alt alt


Art.13 of Regulation EU no.679/2016

Lavazza Coffee UK Ltd (hereinafter "LAVAZZA" and/or the "Controller"), as Data Controller, wishes to inform you that, pursuant to art. 13 of the European Regulation on the protection of personal data n. 679/2016 and UK REGULATIONS (hereinafter, “Regulations”), for reasons of prevention, security and protection of the company's assets, the perimeters of the buildings pertaining to LAVAZZA as well as certain internal areas and premises, all duly signposted by means of appropriate signs, are manned by a video surveillance system. The access or passage of the data subjects at the entrances, premises and spaces of LAVAZZA, as well as on public land inside or in front of the company premises, involves the capture of images which may concern them. This privacy notice integrates the "simplified" information provided by means of the signs placed near the cameras.

DATA CONTROLLER. The Data Controller is Lavazza Coffee UK Ltd with registered office in 5th Floor, The Charter Building, Vine Street, Uxbridge UB8 1JG, in the person of its legal representative pro tempore.

DATA PROTECTION OFFICER – DPO. In accordance with the provisions of the Regulations, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and will be the contact person for data subjects, as well as for the Italian Data Protection Authority. The DPO can be contacted at the e-mail address

DATA PROCESSOR. Your Personal Data may be processed by companies appointed as Data Processors to perform activities related to the processing of Personal Data on behalf of Lavazza.

PERSONAL DATA PROCESSED. The personal data processed are images collected through video surveillance systems.

PURPOSES AND LEGAL BASIS OF THE PROCESSING. Personal data is collected in compliance with the laws in force and confidentiality obligations and is recorded for the sole purpose in order to prevent the commission of unlawful activities, to ensure site security, to allow protection of the company's assets, as well as to allow any defence of Lavazza's rights in court. The legal basis of the processing is the legitimate interest of the Data Controller.

PROCESSING METHODS. Your Personal Data will be processed in accordance with the provisions of current legislation on the processing of Personal Data, both by electronic and automated means and manually. Your data will be processed in such a way as to ensure maximum security and confidentiality and only by persons trained and authorised to process it. The Data Controller adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing.

COMMUNICATION OF PERSONAL DATA. Your Personal Data is made accessible, for the purposes stated above, to persons in charge, such as employees and partners of the Controller and the people that are in charge of security and surveillance within the limits of their competence and according to the instructions given to them by the Data Controller. Your Personal Data may also be transmitted to third parties who process Personal Data on behalf of the Data Controller and who are designated by the same as Data Processors.  Personal data may be communicated to third parties in order to comply with legal obligations, to respect orders issued by public authorities or to exercise a legal claim.

STORAGE PERIOD OF THE DATA. The images resulting from video surveillance activities are stored for a period of time no longer than is necessary to achieve the purposes for which they are processed, i.e. no longer than 72 hours. After this period, the images are deleted, except in the case of special requirements for further storage in order to comply with a specific investigative request by the Judicial Authority.

RIGHTS OF DATA SUBJECTS. Data Subjects are entitled to exercise all the rights set out in the Regulations. For any information/requests concerning the processing of personal data, an email can be sent at any time to the following address: