Privacy Policy
PRIVACY POLICY FOR THE USERS OF THE SITE HTTPS://www.LAMARZOCCO.COM/uk/en/
Please carefully read this Privacy Policy (hereinafter referred to as the “Privacy Policy”), intended for the users of the site https://www.lamarzocco.com/uk/en/ (hereinafter referred to as the “Site”), drawn up in accordance with the provisions contained in art. 13 of the United Kingdom General Data Protection Regulation (hereinafter also referred to as the “ UK GDPR”), which provides detailed information on the processing of your personal data (hereinafter also referred to as the “Data”).
It should be pointed out that the Privacy Policy only applies to the Data processing operations carried out on the Site and does not extend to any processing operations carried out on different websites, though they can be accessed through links included in the Site.
1. Data Controller and relevant contact details
The Data Controller is La Marzocco U.K (hereinafter also referred to as the “Controller”, the “Company” or “La Marzocco”), with registered office in 6 Willow Street London, EC2A 4BH – United Kingdom. The Data Controller can be contacted at the following e-mail address: info.uk@lamarzocco.com.
2. Processed Data types
2.1 Navigation data
This category of Data includes the IP addresses or the domain names of the computers used by the users who connect to the Site, the addresses in URI (Uniform Resource Identifier) format of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the computer environment of the user. This Data is only used to collect statistical information, as well as to verify that the Site is functioning properly. The Data, in addition, could be used to determine liability in the event of cybercrimes committed against the Site. Except in the latter case, the navigation Data is erased after 3 years.
2.2 Cookies
The Site collects and processes Data using cookies or similar technologies. For further information on the use of cookies, please refer to the “Cookie Policy ” of the Site.
2.3 Data voluntarily provided by the user
The Site allows users to voluntarily provide personal information, for example by writing to the email addresses posted on the Site itself or filling out the appropriate form.
2.4 Third-party Data
If you decide to provide any third-party Data, please ensure that the parties in question have received in advance appropriate information on the processing methods and purposes mentioned herein. In that case, you act as a separate data controller, and undertake all the obligations and responsibilities provided for by the law. As a consequence, you shall hold La Marzocco harmless against any objection, claim, request for compensation of damages resulting from the processing, etc. that should be made by any third parties whose personal data were processed, through your use of the Site, in breach of the UK GDPR.
2.5 Data of persons under 16 years of age
Remember that, if you are under 16 years of age, you cannot provide any personal data, and, in any case, we accept no responsibility for any false statements you made. If we realize that your declarations are untruthful, we will immediately delete any personal data acquired.
3. Services provided by the Site
3.1 “My Lamarzocco” section
Through a link in the banner displayed at the top of the Site pages, the user can access the “My Lamarzocco” section. Inside the section in question, visitors who are already registered can access their reserved area by entering their username/email address and password. If the user is not registered with the Site yet, instead, he can register by entering his username, email address and password. After gaining access to the reserved area, visitors can display their orders, manage the shipping and invoicing addresses, change the password and add further details to their account by specifying their name, surname, birth date and VAT number.
Purposes of the processing: allowing the user to register with the Site by creating a personal account.
Legal grounds of the processing: art. 6, paragraph 1, letter b) of the UK GDPR, “performance of a contract to which the data subject is party or taking of steps at the request of the data subject prior to entering into a contract”.
Retention times: the personal data shall be retained until the user deletes his account and for 3 years after its deletion – the ordinary limitation period for contractual liability. In any case, the Company reserves the right to delete the user account on its own initiative if 12 (twelve) months have elapsed from the last login.
3.2 Store
After selecting the product he wishes to purchase in the “Store” section, the user is redirected by the Website to the “checkout” section. Here visitors who are already registered with the Website log in by entering their e-mail address and password, then enter their invoicing data, as well as any specific address at which they wish to receive the shipped goods, if different from the invoicing address. In particular, in order to finalise the purchase, the user shall provide the following personal data: name, surname, country, street and house number, city, province, ZIP number, phone number and e-mail address, card number, expiry day and card code (CVC). The user can decide whether to save the payment card data used in his profile for future payments.
