Privacy & Cookies policy

Under European Regulation no.679/2016 (hereinafter, the "Regulation") and national law on personal data protection (hereinafter referred to collectively as "Privacy Law"), MaxiCoffee Online SAS invites you to carefully read this Privacy Policy, which contains important information on the protection of your Personal Data.

The processing of your Personal Data will be based on the principles of correctness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, integrity and confidentiality, in accordance with the provisions of the Regulation.

The Data Controller is MaxiCoffee Online SAS (hereinafter "MaxiCoffee" and/or the "Data Controller") with registered office in Mios (33380) – 25, Rue de Galeben, in the person of its legal representative pro tempore.

• Personal details (such as name, surname, date of birth, age, gender, etc.)
• Contact information (e-mail, address, telephone number)
• Geo-location data (including IP addresses)
• Internet browsing data (including data from the use of social media icons/login buttons - e.g., Facebook, Instagram, Twitter, LinkedIn, etc.) collected via the cookies installed on your computer or mobile device (for more information please see our Cookie Policy)
• Bank details required for the management of the business relationship
• Photographs and/or video recordings
• Data relating to your interactions with our websites, and App and/or smart coffee machines such as, by way of example but not limited to: i) data relating to your device following the download of our app and use of notifications on the publication of new contents, initiatives and updates, ii) participation to surveys, initiatives, contests, promotions, events (also through our social media channels), iii) registration of the coffee machine and/or free coupons, iv) data on the use of the coffee machine.
• Data you have provided directly (so-called "Contributions") through the Social Network pages dedicated to MaxiCoffee (Facebook, Youtube, Twitter, Instagram, etc.) as likes, comments, images and in general all the content and information you may have published on the Social Network pages dedicated to products belonging to the various brands of the MaxiCoffee Group.
• If a request is sent through the "Contact Us" section of MaxiCoffee website, certain Personal Data must be provided in order to enable MaxiCoffee to meet demands and hence the related fields on the registration form are marked as compulsory.

In accordance with the needs associated with accessing the various sections of MaxiCoffee websites (and without prejudice to the individual initiatives that involve the provision of specific Personal Data, for which specific privacy notices will be published on a case-to-case basis), the purposes of the processing of your Personal Data and the related legal grounds are indicated below:

• Registration to the website/APP: the procedure of registration, through the creation of an account, is aimed at allowing you to use the Website as a "Registered User" and to access a series of exclusive services offered through it. The provision of data is optional. The legal basis for processing is the implementation of contractual measures to which the data subject is party.
• Purchase of products: by using our website you may purchase products as a Registered User, so as you do not need to re-enter your Personal Data every time you purchase a product. Those purchase require the processing of your Personal Data. Your Personal Data will be processed in order to manage orders and payments, to fulfil consequent administrative and accounting obligations as well as to contact you for any information regarding your purchases (for example, information on the status of your orders). The provision of personal data is optional, but necessary to complete the purchase order. The legal basis for the processing is the performance of the Contract to which the data subject is party.
• Management of requests and/or initiatives: Personal Data will be collected in order to answer requests sent to us via e-mail, via inbound call, and/or via social networks such as, by way of example but not limited to, requests relating to (a) maintenance/repair/replacement of coffee machines, (b) relating to products we are selling, (c) managing participation in our initiatives (such as but not limited to, sustainability activities, games). The legal basis for this processing is the legitimate interest of the Data Controller. The services referred at letter (a) above indicated may also be provided through phone call activity. In this case, support via phone call will take place exclusively in live mode and there will be no recording of their content, except for formation purposes, the customer being free to refuse the recording of the phone call.
• Marketing: Subject to your specific consent, we may process your Personal Data in order to send you, by e-mail/SMS/APP, general and/or profiled commercial communications as well as to invite you to take part in our promotional initiatives, to participate in our events and to register for our newsletter. The legal basis of this processing is the Consent of the Data Subject, which can be withdrawn at any time.
• Participation in prize competitions and give-aways: we may process your Personal Data so that you can participate in prize competitions and give-aways. The legal basis for this processing is the implementation of contractual measures to which the data subject is party.
• Customer Satisfaction: we may send customer satisfaction questionnaires to evaluate the satisfaction of the service provided. The legal basis is the legitimate interest of the Data Controller.
• Analysis purposes: the Personal Data you have provided when interacting with the MaxiCoffee world and the information regarding this interaction will be treated to anonymously analyse and improve the services we offer, to assess the efficiency of the activities and initiatives promoted by MaxiCoffee. The legal basis of the processing is the legitimate interest of the Data Controller.
• Any other purpose for which you have provided your specific consent can be withdrawn at any time.

In accordance with the provisions of the Regulation, the Data Controller has identified and appointed a Data Protection Officer (DPO), who is responsible for monitoring compliance with the Regulation and will be the contact person for data subjects, as well as for the French Data Protection Authority, CNIL.

The DPO can be contacted at the email address PrivacyDPO@maxicoffee.com

In order to ensure compliance with the principles of necessity and proportionality of the processing, we have defined various Personal Data storage periods for the individual purposes described;

• Registration to the website/APP: The Personal Data you have provided in order to register to the Website/APP will be stored for 3 years from the last contact (purchase/login). For customers with an active subscription, the account will be active for as long as the machine is used. If the machine is not used for 36 months, your account will be deleted and the data collected by the machine will be anonymised.
• Invoice data will be stored for an appropriate period to ensure the proper performance of the agreement and in any case for an additional 10 years for the purposes of the fulfilment of connected administrative and tax obligations.
• The data collected for the management of prize competitions and give-aways will be stored for the entire duration of the give-away and for an appropriate period to ensure its proper performance. This is without prejudice to the fulfilment of administrative and tax obligations for which the data storage period is provided for by law.
• The data collected for the sending of promotional communication , for which consent has been given, will be stored for 3 years from the last contact (purchase/ click on a hypertext link contained in an e-mail referring to the promoted product).
• If you have not provided the above consent, your personal data will be made anonymous and used for statistical analysis.
• Data collected for Customer Satisfaction purposes will be processed for the period considered strictly necessary to achieve these purposes, after that data will be anonymised.
• The data collected in order to manage and answer requests about the products and initiatives of the various brands of the MaxiCoffee Group and the data provided when interacting with the MaxiCoffee world will be stored for the period necessary to carry out the requests and will subsequently be cancelled if there is no further contact, except for administrative requirements (for instance, a request concerning a complaint will be stored beyond the period needed to solve it, in order to fulfil administrative requirements).

The provision of your Personal Data, depending on the purpose pursued, could have optional or obligatory nature. When the nature of the provision is mandatory it means that failure to provide the required Personal Data may affect the possibility to use some services (e.g. to place orders and purchases it is necessary to provide your address, failure to provide this information does not allow you to complete the order/ purchase). When the nature of the provision is optional you will have the possibility to take advantage of basic services but not additional services (e.g., failure to provide consent to receive promotional communications will not affect the completion of an order/purchase but will result in the inability to stay updated on our promotions and initiatives).

Your Personal Data will be processed in compliance with the provisions of current Privacy Law with the use of electronic or automated means and manual methods, including Artificial Intelligence (AI) systems, strictly following the purposes for which the data has been collected, via databases, the electronic platforms managed by MaxiCoffee or by third parties (appointed as Data Processors), the integrated IT systems of MaxiCoffee and the aforesaid third parties, and/or websites owned or used by MaxiCoffee.

Your Data will be processed using methods that ensure the highest level of confidentiality and only by people trained and authorised to process it. The Data Controller adopts all the appropriate technical and organisational measures to ensure a level of security appropriate to the risk presented in relation to the processing.

The Personal Data will be processed mainly at the offices of the Data Controller and at the places where the Data Processors are located.

Your Personal Data may be processed by companies appointed as Data Processors to carry out activities related to the processing of Personal Data on behalf of MaxiCoffee. The Data Controller has drawn up a list of Data Processors, which is constantly updated and which it makes available to you by contacting it at the addresses given in point 13 of this Notice.

Your Personal Data may be made accessible, for the purposes stated above, to employees and partners of MaxiCoffee.

The Personal Data you provide may be transferred to the companies of the MaxiCoffee Group and/or third-party companies located within, as well as outside, the European Union/ European Economic Area. These companies carry out the aforementioned activities concerning treatments of personal data on behalf of the Data Controller and will operate as Data Processors.

Transfers of personal data to MaxiCoffee Group Companies and/or third-party companies located outside the EU/EEA are made in accordance with Chapter V of the Gdpr. In particular, they are based on Standard Contractual Clauses (SCC) approved by the European Commission. To obtain copies of these SCCs please contact the Controller at the addresses listed in Section 13 of this Privacy Policy.

Finally, your Data may be sent to the judicial authorities where necessary and in the cases provided for by law.

MaxiCoffee does not normally collect the Personal Data of minors, nor does it deliberately establish any communication with them. For this reason, we invite parents to actively monitor the online activities of their children under sixteen years of age.

You may at any time exercise your rights under Articles 15 et seq. of the Regulation against the Data Controller, including:

• the right to obtain confirmation as to whether or not personal data concerning you exists, regardless of it being already recorded, and communication of such data in intelligible form;
• the right to withdraw the consent you have given for the purposes of the processing at any time;
• the right to access, rectify, erase and limit the processing and portability of your personal data;
• the right to object to its processing any time you wish.
• the right to commence proceedings before the competent supervisory Authority, if you think that the processing of your data is contrary to the laws in force.

If you wish to exercise the rights of data subjects, or you wish to have more information on the processing of your personal data, please write an e-mail to: PrivacyDPO@maxicoffee.com or write to the registered office of the Data Controller in Mios (33380), 25 Rue de Galeben.

This policy may be modified or amended at any time in the event of legal or jurisprudential developments, decisions and recommendations from the CNIL or practices.

This Privacy Policy is updated in April 2025

In accordance with Article 13 of EU Regulation 679/2016 on the protection of personal data (hereinafter the 'Regulation’ or 'General Data Protection Regulation'), MaxiCoffee Online, in its capacity as Data Controller, wishes to inform you that this website uses 'cookies’ and similar technologies to improve your experience on its websites (including mobile versions) and its applications and to recognise you when you next visit. Cookies and similar technologies can perform certain functions and personalise content. We ask that you read this Cookie Policy where we provide all the information concerning the use of these technologies.

