Privacy policy
By registering with Nespresso internet shop https://nespresso.lt/en/ (website address in a particular country) (hereinafter – e-shop, website, Nespresso), you are providing to UAB „Mineraliniai vandenys“ (hereinafter – the Company or we) your personal data and are granting us the right to process the data received to the extent, in the ways and for the purposes identified in this Policy (hereinafter – the Policy), Purchasing Terms (hereinafter – the Terms), and physical shops.
A buyer willing to use our e-shop and buy goods from there in a more user-friendly way shall register at the e-shop system by filling in the registration form and creating a user account.
Should you disagree with these Rules, this Policy or any individual part thereof, this would, unfortunately, make it impossible for us to give you access to all or any of the services of the Company, or any benefits that come with Nespresso club membership (hereinafter – the Services).
In this Policy you will find all information on your personal data collected and processed by us, the purpose of using your personal data, the length of data retention, etc.
An identity of a data subject is verified by activating a link sent to your personal e-mail address or in a similar fashion.
Personal data shall mean any information which can be used to identify a person, as well as any information about a person who has already been identified.
- Your personal data controller is UAB „Mineraliniai vandenys“, legal entity code 121702328, having its registered seat at Aukštaičių St. 7, Vilnius, which is going to process your data for the following purposes:
|
Purpose of data processing |
Category of data |
Legal basis for data processing |
Data retention period |
|
Registration and administration of your account with Nespresso e-shop, and administration of your Nespresso club membership. The personal data you provide at the point of registering your account at e-shop will also be used to verify your identity in physical shops. |
The particulars provided at the moment of registration at the e-shop: first name, last name, mobile phone No, e-mail address, delivery address, town. Account registration data, actions within the account, including technical browsing data (IP address, technical information related to access and browsing). |
Consent which shall be deemed as having been received provided that the actions necessary to create an account have been performed and registration has been confirmed. |
Throughout the entire period that you are the account holder. If the client is inactive (has not accessed the account) for 4 (four) years from the date of consent, the account shall be deleted. |
|
Processing of purchasing data. |
First name, last name, e-mail, mobile phone No., delivery address, signature (if you are receiving the goods yourself), date and time of purchase and delivery, titles and quantities of goods, the price of the purchase and the discounts granted, method of payment for the goods purchased and payment information.
|
Contractual performance. |
Accounting and taxation records are retained for the time period specified in the relevant legal acts on the basis of legal requirements. Other purchasing data are retained for 5 (five) years from the date of executing a purchasing transaction.
|
|
Provision of information about exceptional and personalised offers, news, displays, and events, including provision of requests to renew the consent.
|
First name, last name, mobile phone No., e-mail address, information about the goods purchased from Nespresso e-shop and physical shop, information about the time of the purchase and delivery, the amount and method of purchase, frequency of purchase.
|
Consent. |
As long as the consent is valid, but not longer than for 4 (four) years from the last purchase. |
|
Making contact in order to ensure service of highest quality and to build a uniform service practice. |
Data from a phone call. |
Consent. |
1 (one) years from recording the phone call. |
|
Reminder about a descaling procedure for your coffee maker.
|
First name, last name, e-mail address, mobile phone No., registration data of the coffee-maker. |
Consent. |
As long as the consent is valid, but not longer than for 4 (four) years from the last purchase. |
|
Ensuring continuity of discounts and other benefits. |
First name, last name, data of account registration, address, e-mail address, telephone number, information about the goods purchased from Nespresso e-shop and physical shop. |
Consent. |
As long as the consent is valid, but not longer than for 4 (four) years from the last purchase. |
|
Organisation of games. |
First name, last name, contact details. |
Your consent and our legal obligation to give the prize to the winner. |
As long as the award procedure of the winner lasts and the prize is given.
