is issued on behalf of the Lavazza Group so when we mention "Lavazza", "we", "us" or “our” in this privacy notice, we are referring to the relevant company in the Lavazza Group responsible for processing your data. Lavazza Coffee (UK) Limited is the controller and responsible for this website.
We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out below.
2) PERSONAL DATA
Lavazza will process only the following categories of personal data:
Lavazza does not collect and does not process any sensitive data on the Site, such as, for example, those able for revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data capable of revealing the state of health and sexual life.
Lavazza will request only the personal data strictly necessary to provide the services requested by users. The data provided that will be processed for the purposes related to the activity of the Site and will be stored and processed to ensure the respect of the data subject rights
3) RIGHT TO WITHHOLD THE PERSONAL DATA
Providing personal data is optional, but may be necessary for the achievement of some of the purposes indicated (eg the activation of contractual and commercial relations, the management of competitions and prize operations, sending newsletters, etc. .), not provide personal data reported as mandatory will not allow Lavazza to pursue the abovementioned purposes .
The mandatory or optional nature of the personal data is from time to time reported using symbols (eg "*") placed alongside the information whose conferment is mandatory to pursue the respective purpose.
In any case, personal data will be processed by Lavazza only on the following legal basis:
4) PURPOSE OF PERSONAL DATA PROCESS
The personal data you provide will be collected and processed by Lavazza for the following purposes:
4.1 Further Purposes
5) HOW WE TREAT YOUR DATA
Personal Data process is compliant with the provisions of the GDPR and with all the other relevant applicable law, and it is performed with the help of electronic and automated tools, all designed to ensure the maximum security and confidentiality extent to the personal data processed In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
All personal data provided are kept by the Data Controller in compliance with appropriate security measures. The Data Controller will implement appropriate technical and organizational measures to guarantee a level of security appropriate to the risk of processing.
6) HOW DO WE COMMUNICATE OR TRANSFER YOUR PERSONAL DATA
Personal data may be made accessible for the purposes above mentioned to:
The personal data will not be disclosed to third parties, except for the other companies belonging to the Lavazza Group, Italian and / or abroad. We do not transfer any personal data outside the European Economic Area.
The personal data may also be disclosed to primary third-party companies (business partners and service providers) if and as legitimately instructed by Lavazza as Data Processors to perform functional activities to achieve the purposes as indicated above.
The list of the Data Processor will be constantly updated and at your disposal by contacting the Data Controller at the addresses indicated below
7) DATA RETENTION PERIOD
Personal Data useful for Site signing-in will be kept for the entire duration of its registration on the Site and for the further period provided for by law, in relation to the purpose of the collection.
Personal Billing Data will be kept for a period of time to guarantee the correct execution of the contract and the fulfillment of the related administrative and fiscal obligations.
Data collected for the purposes of sending promotional and advertising material and data collected for commercial profiling purposes will be retained for a period not exceeding 24 months or the different period indicated by the supervisory authorities.
Personal data collected for the management of prize competitions and transactions will be kept for the entire duration of the premium transaction and for a period of time to ensure the correct execution of the contract and the fulfillment of the related administrative and tax obligations.
The data collected for profiling purposes will be kept for a period of time not exceeding 12 months or at the different period indicated by the supervisory authorities
We strongly recommend that parents take an active role in supervising the online activity of their children under the age of sixteen. Lavazza generally does not intend to collect personal data from and/or generally does not intentionally communicate with children. However, in case we need to communicate with a child, we will endeavor to give the parents or legal guardians a reasonable opportunity to consent before we use the personal data of the child, except where we merely answer the child’s question or service the child’s request
9) RIGHTS OF THE DATA SUBJECT
Data Subjects may at any time exercise the rights provided by the EU Regulation 679/2016, including:
10) EXERCISE OF THE RIGHTS – DPO CONTACTS
In the event data subject wishes to exercise the aforementioned rights or wishes to receive further clarifications regarding the processing of personal data, data subject may write to the Data Controller at the following address:
LUIGI LAVAZZA S.p.A.
Via Bologna, 32
10152 Turin (TO)