Privacy Policy

 

June 2022

(Art. 13 Reg. UE 679/2016)

Pursuant to the European Regulation on the processing of personal data no. 679/2016 (”GDPR"), we inform you that the personal data processed during your registration to participate to events in the site “Coffee Society” (hereinafter the "Site") will be processed by Lavazza as described below.

 

Data Controller. The Data Controller of Personal Data is LUIGI LAVAZZA S.p.A. (hereinafter “Lavazza” and/or “Data Controller”) with registered office in Turin - Via Bologna, 32, in the person of its legal representative pro tempore.

Data Protection Officer - DPO. In accordance with the provisions of the Regulation, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and will be the contact person for data subjects, as well as for the Italian Data Protection Authority. The DPO can be contacted at the email address PrivacyDPO@lavazza.com

Data Processor. Your Personal Data may be processed by our suppliers, in their capacity as Data Processors, to carry out activities relating to the processing of Personal Data on behalf of Lavazza. The Controller has drawn up a constantly updated list of Data Processors, which it makes available to you upon request to the DPO.

Personal data processed. i) common Personal Data; ii) contact data;

Purpose and legal basis of the processing. Your Personal Data will be processed in order to allow you to register to the Website and participate in the event. The legal base of the processing is the performance of the Contract to which you are party.

Processing Methods. Your Personal Data will be processed in accordance with the current legislation on the processing of Personal Data by electronic and automated means. Your data will be processed in such a way as to ensure maximum security and confidentiality and only by persons trained and authorized to process it. The Data Controller adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk of the processing.

Data retention period. The Personal Data you have provided in order to register to the Website will be stored for the entire period of time that you are registered on the Website. If your Account is inactive for 24 months, it will be deleted. Your Personal Data relating to the participation of the event will be processed by Lavazza for the period necessary to fulfil the above purposes and will then be deleted.  

Rights of Data Subject and methods of exercise. You may at any time exercise the rights provided for in Articles 15 - 22 of the Regulation with regard to the Data Controller. Should you wish to exercise the above rights, or should you wish to receive further clarification regarding the processing of your Personal Data, you may write to the following e-mail address PrivacyDPO@lavazza.com or to the address of Lavazza's registered office, Via Bologna 32, 10152, Turin (TO).

The complete information regarding the policies on the processing of personal data adopted by LAVAZZA is available on the site https://www.lavazza.co.uk/en/privacy-policy