|
|
Handling customer inquiries, complaints, requests and feedback. |
Contact details: first name, last name, telephone number, e-mail address, residential address, data of birth;
Contents of the inquiry: the event which is the reason of the inquiry, circumstances of the event, date, location, your application, claim or reply, a good or any other information indicated in the inquiry;
Any other documents and/or data provided along with the inquiry, such as data of the purchase receipt, photos;
A recorded telephone conversation if the inquiry was submitted by phone. |
Our legal duty to investigate into and respond to customer inquiries, as well as our legitimate interest to evaluate customer feedback for the purpose of providing a better service next time. |
Up to 12 (twelve) months. |
|
Video surveillance for asset protection purposes. |
Video records, when customers may be captured within a recording range of a camera. |
Ground of legitimate interests. |
Up to 2 (two) months. |
Statistics, market and customer behaviour surveys
|
Data is processed for the purpose of statistics, market and customer behaviour surveys so that our service quality and services could best meet customer expectations. |
|
|
Data categories. |
Your e-mail address, place of residence, purchasing data (including the location, date and time of purchase; titles and quantities of goods, unit and total price of the purchase. |
|
Legal ground for data processing. |
It is our legitimate interest to analyse data, to improve the quality of our service and the services, to draw reports required for our business in order to evaluate our performance and create value to you as our customer and the corporate business. |
|
Duration of data processing. |
5 (five) years. |
Whenever performing analyses of statistics, market and customer behaviour surveys and forming the reports required for the business, we may use automated data analysis. We may use anonymised data during our analysis that will not process your name, your contact details or any other information which might identify you. Data analysis undertaken for the purpose of statistics, market and customer behaviour surveys allows us making important business decisions, such as building a range of products best corresponding to the needs of our customers, improve service quality, pricing, business development, etc.
Operations of data analysis do not have any legal impact or impact of a similar effect on you.
When the period of validity of the consent draws to an end, we reserve the right to send you a reminder of the term of validity of the consent with a possibility of extending it further.
1. From which type of sources are we collecting your personal data?
Almost all your personal data are received from you. You provide us with your personal particulars directly at the point of registration at the e-shop and club membership; and we get your purchase data when you fill in an order form and use our Services. Moreover, we receive your data directly from you when you send us an inquiry by any means of communication of your choice: by e-mail, a written inquiry or a phone call.
2. In which cases do we disclose your data to third parties and what these third parties may be?
We may transfer your personal data for processing to third parties who help us provide and administer our Services and who provide us the services of Customer inquiry administration. Such third parties may include: database software developers, database administration service providers, hosting and cloud computing service providers, direct marketing service providers, market survey or business analytical service providers, such as advertising and event organising companies, companies providing services of newsletter distribution, IT and other technical installation administration companies, etc. In each individual case the data that we provide to the data processor is strictly limited to the data which is necessary to perform a special function or provide a specific service. Our data processors may process your personal data upon our instruction only and may not use it for any other purposes or transfer it to other parties without our consent. Moreover, they must ensure protection of your data in accordance with the valid legal acts and written agreements signed between them and ourselves.
If an event described in your Inquiry may be regarded as an insured event, we will forward your inquiry and the relevant data to the insurance company which has issued third party liability insurance policy in respect of our goods and assets or which is providing an insurance coverage related to the event described in your Inquiry. Insurance companies act as independent data processors and process your personal data in accordance with their own internal rules and procedures.
Data can also be provided to competent public authorities or law enforcement bodies, e.g., police or supervisory authorities, but only if the latter so request and only where such request is furnished under the effective legal acts or in the circumstances and under procedure as described in legal acts for the purpose of protecting our rights, the safety of our buyers, staff and resources, as well as for the purpose of lodging, filing and protecting our legal claims.
If we are using the website’s analytical tool (for instance, Google Analytics) that are applied in order to trace your use of information provided in the e-shop, we may exchange your anonymised data with third parties who use such information to assess the data on the use of the website or the mobile application, to draft reports required for the website operators on the activities of the website or mobile application, and to provide other services related to the use of the website, internet and mobile application. For more on this, read the Cookies’ policy.
Your personal data may also be forwarded to the following third parties:
- Other subsidiary companies of the holding company UAB „MV GROUP“ to enable them to perform the functions necessary to achieve a certain target.
3. In which territories and jurisdictions are we processing your personal data?
Your personal data may be provided to third parties if such obligation to provide data is prescribed under the legal acts of the Republic of Lithuania. With your consent and for the purpose of ensuring continuity of discounts and other benefits for you, your personal data may be transferred to our partners in Poland (Nestle Polska S.A.), as well as beyond the EU borders – to Switzerland (Nestle Nespresso S.A.), which has been recognised by the European Commission’s decision as an entity guaranteeing an appropriate level of protection of personal data.
4. What rights can you derive from personal data protection legal acts and how can you exercise them?
4.1. The right to have access to your personal data being processed
You are entitled to receive a confirmation of whether we are processing your personal data, as well as the right to get access to your personal data so processed and information on the purposes of data processing, categories of data being processed, categories of data recipients, duration of data processing, data sources, automated decision making, including profiling, its meaning and implications for you.
4.2. The right to correct personal data
In the event of change in your personal data provided in the registration form or in the event that you believe that the information we process about you is inaccurate or incorrect, you are entitled to request to change this information by logging in to your account in the Settings section, and if you are unable to do so, you are entitled to correct the data by informing as accordingly by e-mail: nespresso@mvgroup.eu.
4.3. The right to withdraw your consent
Where your personal data is being processed on the basis of your consent, you are entitled to withdraw your consent at any time, after which processing of your personal data shall be discontinued. In some cases this may mean that we will no longer be capable of providing you with our Services. You can always correct your consents (withdraw or issue a new consent) by changing your settings in your account’s Settings section. For instance, you may, at any time, withdraw your consent to receive offers and news, and such withdrawal of consents is not going to prevent you from using our Services, but it will mean that we will no longer be able to provide you with useful information.
Whenever information containing direct marketing contents are being sent to a data subject by e-mail or any other user-friendly means of communication, we are always giving a chance for a customer to unsubscribe from further e-mails of this nature in a user-friendly, free of charge and easy manner. A data subject is entitled to withdraw his or her consent for personal data processing for direct marketing purposes at any time: all he or she has to do is to unsubscribe from information notifications and newsletters by clicking on the link “Unsubscribe” given in an information notification or newsletter. After doing so the consent of a data subject to receive information (newsletters) for the purpose of direct marketing will have been withdrawn.
4.4. The right to appeal
If you believe that we are processing your personal data in violation of the legal requirements, we always request you to contact us first. We sincerely believe that with good will we may dispel any doubts you may have, satisfy your requests and undo any wrongs, if any.
Should you feel unhappy about the proposed solution of a problem or believe that we are not taking necessary actions as per your request, you have every right to appeal to the supervisory authority, which in the case of the Republic of Lithuania is the State Data Protection Service.
4.5. The right to object to data processing where processing is based by legitimate interests
You are entitled to disagree with personal data processing where such personal data is being processed on the basis of our legitimate interests. However, in consideration of the purposes of provision of Services and a fair balance of legitimate interests of both parties (you as the data subject, and us, as the data processor) your objection may mean that, after discontinuing processing your personal data based on our legitimate interest, we will no longer be in the position to allow you avail of our Services.
In order to exercise the right of this clause, please submit a written application to our Data protection officer.
4.6. The right to delete data (the right to be forgotten)
In the event of certain circumstances defined in the legal acts on personal data processing (where personal data are being processed illegally or in the absence of a legal ground for processing, etc.) you are entitled to request us to delete your personal data. In order to exercise this right, please submit a written application to our Data protection officer.
It is important to note that your particulars will be deleted and other data will be deleted or anonymised without any new request required from your side.
4.7. The right to restrict data processing
In the event of certain circumstances defined in the legal acts on personal data processing (where personal data is being processed illegally, you have challenged the accuracy of data, you have submitted an objection against data processing on the ground of our legitimate interest) you shall also be entitled to restrict your personal data processing. However, we shall point out that during the duration of such restriction on data processing and during this restriction we may not have the possibility of ensuring provision of Services to you.
In order to exercise the right specified in this clause, please submit a written application to our Data protection officer.
4.8 The right to data portability
You are entitled to receive or transfer your personal data to another data processor (including the right to data portability). This right covers only such data which were provided to us on the basis of your consent or under the contract, provided that the data are subject to automated processing. In order to exercise the right specified in this clause, please submit a written application to us or to our Data protection officer.
In order to exercise the right to data portability, please submit a written application to our Data protection officer.
4.9 Request handling procedure
In order to protect all data of our buyers from illegal disclosure, upon receipt of request to submit data about you or to exercise any other of your rights, we will be obliged to request to certify your identity. To this end we may request you to indicate the actual particulars given by you in the registration form/purchase order (e.g., first name, las name, e-mail address or telephone number) so that we could crosscheck whether the data indicated match the relevant particulars.
