Information on the Processing of Personal Data in accordance with EU Regulation No. 679/2016 (GDPR – General Data Protection Regulation) and subsequent regulations in force and adaptation, having the purpose of describing how the website www.lucaffè.com is managed in relation to the processing of personal data of users and visitors to the site.
The information is not to be considered valid for other websites that may be consulted through links on the website of the owner, who is not to be considered in any way responsible for websites belonging to third parties.
The hosting service is served by Newethnic di Alessandro Valli, Via Monticelli, 26, 25080 Nuvolento BS.


The following information is intended for all Users/Interested parties who visit and interact with this website owned by Lucaffè srl S.B., based in Via del Porto 7, 25080 Padenghe sul Garda BS, Italy. Lucaffè srl will process the personal data provided by the User/Subject in compliance with the provisions of EU Regulation 679/2016 (GDPR) and the relevant legislation in force. Data Subject means any natural person, identified or identifiable, to whom the personal data processed refer.


1. Data Controller

The Data Controller, i.e. the entity that determines the purposes, management and means of the processing of personal data, pursuant to Articles 4 and 24 of EU Reg. 2016/679 is Lucaffè srl S.B., with registered office in Via del Porto 7, 25080 Padenghe sul Garda BS, Italy, mail:, tel. +39 030 9699440, in the person of the legal representative pro tempore of Gianluca Venturelli.


2. Type of data collected

The Personal Data processed through the Site are: cookies (see cookie policy), navigation data and usage data.

By processing of Personal Data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection or registration that makes you identifiable. Unless otherwise specified, all data requested by this Web Site are mandatory. If the User refuses to provide them, it may be impossible to view all areas of the Web Site.


3. Purposes and lawfulness

Personal identification data voluntarily provided while browsing the website will be processed according to lawfulness ex art. 6 EU Reg. 2016/679 and for the following purposes:

– fulfilling all legal obligations related to the same;
– generic assistance activities (e.g.: giving feedback to email requests)

– to receive and acknowledge requests to exercise personal data protection rights under the Regulation and to carry out all consequent activities;
– marketing;
– managing and possibly blocking fraudulent or illegal uses of the website;

Data processing for purposes other than those specified herein will be specified herein and, if necessary, specific consent will be requested.



4. Methods, place of data processing and security measures

The data of the Data Subjects are collected, archived and stored on the server at the Data Controller and on any other useful support, while the data downloaded and processed in paper form are stored in special paper databases ensuring the appropriate security standards at the headquarters of Lucaffè srl S.B., located at Via del Porto 7, 25080 Padenghe sul Garda BS, Italy, in accordance with the principles of lawfulness, correctness, non excess and relevance provided by the current privacy legislation.

The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. In addition to the Data Controller, in some cases, other parties involved in the organization of this Web Site (administrative, sales, marketing, legal, system administrators) or external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies) may have access to the Data. The Data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. The User’s Personal Data may be transferred to a country other than the one where the User is located.


5. Nature of data provision

The provision of data is optional except for those fields of the forms indicated as mandatory, in order to ensure:

  1.   the fulfillment of contractual and legal obligations in force;
  2.   the correct and lawful use of the website;
  3.   the protection of any rights and intellectual works;
  4.   the achievement of the purposes listed above;

The processing of Personal Data is based on the User’s consent and the User may revoke it at any time.


6. Legal basis for processing

The Controller processes Personal Data related to the User in case one of the following conditions exists:

  • the User has given consent for one or more specific purposes;
  • the processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures, as well as responding to the request to initiate or execute business relationships;
  • the processing is necessary to fulfill a legal obligation to which the Controller is subject;
  • processing is necessary for the performance of a task of public interest or the exercise of public authority vested in the Controller;
  • processing is necessary for the pursuit of the legitimate interest of the Controller or third parties.


7. Communication of data to third parties

The Data Subject’s data are communicated to third parties to the minimum extent necessary for the fulfillment of contractual and legal obligations or at the express request of the Data Subject. The subjects to whom the data are communicated act as Data Processors. Furthermore, the data will be provided to the competent Authorities in case of legal obligations.

The Data Subjects’ data may, therefore, be communicated by the Data Controller to the following categories of recipients:

– To companies, including related, controlled or controlling companies, consultants or professionals that may be in charge of the installation, maintenance, updating and, in general, management of the Data Controller’s hardware and software, including, cloud computing service providers.
– To all those subjects, including public authorities, who have access to the data by virtue of regulatory or administrative measures.
– To all those public and/or private individuals and/or legal entities (legal, administrative and tax consulting firms), if the communication is necessary or functional for the proper fulfillment of obligations arising from the law or, in the case of ascertaining, exercising or defending a right.


8. Retention of personal data

The data provided, will be retained for the time strictly necessary to carry out the individual processing activities with the understanding that, once this period has expired they will be retained in any case for 1 year, while they will be retained for longer periods only in the cases provided for by the regulations in force or only in the case of superior legitimate interest of the Data Controller. At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiration of this period the right of access, cancellation, rectification and the right to Data portability can no longer be exercised.