If the user is not registered with the Website yet, instead, he can create an account before proceeding with the purchase. To this purpose, the visitor shall necessarily have to provide the above-mentioned personal data, as well as to choose his password.
Purposes of the processing: finalising the purchase made by the user and allowing the latter to create a personal account.
Legal grounds of the processing: art. 6, paragraph 1, letter b) of the UK GDPR, “performance of a contract to which the data subject is party or taking of steps at the request of the data subject prior to entering into a contract” and art. 6, paragraph 1, letter a) of the UK GDPR “
the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
Retention period: the personal data processed as a consequence of the purchase of Company products shall be retained throughout the duration of the contractual agreement, and, after termination of the same, for as long as UK Law permits in order to protect the Company’s interests.
The personal data processed for the creation of the user account shall be retained until the user deletes his account and, following cancellation, for as long as is permitted by UK Law to protect the interests of the Company. In any case, La Marzocco reserves the right to delete the user account on its own initiative if 12 (twelve) months have elapsed from the last login.
3.3 Contractual and tax obligation
Following the purchase of a product, the personal data will be processed to:
– Fulfil contractual and tax obligations;
– check the requests made by the interested party;
– send service notices, also with reference to changes in contractual terms, contents, conditions and policies adopted by the Company.
Purposes of the processing: fulfilling contractual and tax obligation.
Legal grounds of the processing: art. 6, paragraph 1, letter b) of the UK GDPR, “performance of a contract to which the data subject is party or taking of steps at the request of the data subject prior to entering into a contract” and art. 6, paragraph 1, letter c) of the UK GDPR, “processing is necessary for compliance with a legal obligation to which the Controller is subject”.
Retention period: the personal data processed as a consequence of the purchase of Company products shall be retained throughout the duration of the contractual agreement, and, after termination of the same, for as long as UK Law permits in order to protect the Company’s interests.
3.4 Technical Support
The Site allows users to voluntarily provide personal information to manage support requests. The users can fill out the form available at the following link https://www.lamarzocco.com/uk/en/technical-support/ by inserting email address, name, phone number, city, state/province, country, model, machine serial number, service type, problem type and description.
Purposes of the processing: manage support requests.
Legal basis of the processing: art. 6, paragraph 1, letter b) of the UK GDPR, “performance of a contract to which the data subject is party or taking of steps at the request of the data subject prior to entering into a contract”.
Retention periods: the Data processed are kept for the time strictly necessary to pursue the purposes of support and technical assistance. In any case, since this is a processing carried out for the provision of services, La Marzocco will process the Data up to the time allowed by UK law to protect its interests from possible complaints relating to the services.
3.5 Stay in touch
Personal Data is collected and processed for the purpose of allowing the user to subscribe to the service “Stay in touch” and, as a consequence, to allow the Company to send informational and commercial email on relevant news, events, products and promotional offers the user may be interested in.
Purposes of the processing: allowing the user to subscribe to the service and, as a consequence, to allow the Company to send informational and commercial email.
Legal grounds of the processing: art. 6, paragraph 1, letter f) of the UK GDPR, “processing is necessary for the purposes of the legitimate interests pursued by the controller”.
Retention period: the Personal Data (your personal e-mail address) shall be retained until you request to unsubscribe from the Service, using the link found at the end of all the notices sent by the Company.
3.6 Book a Demo
Personal Data is collected and processed for the purpose of allowing the user to book an appointment with an expert from the La Marzocco Home Team. During the meeting, the user can receive more information about Linea Mini, GS3 or Linea Micra. In order to book an appointment, the user must enter the date, time, first name, last name, email and telephone number.
Purposes of the processing: allowing the user to book an appointment with an expert from the La Marzocco Home Team.
Legal grounds of the processing: art. 6, paragraph 1, letter b) of the UK GDPR, “performance of a contract to which the data subject is party or taking of steps at the request of the data subject prior to entering into a contract”.
Retention period: the Personal Data shall be retained 3 years.
3.7 Commercial and marketing communication
Personal Data is collected and processed for the purpose of sending commercial communications, advertising material, market research and communication to third parties.
Purposes of the processing: with the users’ prior consent, sending newsletters and/or other information and promotional material related to the activities, products and services provided by the Controller and disclosing their Data (e.g., name, surname and email address) to third-party companies for their own direct marketing purposes.
