Datenschutzrichtlinie

Preliminary remark

Pursuant to European Regulation 2016/679 (hereinafter referred to as the “Regulation”) and national data protection legislation (hereinafter jointly referred to as the “Privacy Policy”), Lavazza Professional Germany GmbH (hereinafter referred to as “Lavazza” or “Data Controller”) invites you to carefully read this Privacy Policy, which contains important information regarding the protection of your personal data. 

The processing of your personal data is subject to the principles of correctness, lawfulness, transparency, limitation of purposes and storage, minimization and accuracy, completeness and confidentiality, as set out in the provisions of the Regulation.

**** 

1. DATA CONTROLLER 

The data controller is Lavazza Professional Germany GmbH (hereinafter referred to as “LAVAZZA” or “Controller”) with registered office at Max-Planck-Strasse 79, 27283 Verden, Germany, in the person of its current legal representative. 

2. DATA PROTECTION OFFICER

To comply with the provisions of the Regulation, the Controller has designated and appointed a Data Protection Officer. This officer is responsible for monitoring compliance with data protection regulations and serving as the contact person for data subjects and the data protection authority. The Data Protection Officer can be contacted at the following email address: DE.Datenschutz@lavazzapro.com

3. DATA PROCESSOR

Your personal data may be processed by companies designated as data processors to carry out activities related to the processing of personal data on behalf of Lavazza. The Data Controller has established a list of data processors, which is constantly updated and made available to you upon contact at the addresses indicated in point 12 of this Policy.

3. PERSONAL DATA PROCESSED

• Personal information (such as first and last name, date of birth, age, gender, etc.)
• Contact details (email, address, telephone number)  

• Geolocation or browsing data (including IP addresses) collected through cookies installed on your computer or mobile device (for more information, see Cookie Policy)  

• Bank details necessary for the processing of the commercial relationship

If you submit a request using the „Contact Us“ form on the LAVAZZA website, you will need to provide some personal information so that LAVAZZA can respond to your request. For this purpose, the relevant fields in the registration form are marked as mandatory.

In addition to the categories of personal data listed above, other data transmitted directly by you (the so-called „contributions“) and shared on social media pages dedicated to LAVAZZA (LinkedIn, Facebook, XING, etc.) may be processed. For their management, reference is made to the third parties that provide these services. Data collected through social media includes, for example, likes, comments, images, and, more generally, any content and information that you may have posted on social media pages dedicated to the products of the various Lavazza Group brands.

4. PURPOSE AND LEGAL BASIS OF DATA PROCESSING 

In accordance with the requirements related to access to the various sections of the LAVAZZA websites (and without prejudice to individual initiatives that entail the transmission of specific personal data and for which specific information is published), the purposes of data processing and the respective legal bases are indicated below:

• User data : The registration process for our website through the creation of an account with Lavazza allows you to use the website as a „registered user“ and access a range of exclusive services offered through the website. The legal basis for the processing is the execution of contractual obligations to which the data subject is party.
• Purchasing products in the webshop : Through our website, the customer can purchase LAVAZZA products as a registered user (in this case, you do not have to re-enter all your personal data for each purchase).

Your personal data will be processed for the purpose of processing orders and payments, as well as to fulfill the resulting regulatory and accounting obligations, and also so that we can contact you with any communications related to the purchase itself (e.g., information on the status of your orders). The transmission of data is voluntary but necessary for the processing of the order. The legal basis for this processing is the execution of the contract to which the data subject is party.

• Handling inquiries : Personal data is collected for the purpose of processing and responding to inquiries regarding products and initiatives of the various brands of the Lavazza Group. The legal basis for processing the data is the legitimate interest of the data controller.
• Business contact with potential customers : The personal data of potential customers provided to us by the data subjects are processed to propose the sale of products. The legal basis for the processing is the execution of pre-contractual measures.
• Participation in training courses and seminars : We may process your personal data to enable you to register for and participate in our training courses and seminars. The legal basis for this processing is the performance of the contract to which the data subject is party.
• Marketing: With your explicit consent, we may process your personal data to provide you with promotions through various communication channels, invite you to our marketing events and activities, and subscribe you to our newsletter. The legal basis for this processing is the consent of the data subject , which can be revoked at any time.
• Participation in competitions and prize draws: We may process your personal data to enable your participation in competitions and prize draws. The legal basis for this processing is the execution of pre-contractual measures to which the data subject is party.
• Customer satisfaction: Personal customer data is processed to enable the company to conduct surveys to improve the quality of the services provided, if the data controller has a legitimate interest.
• Analysis purposes: The personal data you provide through your interaction with the LAVAZZA world and the information related to that interaction are aggregated in our database and used anonymously to analyze and improve the services offered, evaluate the effectiveness of the activities and initiatives offered by LAVAZZA, and conduct statistical analyses on the composition of the database itself. The legal basis for the processing is the legitimate interest of the Data Controller .
• All other purposes for which you have expressly given your consent can be revoked at any time.

