Skip to main content

FREE DELIVERY* See more

Please reset your password to access your account on the new platform. This step is essential. If you’ve already done this since 30/06, there’s no need to do it again.

Reset my password

Got questions? Find out more here

Already a customer?

Are you a new customer?

  • 10% off our selection* from 49€ with EUMAXINEW26
  1. Home
  2. Privacy & Cookies policy

Legal Information

We, SAS MaxiCoffee.com are the owners of the https://www.maxicoffee.com/en-eu/ website. We are committed to protecting your privacy and security. Any information you, as user of the website provide, is received, stored and managed by us in line with our Privacy and Security policies detailed below, in line with European and UK regulations. By using our website, you are agreeing to this policy and the use of cookies in line with the terms in this policy.

Privacy policy ¹

Under European Regulation no.679/2016 (hereinafter, the "Regulation") and national law on personal data protection (hereinafter referred to collectively as "Privacy Law"), MaxiCoffee Online SAS invites you to carefully read this Privacy Policy, which contains important information on the protection of your Personal Data.


The processing of your Personal Data will be based on the principles of correctness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, integrity and confidentiality, in accordance with the provisions of the Regulation.

The Data Controller is MaxiCoffee Online SAS (hereinafter "MaxiCoffee" and/or the "Data Controller") with registered office in Mios (33380) – 25, Rue de Galeben, in the person of its legal representative pro tempore.

  • Personal details (such as name, surname, date of birth, age, gender, etc.)
  • Contact information (e-mail, address, telephone number)
  • Geo-location data (including IP addresses)
  • Internet browsing data (including data from the use of social media icons andlogin buttons - e.g., Facebook, Instagram, Twitter, LinkedIn, etc.) collected via the cookies installed on your computer or mobile device (for more information please see our Cookie Policy)
  • Bank details required for the management of the business relationship
  • Photographs and/or video recordings collected during participation in promotions, contests, and corporate events, exhibitions, shows, and installations in general
  • Data relating to your interactions with our websites, and App and/or connected coffee machines and social media channels, including but not limited to:
  1. data related to your device following the download of our app and use of notifications on the publication of new contents, initiatives and updates;
  2. participation to surveys, initiatives, contests, promotions, events,
  3. registration of the coffee machine and/or free coupons;
  4.  data on the use of the connected coffee machine (number of brews made, machine operating and maintenance status, machine humidity percentage, etc.);
  5. interactions with our chatbot service equipped with generative artificial intelligence (prompts entered and responses received);
  6. interactions with our social media channels (likes, comments, images, and in general any content and information you may post on social media pages dedicated to products of the various MaxiCoffee Group brands)

Depending on how you access and use the MaxiCoffee website and/or app (and without prejudice to specific initiatives that require the provision of additional personal data, for which specific privacy notices will be published from time to time), the purposes for which your personal data is processed and the relevant legal bases are set out below. :


  • Registration on the website/APP: registering by creating an account allows you to access the Website and the APP as a ‘Registered User’ and to use the services available. The provision of data is necessary for the creation of the account; without it, it will not be possible to complete the registration. The legal basis for the processing is the performance of a contract to which the data subject is a party.
  • Purchase of products and services: your Personal Data will be processed to enable you to make purchases via the website as a Registered User. In particular, your Personal Data will be processed to manage orders and services, process payments, manage any renewals, changes or cancellations, fulfil the relevant administrative and accounting obligations, and to contact you regarding your purchases and/or the services activated (for example, for updates on the status of your orders, technical communications or information relating to the services you have subscribed to). The provision of personal data is necessary for the conclusion and management of the order and/or the digital service requested; without it, it will not be possible to complete the purchase. The legal basis for the processing is the performance of the Contract to which the data subject is a party.
  • Debt Recovery: Your Personal Data may be processed for the purpose of managing debt recovery activities, including payment reminders, handling any outstanding payments and protecting the Data Controller’s rights, including through the involvement of appointed third parties. The legal basis for the processing is the Data Controller’s legitimate interest in protecting its rights and recovering debts.
  • Fraud prevention: Your Personal Data may be processed for the purpose of preventing online fraud, correctly managing payments and ensuring the security of transactions. To this end, we may request, where necessary, additional information or documentation to verify your identity before proceeding with the processing of your order. In the event of anomalies or the need for verification, the order may be temporarily suspended and marked with the status “Identity verification” within the “My orders” section of the Customer Area. The legal basis for this processing is the legitimate interest of the Data Controller.
  • Management of requests and/or initiatives: Your Personal Data will be collected to manage and respond to your requests and to provide you with assistance, including via e-mail, telephone and/or social media, including any contact made by our customer service team for information support or in relation to the services offered. By way of example and without limitation, such enquiries may concern (a) maintenance, repair or replacement of coffee machines, (b) products sold by us, (c) management of participation in our initiatives (e.g. sustainability activities, competitions). The legal basis for this processing is the legitimate interest of the Data Controller, as well as, where applicable, the performance of pre-contractual or contractual measures. Calls may be recorded for service quality and staff training purposes; in such cases, the data subject will be informed in advance. The services referred to in point (a) above may also be provided via video chat or telephone calls. In such cases, telephone support will be provided exclusively in real time and there will be no recording of the content.
  • Personalised marketing: subject to your specific consent, we may process your Personal Data to send you, via e-mail/SMS/APP, personalised commercial communications based on your preferences and consumption habits, as well as to invite you to take part in our promotional initiatives and events and to subscribe to the newsletter. The legal basis for this processing is the data subject’s consent, which may be withdrawn at any time. 
  • Welcome offer: upon provision of your e-mail address, we will send you a message containing a discount voucher to be used for your first purchase, valid for a limited period. Furthermore, during the voucher’s validity period, we may send you reminder messages regarding its use. The legal basis for the processing is the performance of pre-contractual measures taken at the data subject’s request.
  • Participation in competitions and prize draws: your personal data will be processed to enable you to participate in competitions and prize draws and to ensure they run smoothly (e.g. verification of eligibility, awarding of prizes and related obligations). The provision of data is necessary for participation; without it, it will not be possible to take part in the initiative. The legal basis for this processing is the implementation of contractual measures to which the data subject is a party.
  • Customer Satisfaction: we may send questionnaires and surveys to assess your level of satisfaction with the products and services offered. The legal basis is the legitimate interest of the Data Controller.
  • Purposes of analysis and improvement of products and services: Personal Data, as well as information relating to your interactions with MaxiCoffee, may be processed for the purposes of analysing and improving services, the functionality of the website and the app, and the effectiveness of promotional initiatives. These activities will be carried out, where possible, using aggregated or anonymised data. The legal basis for the processing is the legitimate interest of the Data Controller.

In accordance with the provisions of the Regulation, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and will be the contact person for data subjects, as well as for the French Data Protection Authority, CNIL.


The DPO can be contacted at the email address PrivacyDPO@maxicoffee.com

In order to ensure compliance with the principles of necessity and proportionality of the processing, we have defined various Personal Data storage periods for the individual purposes described;


  • Registration to the website/APP: The Personal Data you have provided in order to register to the Website/APP will be stored for 3 years from the last contact (purchase/login). For customers with an active subscription, the account will be active for as long as the machine is used. If the machine is not used for 36 months, your account will be deleted and the data collected by the machine will be anonymised.
  • Purchase Management and Billing: Data related to purchases will be retained for a period sufficient to ensure the proper performance of the contract and, in any case, for an additional 10 years to fulfill related administrative and tax obligations.
  • Debt Recovery: Data will be retained for the time necessary to recover the debt and, thereafter, for 10 years for legal protection purposes. 
  • Fraud prevention: Any documentation collected to verify the user’s identity will be processed for the time strictly necessary to complete the verification. Upon completion of the verification, such data will be deleted, unless required by law to be retained further. 
  • Contests and prize promotions: Data will be retained for the entire duration of the contest and for a period sufficient to ensure its proper conduct. This is without prejudice to the fulfillment of administrative and tax obligations for which the data retention period is prescribed by law. 
  • Personalized marketing: Data collected for the sending of personalized promotional communications will be retained for 3 years from the last contact (purchase/click on a hyperlink contained in an email referring to the promoted product).
  • Welcome Offer: Data provided to receive the discount voucher will be retained for 3 months from the request.
  • Customer Satisfaction: Data collected for the purpose of assessing customer satisfaction will be processed for the period deemed strictly necessary to achieve these purposes, after which it will be anonymized.
  • Request Management and Support: Data collected to manage requests or reports will be retained for the time necessary to process the request and subsequently deleted in the absence of further interactions, unless it is necessary to retain it for administrative or defensive purposes (e.g., complaint management).
  • Analysis and statistics: Data processed for analytical purposes will, where possible, be anonymized or aggregated. Any personal data used will be retained for the time strictly necessary for such purposes.

The provision of your Personal Data, depending on the purpose pursued, could have optional or obligatory nature. When the nature of the provision is mandatory it means that failure to provide the required Personal Data may affect the possibility to use some services (e.g. to place orders and purchases it is necessary to provide your address, failure to provide this information does not allow you to complete the order/ purchase). When the nature of the provision is optional you will have the possibility to take advantage of basic services but not additional services (e.g., failure to provide consent to receive personalised promotional communications will not affect the completion of an order/purchase but will result in the inability to stay updated on our promotions and initiatives).

Your Personal Data will be processed in compliance with the provisions of current Privacy Law with the use of electronic or automated means, including Artificial Intelligence (AI) systems —including generative AI—as well as manual methods, strictly following the purposes for which the data has been collected, via databases, the electronic platforms managed by MaxiCoffee or by third parties (appointed as Data Processors), the integrated IT systems of MaxiCoffee and the aforesaid third parties, and/or websites owned or used by MaxiCoffee.


Your Data will be processed using methods that ensure the highest level of confidentiality and only by people trained and authorised to process it. The Data Controller adopts all the appropriate technical and organisational measures to ensure a level of security appropriate to the risk presented in relation to the processing.


The Personal Data will be processed mainly at the offices of the Data Controller and at the places where the Data Processors are located.

Your Personal Data may be made available, for the purposes described above, to MaxiCoffee employees and contractors.


Your Personal Data may be processed by companies appointed as Data Processors to carry out activities related to the processing of Personal Data on behalf of MaxiCoffee. The Data Controller has drawn up a list of Data Processors, which is constantly updated and which it makes available to you by contacting it at the addresses given in point 13 of this Notice.


Finally, your Data may be disclosed to judicial authorities where necessary and in cases provided for by law.

The Personal Data you provide may be transferred to the companies of the Lavazza Group and/or third-party companies located within, as well as outside, the European Union/ European Economic Area. These companies carry out the aforementioned personal data processing activities based on a data processing agreement signed between the parties. Specifically, if your request concerns a different area or another company within the Lavazza Group, your personal data may be transferred to the relevant Lavazza company so that it can process your request directly.


Transfers of personal data to Lavazza Group Companies and/or third-party companies located outside the EU/EEA are made in accordance with Chapter V of the Gdpr. In particular, they are based on Standard Contractual Clauses (SCC) approved by the European Commission. To obtain copies of these SCCs please contact the Controller at the addresses listed in Section 13 of this Privacy Policy. 

MaxiCoffee does not normally collect the Personal Data of minors, nor does it deliberately establish any communication with them. For this reason, we invite parents to actively monitor the online activities of their children under sixteen years of age.

You may at any time exercise your rights under Articles 15 et seq. of the Regulation against the Data Controller, including:


  1. the right to obtain confirmation as to whether or not personal data concerning you exists, regardless of it being already recorded, and communication of such data in intelligible form; 
  2. the right to withdraw the consent you have given for the purposes of the processing at any time; 
  3. the right to access, rectify, erase and limit the processing and portability of your personal data; 
  4. the right to object to its processing any time you wish. 
  5. the right to commence proceedings before the competent supervisory Authority, if you think that the processing of your data is contrary to the laws in force.

If you wish to exercise the rights of data subjects, or you wish to have more information on the processing of your personal data, please write an e-mail to: PrivacyDPO@maxicoffee.com or write to the registered office of the Data Controller in Mios (33380), 25 Rue de Galeben.

This policy may be modified or amended at any time in the event of legal or jurisprudential developments, decisions and recommendations from the CNIL or practices.


This Privacy Policy is updated in June 2026.

1. Art.13 of Regulation EU no.679/2016

Cookies

Updated June 2026

Pursuant to Article 13 of Regulation EU 679/2016 on personal data protection (hereinafter, the “Regulation” or “GDPR”), MaxiCoffee Online in its capacity as personal data Controller, wishes to inform you that this website uses “cookies” and similar technologies in order to improve your experience on its websites (including mobile versions) and Apps and to recognize you during your next visit. Cookies and similar technologies can perform certain functions and personalise content. We ask you to read this Cookie Policy where we provide all the information concerning the use of such technologies.

Cookies are short strings of text that are automatically downloaded onto the user’s browser or other device, with its consent (where required) when browsing our websites (including mobile versions) or when using our apps. This allows us, on each next visit to keep track of each user's choices and thus offer a more efficient and customized experience.


Some cookies collect information to protect our website, other cookies provide information to help us improve its performance while others are used to customise content. Every cookie performs a specific action and based on the function and purpose of use they can be divided into technical, aggregate analysis, and profiling cookies.


As you navigate this Website, you can either install “first party” or “third party” cookies. The term “first party cookies” means cookies that are installed and managed personally by the Data Controller, whereas “third party” cookies are installed by third parties.


For any question concerning the protection of your Personal Data, you may contact our Group DPO by writing to: privacyDPO@maxicoffee.com.

The cookies described in this section are sent directly from this website and can be either first-party (set directly by this website) or third-party (set by partners). These cookies are installed for the purposes detailed for the various categories of cookies listed below:


Necessary Cookies: These cookies are strictly necessary for the proper functioning, security and accessibility of the website and to enable its core functionalities. They are used, for example, to ensure correct navigation, access to secure areas, management of the shopping cart and payment processes, storage of cookie preferences, and website security and performance. These cookies are not used for profiling or advertising purposes. In accordance with applicable data protection laws, they do not require the user's consent and are therefore enabled by default.


Functional Cookies: These cookies allow the website to provide enhanced functionality and a more personalised browsing experience. They may be used to remember user preferences, personalise content, improve usability and optimise the user journey. This category may also include analytics and measurement cookies used to understand how users interact with the website, such as information relating to visits, pages viewed, navigation paths and website performance. The information collected helps MaxiCoffee analyse website usage, improve website functionality and enhance the services offered to users. These cookies are installed only with the user's consent.


Advertising Cookies: These cookies are used to track users' browsing behaviour, including across different websites and devices, in order to provide personalised advertising and marketing communications based on users' interests and preferences. They may be used for profiling, retargeting, measuring the effectiveness of advertising campaigns, analysing interactions with advertising content and sharing information with advertising, social media and analytics partners. Refusing these cookies will not prevent advertisements from being displayed, but they may be less relevant to the user. These cookies are installed only with the user's prior consent.

Advertising cookies, and certain functional cookies where they involve the analysis of user behaviour, preferences, interactions or browsing patterns, may result in the creation of user profiles. These profiles may be used to personalise content and services, provide tailored product recommendations, deliver targeted advertising and marketing communications, measure the effectiveness of marketing and advertising campaigns, analyse audience engagement and improve the overall user experience. Such processing activities are carried out only with the user's prior consent. Consent is collected through the cookie banner displayed when the user first accesses the website and may be withdrawn or modified at any time through the "Manage your preferences" section.

Our Websites and Apps also use technologies similar to cookies, such as pixels, tags and scripts (collectively, “tracking technologies”). These technologies allow us to understand how users interact with our content, measure the effectiveness of our campaigns, identify which products, services or offers may be of interest to users. Where such technologies are used for analytics, personalisation or marketing purposes, the information collected may be used to build user profiles and deliver content and offers tailored to users’ preferences. These tracking technologies are used only with the prior consent of the user, collected through the cookie banner displayed at the user’s first visit and manageable at any time via the “Manage your preferences” section.

Third-party cookies are set by domains other than the one visited by the user and allow third parties to collect information about users’ browsing activities, potentially across different websites. Our website may include features provided by third parties, such as social media buttons (e.g. Facebook, Instagram, LinkedIn, Twitter).


These features may install third-party cookies and tracking technologies, which may collect information about the user’s interactions, track browsing behaviour across different websites, be used for analytics, personalisation and advertising purposes. Where social media features are enabled, the relevant providers may receive information about the user’s interaction with our website and may use it for their own purposes, in accordance with their respective privacy policies.


Third-party cookies and similar technologies are only installed with the user’s consent, which may be freely granted, refused or withdrawn at any time via the cookie management tools described below.

Depending on whether they are session cookies (deleted when the browser is closed) or persistent cookies (which remain on the device even after the browser is closed), the duration of cookies is determined according to the following criteria:


Necessary Cookies: retained only for the period strictly necessary to ensure the proper functioning, security and accessibility of the website and to provide the services requested by the user. In most cases, these are session cookies that expire when the browser is closed, although certain cookies may be retained for a limited period where necessary for security or preference management purposes.


Functional Cookies: retained for the period necessary to provide enhanced website functionality, remember user preferences (such as language and display settings), personalise the browsing experience and analyse how users interact with the website. This category may also include analytics and measurement cookies used to improve website performance and services. Where possible, retention periods are limited and proportionate to the relevant purpose. These cookies remain active until they expire or until the user withdraws consent through the cookie preference centre or browser settings.


Advertising Cookies: retained until the user withdraws consent and, in any event, only for the period necessary to carry out the advertising, profiling, audience measurement, retargeting and campaign performance analysis activities described in this Cookie Policy. Such cookies will not be stored for longer than permitted under applicable laws, regulatory guidance and industry standards.


For cookies installed by third parties, the duration and retention criteria are determined by those third parties in accordance with their own policies. More information is available in the respective third parties’ privacy and cookie policies. 

Users can manage their cookie preferences in the following ways:


  1. through our Website: Users may access the cookie management tool to accept or refuse specific categories of cookies; view the list of cookies and tracking technologies used; modify or withdraw their consent at any time. 
  2. through browser settings: Users can also configure their browser to block or delete cookies. Please note that disabling certain cookies may affect the proper functioning of the website.


Instructions are available for the most common browsers. :


  • For Internet Explorer™: open the ‘Tools’ menu, then select ‘Internet Options’; click on the ‘Privacy’ tab then the ‘Advanced’ tab chooses the desired level or find these explanations by following this link
  • For Firefox™: open the ‘Tools’ menu, then select ‘Options’; click on the ‘Privacy and Security’ tab then choose the desired options or follow this link
  • For Chrome™: open the ‘Tools’ menu, then select ‘Settings’; click on ‘Privacy and security’ then on ‘Cookies and other site data’, and choose the desired options or find these explanations by following this link
  • For Safari™: open the ‘Preferences’ menu then click on ‘Privacy’; in the ‘Cookies and site data’ section choose the desired options or find these explanations by following this link
  • For Opera™: open the ‘Tools’ or ‘Settings’ menu, then select ‘Delete private data’; click on the ‘Detailed options’ tab, then choose the desired options or find these explanations by following this link


In case of services provided by (non-partner) third parties, users can also exercise their right to object to tracking using the information provided in the Privacy Policies of said third parties.

Data Subjects can exercise the rights afforded under the applicable privacy regulations, as per Articles 15-22 of the GDPR. For any information and request concerning the processing of your personal data and to exercise any of the rights under Articles 15-22 of the GDPR, you can contact our Group DPO at privacyDPO@maxicoffee.com.


Settings on a ‘Cookies’ management platform


Users may also manage their consent preferences at any time through the cookie management platform available on the website. 


This Cookie Policy may be amended from time to time. This may be the case, for instance, when it is required to meet new sector regulations, to update or provide new services, or when new technologies are implemented. Users are therefore invited to read this Cookie Policy frequently to check on any updates or changes. 

Security, phishing and fraudulous websites

At MaxiCoffee, we take your online security very seriously. Full details about how we protect the information you provide us are given below.


Our website uses the latest technologies such as 3D Secure to provide a safe, secure site for electronic commerce transactions, including secure socket layer (SSL) technology for payment transactions. SSL is a method for establishing a link between one computer and another safe one. Banks also use these links for online banking. You will recognise an SSL link by the little padlock appearing on the lower right in the menu bar of your browser and at the address bar beginning with "https" instead of "http". In this case the "S" stands for "secure".


E-mail correspondence is not a secure means of communication as it is a free text format that cannot be encrypted. Although we use advanced security measures to protect your information against loss, misuse and alterations, because of the nature of the internet, we cannot guarantee the security of the information provided to us over the internet and cannot be held responsible for this.

We have identified several frauders that may use our identity, making you think we are asking for personal data: email address, phone number, bank details, etc.


Some sites, hosted in France and abroad such as mesaromesduportugal.com, use graphic interface and a visual identity similar to those of MaxiCoffee.com, to encourage you to place an order. We are not connected to these sites.


Identify a fraudulent e-mail:

MaxiCoffee will never ask you for your login details, your password, or even your bank details. Beware of spelling and grammar as some fraudulent e-mails includes spelling mistakes. If you receive an e-mail asking for documents or any other kind of attachments without a proper justification, it is likely to be a phishing attempt.


If you have purchased on a fraudulent website and / or suspect to be victim of a fraud, we highly recommend the following procedure:

  • If you have shared your bank details, contact your bank as soon as possible and oppose to the payment.
  • If you have shared ID documents (ID card, passport ...), get in touch with the police.
  • Modify all of your personal passwords.
  • Make sure that your protection softwares are up to date.


You received a fraudulent e-mail ?

  • Do not answer that e-mail and do not click on any content it contains : hyperlinks, attached files, etc.
  • Flag this e-mail as spam in your mailbox.
  • Inform MaxiCoffee.com customer service at 020 3481 1654, or help@maxicoffee.com.

Introduction MaxiCoffee Solutions

Under European Regulation no.679/2016 (hereinafter, the "Regulation") and national law on personal data protection (hereinafter referred to collectively as "Privacy Law"), MaxiCoffee Solutions companies invites you to carefully read this Privacy Policy, which contains important information on the protection of your Personal Data.


The processing of your Personal Data will be based on the principles of correctness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, integrity and confidentiality, in accordance with the provisions of the Regulation.

The Data Controller, in the person of its legal representative pro tempore, may vary depending on your geographical location and the service requested. Please find below the list of the Data Controllers (hereinafter "MaxiCoffee" and/or the "Data Controller"):


  • MaxiCoffee Solutions IDF, 1 Rue Jean Mermoz, ZAC Entrée Sud, 95500 GONESSE, RCS 849 807 177;
  • MaxiCoffee Solutions OUEST, 2 Rue des Frères Sizaire de la Touche Tizon, 35230 NOYAL CHATILLON-SUR-SEICHE, RCS 339 425 738;
  • MaxiCoffee Solutions ARA, ZA Porte du Grand Lyon, ZA Champs du Périer, 01700 NEYRON, RCS 311 531 776;
  • MaxiCoffee Solutions SUD, 15 Parc d’activité Bompertuis, 13120 GARDANNE, RCS 319 099 917;
  • MaxiCoffee Solutions EST, 9001 Allée Louis Lumière, ZAC de Neuves Maisons, CAP FILEO, 54550 PONT-SAINT VINCENT, RCS 434 008 785;
  • MaxiCoffee Solutions NORD, 7 Rue du Vert Bois, 59960 NEUVILLE-EN FERRAIN, RCS 389 473 703;
  • MaxiCoffee Grands Comptes 50, Avenue Daumesnil, 75012 Paris, RCS 441 473 154;
  • DALTYS COFFEE & FOOD, 15 Parc d’activité Bompertuis, 13120 GARDANNE, RCS 403 486 509;
  • Avantages Café, 8 Rue du Parc des Vergers, 91250 TIGERY, RCS 411 204 159

