Pursuant to Article 13 of the European Regulation on the protection of personal data No. 679/2016 (hereinafter referred to as the "Regulation” or "GDPR”), we would like to inform you that certain internal areas and premises are monitored by a video surveillance system for the purposes of prevention, security and protection of the company's assets. The access or passage of data subjects at the entrances, premises and spaces of the Data Controller, as well as on public land inside or in front of the company premises, may involve the capture of images that could concern them.
This privacy notice supplements the "simplified" information provided via the signs placed near the cameras.
DATA CONTROLLER. The Data Controller is Lavazza Denmark APS (hereinafter the "Controller") with registered office at Erritsø Møllebanke 3 - 7000 Fredericia – DK, in the person of its legal representative pro tempore.
DATA PROTECTION OFFICER – DPO. In accordance with the provisions of the Regulations, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and will be the contact person for data subjects, as well as for the Italian Data Protection Authority. The DPO can be contacted at the e-mail address PrivacyDPO@lavazza.com.
DATA PROCESSOR. Your Personal Data may be processed by companies appointed as Data Processors to carry out activities related to the processing of Personal Data on behalf of the Controller. The Controller has drawn up a list of Data Processors, which is constantly updated and which it makes available to you by contacting it at the e-mail address indicated in this Notice.
PERSONAL DATA PROCESSED. Images collected through video surveillance systems.
PURPOSES AND LEGAL BASIS OF THE PROCESSING. Personal data are processed in compliance with applicable laws and confidentiality obligations and for the sole purpose of preventing unlawful activities, ensuring site security, protecting the company's assets, and enabling the defence of the Controller rights in court. The legal basis of the processing is the legitimate interest of the Data Controller.
PROCESSING METHODS. Your Personal Data will be processed in accordance with the provisions of current legislation on the processing of Personal Data, both by electronic and automated means and manually. Your data will be processed in such a way as to ensure maximum security and confidentiality and only by persons trained and authorised to process such data. The Data Controller adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing.
COMMUNICATION OF PERSONAL DATA. Personal data may be communicated to third parties to comply with legal obligations, to respect orders issued by public authorities or to exercise a legal claim.
RETENTION PERIOD. The images resulting from video surveillance activities are stored for a period of time no longer than is necessary to achieve the purposes for which they are processed, i.e. no longer than 30 days. After this period, the images are deleted, except in the case of special requirements for further storage in order to comply with a specific investigative request by the Judicial Authority.
RIGHTS OF DATA SUBJECTS AND METHODS OF EXERCISE. You may at any time exercise the rights provided for in Articles 15 - 22 of the GDPR about the Data Controller. If you wish to exercise the abovementioned rights, or you wish to receive further clarification regarding the processing of your Personal Data, you may write to the following e-mail address PrivacyDPO@lavazza.com.