Legal grounds of the processing: art. 6, paragraph 1, letter a) of the UK GDPR “
the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
Retention period: the Personal Data shall be retained until you request to unsubscribe from the Service, using the link found at the end of all the notices sent by the Company.
3.8 Profiling
Personal Data is collected and processed for the sole purpose of analysis of behaviours, habits, preferences expressed in the use of web content, in order to improve the services provided and to personalise them.
Purposes of the processing: with the users’ prior consent, analysing their interests, habits and consumption choices, as well as their preferences and their purchasing behaviour with regard to the products and services offered by La Marzocco, in order to customise the information and promotional notices sent to them by the Controller.
Legal grounds of the processing: art. 6, paragraph 1, letter a) of the UK GDPR “
the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
Retention period: the Personal Data shall be retained until you request to unsubscribe from the Service, using the link found at the end of all the notices sent by the Company.
4. Additional purposes of the processing
Within the scope of the Data processing operations carried out through the Site, the Controller also pursues the following additional and specific purposes:
4.1 Compliance with legal obligations
Where necessary, the Controller processes the personal data of the data subjects, collected through the Site, in order to ensure the compliance with the obligations provided for by the applicable laws, regulations and community rules.
Legal basis of the processing: art. 6, paragraph 1, letter c) of the UK GDPR, “processing is necessary for compliance with a legal obligation to which the Controller is subject”.
Retention periods: the personal data is retained for the time strictly necessary for the Controller to comply with the legal obligations it is subject to.
4.2. Establishment, exercise, or defence of legal claims.
Where necessary, the Controller processes the personal data of the data subjects, collected through the Site, in order to establish, exercise or defend a claim in a legal proceeding or whenever the judicial authorities exercise their judicial functions.
Legal basis of the processing: art. 6, paragraph 1, letter f) of the UK GDPR, “processing is necessary for the purposes of the legitimate interests pursued by the controller”.
Retention periods: the personal data is retained for a period strictly limited to the duration of the litigation, until the expiry of the appeal enforceability terms.
5. Recipients and transfer of personal data
Your Data can be shared with:
- people authorised by the Data Controller to process the personal data, who have received appropriate operating instructions, have committed to keep the data confidential or are subject to an appropriate legal confidentiality obligation;
- persons delegated and/or designated by the Controller to carry out any tasks strictly related to the pursuing of the above-listed purposes (including technical maintenance operations on the systems), duly appointed as Processors;
- people, companies or professional firms providing support and consulting services to the Controller, duly appointed as Processors;
- persons, bodies or authorities to which your Data must be communicated pursuant to law provisions or orders issued by the competent authorities;
- with the users’ prior consent, companies for their own direct marketing purposes.
Personal data will be processed in UK. If for technical and/or operational reasons it is necessary to rely on entities located outside the UK, it is guaranteed that the transfer to these entities, limited to the performance of specific processing activities, will be carried out in compliance with the provisions of the UK GDPR.
6. Rights of the data subjects
Consistently with the provisions contained in the UK GDPR, you have the right to request from the Controller, at any time, the access to your Data, as well as its rectification or erasure, in addition to the right to object to its processing. The law also allows you, in the cases provided for by art. 18 of the UK GDPR, to obtain the restriction of the processing, as well as, in the cases provided for by art. 20 of the UK GDPR, to receive your personal Data in a structured, commonly used and machine-readable format.
Requests can be sent to the email address: info.uk@lamarzocco.com.
Finally remember that pursuant to art. 77 of the UK GDPR you always have the right to lodge a complaint with the competent control authority (Information Commissioner’s Office), if you consider that the processing of your Data infringes the UK GDPR.
Privacy Policy update
This Privacy Policy has been published in XXXXX , and over time it may be subject to change, even following the coming into force of new industry regulations, the update or the provision of new services, or the introduction of technological innovations. La Marzocco will give you notice of the changes in question when they are introduced, and they shall be binding as soon as they are published on the Site. La Marzocco therefore encourages you to regularly visit this section, in order to gain access to the most recent and up-to-date version of the Privacy Policy and make sure that you always have up-to-date information about the collected Data and their use by the Controller.