Luigi Lavazza S.p.A., Torino, Italy – Via Bologna, n.32
Lavazza Coffee (UK) Limited and Carte Noire SAS are wholly-owned subsidiaries of Luigi Lavazza S.p.A. This privacy notice is issued on behalf of the Lavazza Group so when we mention "Lavazza", "we", "us" or “our” in this privacy notice, we are referring to the relevant company in the Lavazza Group responsible for processing your data. Luigi Lavazza S.p.A is the controller and responsible for this website. Carte Noire is a Lavazza brand
Carte Noire will process only the following categories of personal data:
The personal data will not be disclosed to third parties, except for the other companies belonging to the Lavazza Group, Italian and / or abroad. The personal data may also be disclosed to primary third-party companies (business partners and service providers) if and as legitimately instructed by Carte Noire as Data Processors to perform functional activities to achieve the purposes as indicated above. The list of the Data Processor will be constantly updated and at your disposal by contacting the Data Controller at the addresses indicated below.
Following the provision of the EU Regulation 679/2016 (“GDPR – General Data Protection Regulation”) Carte Noire S.a.s and the other affiliated companies inform that any personal data provided by the Data Subject (meaning the individual who is the subject of personal data) will be used in accordance with the applicable regulation and in compliance with the following criteria:
Data Controller the person recognized by law who determines the purposes for which and the manner in which any personal data are, or are to be, processed is the Carte Noire S.a.s (hereinafter Carte Noire) having its registered office at Boulogne – Billancourt, France - 58 Avenue Emile Zola N.58 in person of his pro-tempore legal representative. Carte Noire is a wholly-owned subsidiary of Carte Noire S.a.s, This privacy notice is issued on behalf of the Lavazza Group so when we mention "Carte Noire", "we", "us" or “our” in this privacy notice, we are referring to the relevant company in the Lavazza Group responsible for processing your data. Carte Noire S.a.s. is the controller and responsible for this website. We have appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out below.
Carte Noire does not collect and does not process any sensitive data on the Site, such as, for example, those able for revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data capable of revealing the state of health and sexual life.
Carte Noire will request only the personal data strictly necessary to provide the services requested by users. The data provided that will be processed for the purposes related to the activity of the Site and will be stored and processed to ensure the respect of the data subject rights.
Providing personal data is optional, but may be necessary for the achievement of some of the purposes indicated (eg the activation of contractual and commercial relations, the management of competitions and prize operations, sending newsletters, etc...), not provide personal data reported as mandatory will not allow Carte Noire to pursue the abovementioned purposes.
The mandatory or optional nature of the personal data is from time to time reported using symbols (eg "*") placed alongside the information whose conferment is mandatory to pursue the respective purpose.
In any case, personal data will be processed by Carte Noire only on the following legal basis:
The personal data you provide will be collected and processed by Carte Noire for the following purposes:
Personal Data process is compliant with the provisions of the GDPR and with all the other relevant applicable law, and it is performed with the help of electronic and automated tools, all designed to ensure the maximum security and confidentiality extent to the personal data processed In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
All personal data provided are kept by the Data Controller in compliance with appropriate security measures. The Data Controller will implement appropriate technical and organizational measures to guarantee a level of security appropriate to the risk of processing.
Personal data may be made accessible for the purposes above mentioned to:
The personal data will not be disclosed to third parties, except for the other companies belonging to the Lavazza Group, Italian and / or abroad. We do not transfer any personal data outside the European Economic Area.
The personal data may also be disclosed to primary third-party companies (business partners and service providers) if and as legitimately instructed by Carte Noire as Data Processors to perform functional activities to achieve the purposes as indicated above.
The list of the Data Processor will be constantly updated and at your disposal by contacting the Data Controller at the addresses indicated below
Personal Data useful for Site signing-in
will be kept for the entire duration of its registration on the Site and for the further period provided for by law, in relation to the purpose of the collection.
Personal Billing Data will be kept for a period of time to guarantee the correct execution of the contract and the fulfillment of the related administrative and fiscal obligations.
Data collected for the purposes of sending promotional and advertising material and data collected for commercial profiling purposes will be retained for a period not exceeding 24 months or the different period indicated by the supervisory authorities.
Personal data collected for the management of prize competitions and transactions will be kept for the entire duration of the premium transaction and for a period of time to ensure the correct execution of the contract and the fulfillment of the related administrative and tax obligations.
The data collected for profiling purposes will be kept for a period of time not exceeding 12 months or at the different period indicated by the supervisory authorities
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We strongly recommend that parents take an active role in supervising the online activity of their children under the age of sixteen. Carte Noire generally does not intend to collect personal data from and/or generally does not intentionally communicate with children. However, in case we need to communicate with a child, we will endeavor to give the parents or legal guardians a reasonable opportunity to consent before we use the personal data of the child, except where we merely answer the child’s question or service the child’s request
Data Subjects may at any time exercise the rights provided by the EU Regulation 679/2016, including:
In the event data subject wishes to exercise the aforementioned rights or wishes to receive further clarifications regarding the processing of personal data, data subject may write to the Data Controller at the following address:
CARTE NOIRE SAS
58, avenue Emile Zola
N° TVA intracommunautaire : FR 60 813 978 038
FRANCE RCS NANTERRE n° 813 978 038v
Tel: 00 33 (0)1 81 89 80 00