Upon receipt of your request with regard to exercise of any of your rights and upon your successful authentication as described above, we undertake to submit to you all information about any actions taken in response to your request without undue delay, but in any event no later than within one month from the date of receipt of your request. Given the complexity of your request or the number thereof, we are entitled to extend the period of one month by additional two months, by informing you accordingly by the end of the first month and indicating the reasons for such extension.
If your request has been submitted by electronic means of communication, we will respond to you by electronic means of communication, unless it is impossible (e.g., due to extremely large volume of information), or by other means, if you so request.
We will refuse to satisfy your request by a motivated reply if we identify the circumstances prescribed in the legal acts and will inform you in writing accordingly.
5. How and by what means can you contact us?
In the event of change in the data in your registration form, or if you believe that the information processed about you is inaccurate or incorrect, you are entitled to request such information to be amended, corrected or rectified by sending your request to e-mail: nespresso@mvgroup.eu.
On all other issues of data processing related to exercising rights of a data subject, please contact e-mail address: dataprotection@mvgroup.eu
6. A longer retention of data
Upon expiry of your personal data processing and retention period specified in this Policy, we will destroy your data and will anonymise them irreversibly in a reliable way in the cases prescribed in our Policy as soon as is practically possible and within a reasonable period of time required to complete such action.
A personal data retention period, longer than the one prescribed under this Policy, may be applied in respect of your personal data only provided that:
- it is necessary to allow us to defend ourselves from the demands, claims or actions and to exercise our rights;
- there are reasonable grounds to suspect illegal activities that are currently under investigation;
- your data are necessary for a proper settlement of a dispute or complaint;
- it is necessary for the purpose of making back-up copies or similar purposes;
- in the event of any other legal grounds prescribed by the legal acts.
7. Cookies
We use cookies (these are small information files sent to your computer or other device (such as mobile phone)) while you are visiting our website, which remain stored in your browser. The cookie is sent to your computer or other device to save data and to allow us to identify you as a Service user whenever you visit our website. Cookies help us link your purchasing history and other data collected while you were using our Services with your browsing activities on the internet. Information collected by cookies enable us to ensure a more user-friendly browsing experience for you, to give you attractive offers and to learn more about the behaviour of our website visitors, analyse the trends and to improve our website and the service.
On our website we also use cookies of third parties. These cookies are used to create a history of every individual visitor so that we could show you personalised commercials and ensure the best browsing experience whilst visiting our website. If your browser allows saving third party cookies, our selected partner has the possibility to save these cookies in your browser.
For more about cookies, their use and waiver, read Cookies policy: Privacy provisions| Nespresso.
We also use services offered by Facebook, Google, and other internet providers of commercials. You can find out more about the their privacy policies, the data collected and personal data protection measures in the respective privacy policies of these service providers. For more information on how it works as well as information about your right of waiving such commercials or such use of data, you will find more in the information provided by the relevant service providers at
https://www.facebook.com/policies/ads#; https://policies.google.com/technologies/ads.
8. Validity of and amendments to the policy
Please bear in mind that this Policy may be amended, supplemented and updated. The Company is entitled to amend or completely replace the Policy at any time. This Policy is valid as of 15 February 2021. In the event this Policy is updated, its up-to-date version will be uploaded on this page.
Consent to data safety processing
INFORMATION
We would like to inform you of limited edition coffees, free deliveries, discounts and other personalised information.
If you agree, please select the channels that we could use for contacting you.
[ ]
Telephone
[ ]
A REMINDER TO DESCALE YOUR COFFEE MAKER
The service is intended to club members. We would like to remind you that it is time to descale your coffee maker. The start date is the registration date of the coffee maker.
If you agree to receive a reminder of the time to descale your coffee maker by e-mail, click “agree”
[ ]
Agree
ENSURING CONTINUITY OF DISCOUNTS AND OTHER BENEFITS
In order to ensure continuity of discounts and other benefits for your, we would like to transfer your personal data to our partners in Poland – Nestle Polska S.A, and in Switzerland – Nestle Nespresso S.A. If you agree, click on “agree”.
Agree
[ ]
I have read the provisions and I agree that they shall be applied to processing my personal data. These provisions can be found in the Privacy policy section. (mandatory)
Agree
[ ]