Privacy Policy

Art.13 of Regulation EU no.679/2016

Updated February 2023

Introduction

Under European Regulation no.679/2016 (hereinafter referred to as the “Regulation”) and national law on Personal data protection (hereinafter referred to as “Privacy Law”), LEA S.r.l. invites you to carefully read the present Privacy Notice, which lays down important information on the protection of your Personal Data.

The processing of your Personal Data will be based on the principles of correctness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, integrity and confidentiality, in accordance with the provisions set out in the Regulation.

**** 

1. DATA CONTROLLER

The Data Controller is LEA S.r.l. (hereinafter “LEA” and/or the “Data Controller”) with registered office in Turin – Via Bologna 32, in the person of its legal representative pro tempore.

2. DATA PROTECTION OFFICER – DPO

In accordance with the provisions set out in the Regulation, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and who will act as the contact person for data subjects, as well as for the Italian Data Protection Authority. The DPO can be contacted by writing to the following email address: PrivacyDPO@lavazza.com.

3. PERSONAL DATA PROCESSED

• Personal details (name and surname) and contact information (email, address, telephone number)
• Bank details required for the proper management of table reservations and for the proper payment processing
• Invoicing details (company name, VAT number/tax code, billing address)
• Potential food intolerances

4. PURPOSES AND LEGAL BASIS OF DATA PROCESSING

The Personal data you provided will be exclusively processed for the purposes indicated below:

• Administrative purposes: handle table reservations, orders, home delivery service, canteen service, payments, as well as contact you for disclosing potential information concerning orders you carried out (i.e., confirmation of table reservation and/or of the order). The information stemming from the potential indication of food intolerances will be exclusively processed with the aim of fulfilling needs arisen by consumers during the reservation procedure.
  The legal basis for such processing is the execution of contract or of pre-contractual measures data subject is a party to.
• Communications purposes: to send you as a client information related to new initiatives we launch (such as delivery services). If you are not willing to receive such kinds of information you can make us aware of that by writing to us.
  The legal basis for such processing is the legitimate interest of the Data Controller.

5. NATURE OF THE PROCESSING

The provision of your Personal Data is optional in nature. However, the provision of some data is needed to enable you to avail of some services (i.e., table reservations and orders execution). The either mandatory or optional nature of the provision will be marked by some symbols (i.e., “*”) placed next to the information provided. Such symbol means that your Personal data are necessarily needed for the achievement of the purposes indicated.

6. PROCESSING METHODS

Your Personal Data will be processed in compliance with the provisions of the applicable Privacy Law, by resorting to electronic or automated means and to manual methods that ensure the highest level of confidentiality, and only by people trained and authorised to process them.

7. DATA RECIPIENTS

Your Personal Data may be made accessible, for the purposes stated above, to employees and partners of LEA and to other companies which, in the capacity of Data Processors, perform Personal Data processing activities on behalf of the Data Controller. The Data Controller has drawn up a list of Data Processors, which is constantly updated, and which is made available to you by contacting it to the addresses indicated at point 9 of the present Privacy Notice.

8. DATA RETENTION PERIOD

In order to ensure the compliance with the necessity and proportionality principles of the processing, the Personal Data related to the reservations and to the invoicing details will be retained for a period of time that guarantees the correct management of the reservation and the successful execution of the order, and overall for further 10 years in order to fulfil administrative and fiscal obligations. The Personal Data related to food intolerances will be retained for a week from the date the service has been provided except for special needs.

9. METHODS FOR EXERCISING YOUR RIGHTS 

Data subjects are entitled to exercise the rights laid down by Arts. 15-22 of the Regulation. If you wish to exercise the aforesaid rights, or you wish to have more information on the processing of your Personal Data, please write an email to: PrivacyDPO@lavazza.com or write to the registered office of the Data Controller in Via Bologna 32, 10152, Turin (TO).