Art.13 of Regulation EU no.679/2016
Rev. December 2019
The processing of your Personal Data will be based on the principles of correctness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, integrity and confidentiality, in accordance with the provisions of the Regulation.
We wish to inform you, finally, that video-surveillance systems may be installed outside LAVAZZA's buildings for security reasons and to protect company property and assets from possible attacks, theft, robbery or acts of vandalism, as well as for the possible defence of the rights of LAVAZZA in court. In these cases, a privacy notice has been provided with specific signs on site.
1) DATA CONTROLLER
The Data Controller is LUIGI LAVAZZA S.p.A. (hereinafter "Lavazza" and/or the "Data Controller") with registered office in Turin - Via Bologna 32, in the person of its legal representative pro tempore.
2) DATA PROTECTION OFFICER - DPO
In accordance with the provisions of the Regulation, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and will be the contact person for data subjects, as well as for the Italian Data Protection Authority. The DPO can be contacted at the email address PrivacyDPO@lavazza.com
3) PERSONAL DATA PROCESSED
If a request is sent through the "Contact Us" section of the Lavazza website, certain Personal Data must be provided in order to enable Lavazza to meet demands, and hence the related fields on the registration form are marked as compulsory.
In addition to the above categories of Personal Data, other data you have provided directly (so-called "Contributions") may be processed and shared on the Social Network pages dedicated to Lavazza (Facebook, Twitter, Instagram, etc.). To manage these pages, please refer to the third parties that provide these services. Examples of some of the data collected via Social Media are the likes, comments, images and in general all the content and information you may have published on the Social Network pages dedicated to products belonging to the various brands of the Lavazza Group.
4) PURPOSES AND LEGAL BASIS OF THE PROCESSING
In accordance with the needs associated with accessing the various sections of the Lavazza Websites (and without prejudice to the individual initiatives that involve the provision of specific Personal Data, for which specific privacy notices will be published on a case-to-case basis), the purposes of the processing of your Personal Data and the related legal grounds are indicated below:
Access via the use of social networks may involve accessing personal data other than the data provided at the time of registration to our portal, on the basis of the authorisations you have provided to these social networks and which are to be referred to in relation to the policies on the management of your privacy.
Your Personal Data will be processed in order to manage orders and payments, and to fulfil consequent administrative and accounting obligations, as well as to contact you for any information regarding your purchases (for example, information on the status of your orders). The provision of personal data is optional, but necessary to complete the purchase order. The legal basis for the processing is the performance of the Contract to which the data subject is party.
In addition to the previous cases:
5) NATURE OF THE PROVISION
The provision of your Personal Data is optional. However, the failure to provide your Personal Data may result in the impossibility to use certain services (e.g. to place orders and make purchases, to participate in competitions and give-aways, to be sent the newsletter, etc.).
The compulsory or optional nature of the provision of your Personal Data will be marked each time using symbols (e.g. “*”) placed next to the information that requires the provision of data for the respective purpose.
6) PROCESSING METHODS
Your Personal Data will be processed in compliance with the provisions of current Privacy Law, with the use of electronic or automated means and manual methods, pursuing the logics strictly connected to the purposes for which the data has been collected, via databases, the electronic platforms managed by Lavazza or by third parties (appointed as Data Processors), the integrated IT systems of Lavazza and the aforesaid third parties, and/or websites owned or used by Lavazza.
Your Data will be processed using methods that ensure the highest level of confidentiality and only by people trained and authorised to process it. The Data Controller adopts all the appropriate technical and organisational measures to ensure a level of security appropriate to the risk presented in relation to the processing.
The Personal Data will be processed mainly at the offices of the Data Controller and at the places where the Data Processors are located.
7) RECIPIENTS OF THE DATA
Your Personal Data may be made accessible, for the purposes stated above, to employees and partners of Lavazza, in Italy and abroad.
The Personal Data you provide may be communicated to the companies forming part of the Lavazza Group and/or third-party companies that carry out activities in Italy and abroad on behalf of the Data Controller, as Data Processors.
Finally, your Data may be sent to the judicial authorities where necessary and in the cases provided for by law.
8) STORAGE PERIOD OF THE DATA
In order to ensure compliance with the principles of necessity and proportionality of the processing, we have defined various Personal Data storage periods for the individual purposes pursued;
9) DATA OF MINORS
Lavazza does not normally collect the Personal Data of minors, nor does it deliberately establish any communication with them. For this reason we invite parents to actively monitor the online activities of their children under sixteen years of age.
Nevertheless, if we were to contact a minor under 16 years of age, consent must be obtained from his/her parents or the holders of parental responsibility, except in cases such as an answer to his/her question or dealing with his/her request.
10) RIGHTS OF THE DATA SUBJECT
You can exercise the rights set out in articles 15 et seq. of the Regulation vis-à-vis the Data Controller at any time, including:
a) the right to obtain confirmation as to whether or not personal data concerning you exists, regardless of it being already recorded, and communication of such data in intelligible form;
b) the right to withdraw the consent you have given for the purposes of the processing at any time;
c) the right to access, rectify, erase and limit the processing and portability of your personal data;
d) the right to object to its processing any time you wish;
e) the right to commence proceedings before the competent supervisory Authority, if you think that the processing of your data is contrary to the laws in force.
11) METHODS FOR EXERCISING YOUR RIGHTS
If you wish to exercise the aforesaid rights, or you wish to have more information on the processing of your personal data, please write an email to: PrivacyDPO@lavazza.com or write to the registered office of the Data Controller in Via Bologna 32, 10152, Turin (TO).