In accordance with the provisions of the Regulation, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and will be the contact person for data subjects, as well as for the Data Protection Authority. The DPO can be contacted at the email address PrivacyDPO@maxicoffee.com

  • Personal details (such as name, surname, date of birth, age, gender, etc.)
  • Contact information (email, address, telephone number).
  • Geo-location and/or Internet browsing data (including IP addresses) collected via the cookies installed on your computer or mobile device (for more information please see our Cookie Policy)
  • Bank details required for the management of the business relationship
  • If a request is sent through the "Contact Us" section of MaxiCoffee website, certain Personal Data must be provided in order to enable MaxiCoffee to meet demands and hence the related fields on the registration form are marked as compulsory.
  • Data you have provided directly (so-called "Contributions") through the Social Network pages dedicated to MaxiCoffee (Facebook, Youtube, Twitter, Instagram, etc.) as likes, comments, images and in general all the content and information you may have published on the Social Network pages dedicated to products belonging to the various brands of the MaxiCoffee Group.

In accordance with the needs associated with accessing the various sections of the MaxiCoffee Websites (and without prejudice to the individual initiatives that involve the provision of specific Personal Data, for which specific privacy notices will be published on a case-to-case basis), the purposes of the processing of your Personal Data and the related legal grounds are indicated below:


  • User Details: the procedure of registering to our Website, through the creation of an account by MaxiCoffee, is aimed at allowing you to use the Website as a "Registered User" and to access a series of exclusive services offered through it. The legal basis for processing is the execution of contractual measures to which the data subject is party.
  • Purchase of products: by using our Website the customers may purchase MaxiCoffee products as a Registered User (and in this case you do not need to re-enter your Personal Data every time you purchase a product). Your Personal Data will be processed in order to manage orders and payments, and to fulfil consequent administrative and accounting obligations, as well as to contact you for any information regarding your purchases (for example, information on the status of your orders). The provision of personal data is optional, but necessary to complete the purchase order. The legal basis for the processing is the performance of the Contract to which the data subject is party.
  • Fraud prevention: in order to prevent online fraud, manage payments correctly and ensure transaction security, we may ask you for additional documentation to confirm your identity before proceeding with the order. In the event of anomalies or the need for verification, your order may be temporarily suspended and marked with the status ‘Identity verification’ in the ‘My orders’ section of the Customer Area. The legal basis for this processing is the legitimate interest of the Data Controller.
  • Management of requests: Personal Data will be collected in order to manage and answer requests about the products and initiatives of MaxiCoffee. The legal basis for this processing is the legitimate interest of the Data Controller.
  • Commercial contacts of potential customers: personal data relating to potential customers provided to us by the data subjects will be processed for the purpose of proposing the sale of products. The legal basis for the processing is the is the execution of pre-contractual measures.
  • Marketing: Subject to your specific consent, we may process your Personal Data in order to offer you commercial promotions through different channels of communication (by e-mail/SMS/APP), as well as to invite you to take part in our promotional initiatives, to participate in our events and to register for our newsletter. The legal basis of this processing is the Consent of the Data Subject, which can be withdrawn at any time.
  • Participation in competitions and give-aways: we may process your Personal Data so that you can participate in competitions and give-aways. The legal basis for this processing is the implementation of pre-contractual measures to which the data subject is party.
  • Customer Satisfaction: customers' personal data will be processed in order to allow the company to carry out surveys aimed at improving the quality of the services provided, by virtue of the legitimate interest of the data controller.
  • Analysis purposes: the Personal Data you have provided when interacting with the MaxiCoffee world and the information regarding this interaction will be collected in our database and will be used to anonymously analyse and improve the services we offer, to assess the efficiency of the activities and initiatives promoted by MaxiCoffee and to conduct statistical analysis on the composition of the database. The legal basis of the processing is the legitimate interest of the Data Controller.
  • Any other purpose for which you have provided your specific consent can be withdrawn at any time.