9. Rights of the Data Subject

In relation to the data subject to the processing referred to in this notice, the data subject is granted at any time the right to:

  • Access to data (art. 15 EU Regulation No. 2016/679);
  • Rectification of data (art. 16 EU Regulation No. 2016/679);
  • Deletion of data (Art. 17 EU Regulation No. 2016/679);
  • Limitation of processing (Art. 18 EU Regulation No. 2016/679);
  • Obtaining notice of any updates, corrections and/or additions to your personal data made by the Data Controller to the recipients involved (obligation to notify – Art. 19 GDPR);
  • Data portability, understood as the right to obtain from the Data Controller the data in a commonly used, machine-readable structured format for transmission to another Data Controller without hindrance (Art. 20 EU Regulation No. 2016/679);
  • Object to the processing (Art. 21 EU Regulation No. 2016/679);
  • Not being subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him/her (Art. 22 EU Regulation No. 2016/679);
  • Withdrawal of consent to processing (Art. 7(3) EU Regulation No. 2016/679);

Bringing a complaint to the Data Protection Authority (Art. 77 EU Regulation No. 2016/679).


10. Methods of exercising rights

The exercise of the above rights may be exercised by written notice to be sent by e-mail to or by registered mail to the registered office of the Data Controller.


    11. Responsibility of the Data Controller

    Although the Owner of the site carries out regular updating, it is clarified that it cannot be held responsible for damages to a user caused by actions of third parties who, by means of unfair techniques, have used the information published on the site. The owner cannot be held responsible for any damages suffered by the user given the characteristics of the network and / or technical configurations. Subject to the provisions of the law, these conditions are subject to Italian law and all disputes concerning their application and interpretation will be submitted to the exclusive jurisdiction of the Court of Brescia.


    12. System Logs and Maintenance

    For operation and maintenance purposes, this Web Site and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.


    13. Interaction with social networks and external platforms

    This type of services allows for interactions with social networks via footer, or with other external platforms, directly from the pages of this website. Interactions and information acquired by this Application are in each case subject to the User’s privacy settings related to each social network.


     14. Statistics

    The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to track User behavior.


    15. Google Analytics

    Google Analytics is a web analytics service provided by Google LLC or Google Ireland Limited, depending on where this Application is used, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google.
    Google may use Personal Data to contextualize and personalize ads in its advertising network.
    Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy. Privacy Shield Adherent.


    16. Google Ads Conversion Tracking

    Google Ads conversion tracking is a statistics service provided by Google LLC or Google Ireland Limited, depending on where this Application is used, that links data from the Google Ads ad network with actions taken within this Application.

    Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.




    What are cookies?
    Cookies are data created by a server that are stored on your computer or mobile device every time you visit an online site through a browser.On each subsequent visit, the browser, sends these cookies back to the site that originated them or to another site. In this way, cookies allow sites to remember certain information to enable the user to browse online quickly and easily.


    Use of cookies

    By consenting to the use of cookies, you agree to the terms of use expressed in this document. The request for consent cannot be repeated unless:
    – the conditions of processing change significantly;
    – it is impossible for the site to know whether a cookie has been stored in the device;
    – 6 months have passed since the previous submission of the banner.


    The banner

    The banner contains a link to the extended information notice and contains a command to express consent by accepting all or only some cookies. If the user chooses to close the banner using the X button in the upper right corner, the default settings that do not allow the use of cookies or other tracking tools other than technical ones will be maintained. Technical cookies are always used, even without the acquisition of consent, since their purpose is to ensure the navigation and enjoyment of the site and not to collect personal or specific Data from users.


    Cookies used

    The cookies used can be categorized by type, duration and purpose. Specifically, this site uses the following cookies:

    1. First-party cookies (cookies created and readable by the site you are visiting);
    2. Third-party cookies (cookies created and readable by a site different from the one you are visiting. A description of the third-party cookies installed and links to the relevant Cookie Policies);



    1. Session cookies (temporarily stored cookies that are automatically deleted when the user closes the browser);
    2. Persistent cookies (cookies that remain stored on the user’s device unless they are deleted or reach their expiration date);


    Based on purpose:

    1. Technical cookies (cookies that allow navigation and enjoyment of the site. Without the use of such cookies, the site cannot function properly. These cookies do not collect information that can identify the user and cannot be disabled);
    2. Analytical cookies (cookies used to collect aggregate statistical information about how users use the site. This information is completely anonymous and is used for the sole purpose of improving site optimization);
    3. Social cookies (cookies that allow sharing, commenting and browsing site content through social networks);


    Analytical cookies used: Google Analytics (Google Inc.): Google Analytics is a web analytics service provided by Google Inc. (“Google”).
    Google uses Personal Data, collected anonymously on this website, for the purpose of tracking and examining usage, compiling reports, and sharing them with other services developed by Google.Google may use Personal Data, collected anonymously on this website, to contextualize and personalize ads in its advertising network. Place of processing: USA.


    How to disable cookies

    Most browsers automatically accept cookies, but the user can normally change the settings to disable this feature. The “Options” or “Preferences” section in the browser menu allows you to opt out of receiving cookies or get notification from the browser when they are activated. Alternatively, you can also consult the “Help” section of the toolbar found in most browsers.

    Rights given to the user and Data retention times: see Privacy Policy. (link to privacy policy)

    Any future changes to the Privacy & Cookie Policy will be posted on this page.