Skip links

Privacy Policy

PRIVACY POLICY

Art.13 of Regulation EU no.679/2016

October 2023

Introduction

Under European Regulation no.679/2016 (hereinafter, the “Regulation”) and national law on personal data protection (hereinafter referred to collectively as “Privacy Law”), FONDAZIONE LUIGI E PERICLE LAVAZZA ONLUS invites you to carefully read this Privacy Policy, which contains important information on the protection of your Personal Data. 

The processing of your Personal Data will be based on the principles of correctness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, integrity and confidentiality, in accordance with the provisions of the Regulation. 

  1. DATA CONTROLLER 
    The Data Controller is FONDAZIONE LUIGI E PERICLE LAVAZZA ONLUS (hereinafter “Fondazione Lavazza” and/or the “Data Controller”) with registered office in Turin – Via Bologna 32, in the person of its legal representative pro tempore.
  2. DATA PROTECTION OFFICER – DPO
    In accordance with the provisions of the Regulation, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and will be the contact person for data subjects, as well as for the Italian Data Protection Authority. The DPO can be contacted at the email address [email protected]
  3. DATA PROCESSORS
    Your Personal Data may be processed by companies appointed as Data Processors to carry out activities related to the processing of Personal Data on behalf of Fondazione Lavazza. The Data Controller has drawn up a list of Data Processors, which is constantly updated and which it makes available to you by contacting it at the addresses given in point 11 of this Notice.

     

  4. PERSONAL DATA PROCESSED
    • Personal details
    • Contact information
    • Geo-location data  
    • Internet browsing data collected via the cookies installed on your computer or mobile device (for more information please see our Cookie Policy)


  5. PURPOSES AND LEGAL BASIS OF THE PROCESSING 
    No compulsory provision of personal data by users is required in order to consult this website.
    In accordance with the needs associated with accessing of the Fondazione Lavazza website (and without prejudice to the individual initiatives that involve the provision of specific Personal Data, for which specific privacy notices will be provided on a case-to-case basis), the purposes of the processing of your Personal Data and the related legal grounds are indicated below:

    • Management of requests: Personal Data will be collected in order to answer requests sent to us via email, including, but not limited to, those relating to proposals for collaboration on cooperation and development projects that are proposed by e-mail. The legal basis is the legitimate interest of the Data Controller. The legal basis for this processing is the legitimate interest of the Data Controller.
  6. NATURE OF THE PROVISION
    The provision of your Personal Data, depending on the purpose pursued, could have optional or obligatory nature. When the nature of the provision is mandatory it means that failure to provide the required Personal Data may affect the possibility to interact with Fondazione Lavazza.

    The compulsory or optional nature of the provision of your Personal Data will be marked each time using symbols (e.g. “*”) placed next to the information that requires the provision of data for the respective purpose.
  7. PROCESSING METHODS
    Your Personal Data will be processed in compliance with the provisions of current Privacy Law with the use of electronic or automated means and manual methods, strictly following the purposes for which the data has been collected, via databases, the electronic platforms managed by Fondazione Lavazza or by third parties (appointed as Data Processors).

    Your Data will be processed using methods that ensure the highest level of confidentiality and only by people trained and authorised to process it. The Data Controller adopts all the appropriate technical and organisational measures to ensure a level of security appropriate to the risk presented in relation to the processing.

    The Personal Data will be processed mainly at the offices of the Data Controller and at the places where the Data Processors are located.
  8. SHARING AND TRANSFER OF PERSONAL DATA
    Your personal data may be shared with our Partners, individuals and third parties with whom Fondazione Lavazza collaborates on accounting, administrative, legal and tax matters.The Personal Data you provide may be transferred to the companies of the Lavazza Group and/or third-party companies located within, as well as outside, the European Union/ European Economic Area. These companies carry out the aforementioned activities concerning treatments of personal data on behalf of the Data Controller and will operate as Data Processors. 

    Transfers of personal data to Lavazza Group Companies and/or third-party companies located outside the EU/EEA are made in accordance with Chapter V of the Gdpr. In particular, they are based on Standard Contractual Clauses (SCC) approved by the European Commission. To obtain copies of these SCCs please contact the Controller at the addresses listed in Section 11 of this Privacy Policy.

    Finally, your Data may be sent to the judicial authorities where necessary and in the cases provided for by law.

  9. STORAGE PERIOD OF THE DATA
    In order to ensure compliance with the principles of necessity and proportionality of processing, we have defined retention periods for personal data for the individual purposes described:

    • Personal Data collected for the purpose of managing, evaluating proposals for cooperation and processing requests will be retained for the period necessary to process the requests and subsequently deleted if no further contact takes place, or a contract is concluded, and without prejudice to any legal obligations.

       

  10. RIGHTS OF THE DATA SUBJECT 
    You can exercise the rights set out in articles 15     et seq. of the Regulation vis-à-vis the Data Controller at any time, including: 

    1. the right to obtain confirmation as to whether or not personal data concerning you exists, regardless of it being already recorded, and communication of such data in intelligible form; 
    2. the right to withdraw the consent you have given for the purposes of the processing at any time; 
    3. the right to access, rectify, erase and limit the processing and portability of your personal data; 
    4. the right to object to its processing any time you wish. 
    5. the right to commence proceedings before the competent supervisory Authority, if you think that the processing of your data is contrary to the laws in force.


  11. METHODS FOR EXERCISING YOUR RIGHTS
    If you wish to exercise the aforesaid rights, or you wish to have more information on the processing of your personal data, please write an email to:     [email protected] or write to the registered office of the Data Controller in Via Bologna 32, 10152, Turin (TO).