The provision of your Personal Data is optional. However, the failure to provide your Personal Data may result in the impossibility to use certain services (e.g. to place orders and make purchases, to participate in competitions and give-aways, to be sent the newsletter, etc.).

Your Personal Data will be processed in compliance with the provisions of current Privacy Law, with the use of electronic or automated means and manual methods, pursuing the logics strictly connected to the purposes for which the data has been collected, via databases, the electronic platforms managed by MaxiCoffee or by third parties (appointed as Data Processors), the integrated IT systems of MaxiCoffee and the aforesaid third parties, and/or websites owned or used by MaxiCoffee.


Your Data will be processed using methods that ensure the highest level of confidentiality and only by people trained and authorised to process it. The Data Controller adopts all the appropriate technical and organisational measures to ensure a level of security appropriate to the risk presented in relation to the processing.


The Personal Data will be processed mainly at the offices of the Data Controller and at the places where the Data Processors are located.

Your Personal Data may be made accessible, for the purposes stated above, to employees and partners of MaxiCoffee.


The Personal Data you provide may be transferred to the companies of the MaxiCoffee Group and/or third-party companies located within, as well as outside, the European Union/ European Economic Area. These companies carry out the aforementioned activities concerning treatments of personal data on behalf of the Data Controller and will operate as Data Processors.


The Data Controller adopts appropriate guarantees in order to provide an adequate level of protection, equivalent to the one used in EU/EEA.


The Data Controller has made a list of Data Processors, which is constantly updated and can be viewed by contacting the addresses stated in point 10 of this Privacy Policy.


Finally, your Data may be sent to the judicial authorities where necessary and in the cases provided for by law.

In order to ensure compliance with the principles of necessity and proportionality of the processing, we have defined various Personal Data storage periods for the individual purposes pursued:


  • User Details: The Customer Account will be stored for 3 years from the last contact (purchase/login).
  • Invoice data will be stored for an appropriate period of time to ensure the proper performance of the agreement and in any case for an additional 10 years for the purposes of the fulfilment of connected administrative and tax obligations.
  • Any documentation requested to confirm your identity, as part of fraud prevention activities, will be processed exclusively for the time strictly necessary to complete the security checks. Once the validation procedure has been completed, such data and documents will be deleted, unless there is a legal obligation to retain them for longer.
  • The data collected for the management of competitions and give-aways will be stored for the entire duration of the give-away and for an appropriate period of time to ensure its proper performance. This is without prejudice to the fulfilment of administrative and tax obligations for which the data storage period is provided for by law.
  • The data collected for the sending of promotional material, for which consent has been given, will be stored for 3 years from the last contact (purchase/ click on a hypertext link contained in an e-mail referring to the promoted product).?If you have not provided the above consent or answered surveys, your personal data will be made anonymous and used for statistical analysis.
  • Personal data relating to potential customers will be stored for 5 years from the date of collection, after which it will be deleted if there are no further relationship.
  • The data collected in order to manage and answer requests about the products and initiatives of the MaxiCoffee Group and the data provided when interacting with the MaxiCoffee world will be stored for the period necessary to carry out the requests and will subsequently be cancelled if there is no further contact.

You can exercise the rights set out in articles 15 et seq. of the Regulation against the Data Controller at any time, including:


  1. the right to obtain confirmation as to whether or not personal data concerning you exists, regardless of it being already recorded, and communication of such data in intelligible form;
  2. the right to withdraw the consent you have given for the purposes of the processing at any time;
  3. the right to access, rectify, erase and limit the processing and portability of your personal data;
  4. the right to object to its processing any time you wish;
  5. the right to commence proceedings before the competent supervisory Authority, if you think that the processing of your data is contrary to the laws in force.

If you wish to exercise the aforesaid rights, or you wish to have more information on the processing of your personal data, please write an email to: PrivacyDPO@maxicoffee.com or write to the registered office of the Data Controllers.