• Nutzung der SalesViewer®-Technologie: Auf dieser Webseite werden mit der SalesViewer®-Technologie der SalesViewer® GmbH auf Grundlage berechtigter Interessen des Webseitenbetreibers (Art. 6 Abs.1 lit.f DSGVO) Daten zu Marketing-, Marktforschungs- und Optimierungszwecken gesammelt und gespeichert. Hierzu wird ein javascript-basierter Code eingesetzt, der zur Erhebung unternehmensbezogener Daten und der entsprechenden Nutzung dient. Die mit dieser Technologie erhobenen Daten werden über eine nicht rückrechenbare Einwegfunktion (sog. Hashing) verschlüsselt. Die Daten werden unmittelbar pseudonymisiert und nicht dazu benutzt, den Besucher dieser Webseite persönlich zu identifizieren. Die im Rahmen von SalesViewer® gespeicherten Daten werden gelöscht, sobald sie für ihre Zweckbestimmung nicht mehr erforderlich sind und der Löschung keine gesetzlichen Aufbewahrungspflichten entgegenstehen. Der Datenerhebung und -speicherung kann jederzeit mit Wirkung für die Zukunft widersprochen werden, indem Sie bitte diesen Link anklicken, um die Erfassung durch SalesViewer® innerhalb dieser Webseite zukünftig zu verhindern. Dabei wird ein Opt-out-Cookie für diese Webseite auf Ihrem Gerät abgelegt. Löschen Sie Ihre Cookies in diesem Browser, müssen Sie diesen Link erneut anklicken.

5. METHOD OF TRANSMISSION

The provision of your personal data is voluntary. Failure to provide your data may prevent you from using certain services (e.g., placing orders, participating in competitions and prize draws, receiving newsletters, etc.).

Symbols (e.g. “*”) indicate whether the transmission of data is mandatory and are placed next to the information whose transmission is necessary to pursue the respective purposes.  

6. TYPE OF DATA PROCESSING

Your personal data will be processed in accordance with applicable privacy regulations, using both electronic and automated tools and manual methods, using procedures strictly related to the purposes of the processing, databases, electronic platforms managed by LAVAZZA or third parties (called Data Processors), integrated IT systems owned by LAVAZZA or by the aforementioned third parties, or websites owned or used by LAVAZZA.

Your data will be processed using procedures that ensure the highest levels of security and confidentiality and will only be processed by appropriately trained and authorized personnel. The controller implements technical and organizational measures to ensure an appropriate level of data security.

The personal data will be processed primarily at the registered office of the controller and at the locations where the processors are located.

7. RECEIVER OF THE DATA 

Your personal data may be made available to LAVAZZA employees and collaborators for the purposes set out above.

The data you provide may be transferred to companies within the Lavazza Group or to third parties within the European Union and outside the European Economic Area, which are commissioned to carry out the aforementioned data processing on behalf of the Controller and thus act as data processors.

The controller ensures adequate data protection as applicable in the EU/EEA.

The Controller has created a list of data processors, which is continually updated and which will be made available to you if you contact the addresses provided in point 11 of this Privacy Policy. 

Your data may also be transmitted to the judicial authorities if this is necessary or required by law.

8. STORAGE PERIOD

To ensure that data processing is carried out in accordance with the principles of necessity and proportionality, various time limits have been set within which personal data will be stored for the respective purposes:

• User information : The customer account remains active for the duration of the contractual relationship.
• The invoice data will be stored for as long as necessary to ensure the correct execution of the contract and, in any case, for a further 10 years to comply with regulatory and tax obligations.
• The data collected for the administration of competitions and prize draws will be stored for the duration of the competition and for a period sufficient to ensure its proper execution. This does not affect the fulfillment of regulatory and tax obligations, for which the retention period is prescribed by law.
• The data collected for the purpose of sending advertising material , for which you have given your consent, will be stored for a maximum period of 36 months, or for another period specified by the supervisory authorities. Should you notify us of the above-mentioned
• Personal data of potential customers is stored for 5 years after collection and then deleted unless there is another customer relationship.
• Personal data processed in connection with participation in training courses or courses will be stored for the duration of the course and for as long as necessary to manage participation in the course itself and the associated administration.
• The data collected to process requests and respond to inquiries regarding products and initiatives of the various Lavazza Group brands, as well as the data disclosed through interaction with the LAVAZZA world, will be stored for the time necessary to process the requests; subsequently, they will be deleted if no further contact is made.

9. DATA OF MINORS

LAVAZZA does not normally intend to collect personal data from minors or to contact them. Therefore, parents are encouraged to actively monitor the online activities of their children under 16.

Should we nevertheless contact a minor under the age of 16, the consent of the parent or guardian is required, unless the contact is to respond to their request or to resolve a concern they have. 

10. RIGHTS OF THE DATA SUBJECT 

You can exercise the rights set out in Articles 15 et seq. of the Regulation at any time against the data controller, including: 

1. the right to obtain confirmation as to whether or not personal data concerning you exist, even if they have not yet been recorded, and to have them disclosed to you in an intelligible form;
2. the right to withdraw your consent to the processing purposes at any time; 
3. the right to information, rectification, erasure, restriction of processing and portability of personal data; 
4. the right to object to data processing at any time;
5. the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your data is in breach of applicable law.

11. HOW TO EXERCISE RIGHTS

If you wish to exercise the above-mentioned rights or would like to receive further information on the processing of your personal data, you can write to the following email address: DE.Datenschutz@lavazzapro.com or to the registered office of the Data Controller at Max-Planck-Strasse 79, 27283 Verden, Germany.