Cookies are short text files that are automatically downloaded to the user's browser or other device, with their consent (if required), when they browse our websites (including mobile versions) or use our applications. This allows us to keep track of each user's choices on each subsequent visit and thus offer a more efficient and personalised experience.

Some cookies collect information to protect our website, other cookies provide information to help us improve its performance, while others are used to customise the content. Each cookie performs a specific action and, depending on the function and purpose of its use, it can be divided into technical, analytical and tracking cookies. When you browse this website, you may install first-party or third-party cookies. The term 'first-party cookies’ refers to cookies that are installed and managed personally by the data controller, while 'third-party’ cookies are installed by third parties.

If you have any questions about the protection of your Personal Data, you can contact our DPO Group by writing to: privacydpo@maxicoffee.com .

Cookies described in this section are sent directly from this website and may be first-party or third-party cookies. These cookies are installed for the purposes detailed for the different categories of cookies listed below:

Technical Cookies

These cookies are installed for the purpose of optimising and improving our website or improving its functions and performance. This type of cookie is used, for example, to save user preferences for the use of cookies on the website. Technical cookies are not used for other purposes and can be managed by MaxiCoffee or third parties. These categories of cookies can be used without the user's prior and express consent. These cookies are activated automatically.

Analytical or Statistical Cookies

This category includes 'performance or analytical cookies’ . These are cookies that collect information about the number of users who visit a website and the most visited pages/sections of the website (for example, from which pages we receive problem reports). These cookies provide information to the data controller on the functioning of its websites/applications and may be used with the user's consent.

Functional Cookies

These cookies allow users to browse a website according to selected criteria (e.g. language, text characters, browser type) in order to improve the service offered and may be used with the user's consent.

Advertising Cookies

Our site may contain cookies issued by third parties (targeted advertising providers, for example), enabling them to collect browsing information on the devices used to browse our site or to determine the advertising content that may correspond to centres of interest based on previous browsing from the device concerned. Refusing advertising cookies will not stop advertising on your device. It will only result in you seeing advertising that does not reflect your interests or preferences.

Our aim is to show you the most relevant adverts possible. To achieve this, cookies are used to determine in real time which advert to show on a device, based on your recent browsing on one or more websites or applications. Your interest in the advertising content displayed on your device when you visit a website often determines the advertising resources of the site, enabling it to operate its services, which are often provided to users free of charge. You probably prefer to see adverts that correspond to your interests rather than adverts that do not interest you. Similarly, advertisers who want to see their adverts broadcast want to publish their offers to users who are most likely to be interested in them.

Tracking cookies store information about users' preferences as they browse and are installed to create user profiles in order to provide targeted services or content, display content or offer commercial initiatives based on the sections of our websites that have proven most relevant to users and their interests.

Tracking cookies may be used with the user's consent. Consent is obtained by means of a banner, displayed on the user's first visit, by clicking on 'Manage your preferences’.

Our websites and applications also use technologies similar to cookies, called 'tracking’ technologies. These allow us to understand what content seems most interesting to our users and whether a particular offer may interest them.

The information acquired through tracking technologies can be used, with the user's consent, to show the products and commercial offers that are most relevant to their preferences. Consent is obtained through a banner, displayed on the user's first visit, by clicking on 'Manage your preferences’.

Third-party cookies are installed by a third-party website, outside the website where the user is browsing, in order to provide targeted services or content.

Google cookies: As part of our website's use of Google services, your data will be processed in compliance with https://business.safety.google/privacy/ .

This website also uses social media buttons, i.e. digital buttons (or icons) that we use to provide a direct link to our social media pages (e.g. Facebook, YouTube, Instagram, Twitter) or for user authentication or registration (e.g. Google, Amazon, Facebook) which may set third-party cookies, i.e. cookies from the social media networks to which they refer.

The social media icons/buttons on our website may also provide us with information about the user's browsing experience and may be used by MaxiCoffee for targeting purposes for social media marketing (e.g. allowing users to be contacted by MaxiCoffee advertising on their social accounts).

Third-party cookies can only be used with the prior consent of the user, which is obtained via the banner as detailed above. Users can revoke their consent at any time by disabling cookies, following the steps detailed in the paragraph 'How to manage cookies’ below.

Cookies can be:

• Temporary or Session Cookies: these are used to store temporary information and to link actions performed during a specific session and are deleted from the user's computer once the browser is closed.
• Permanent or Persistent Cookies: these are used to store information such as access names and passwords so that users do not need to enter this information each time they visit a particular website. These cookies are permanently stored on users' computers after their browser has been closed.

The duration depends on the expiry set when the cookie was installed. To find out the duration of each cookie, you can refer to our cookie page, which also indicates the name, category and purpose of each cookie.

Users can manage their cookie preferences:

a.  Via our website, in the cookie manager section - which allows users to select the type of cookies (including third-party partner cookies) that can be installed, to browse the list of cookies and similar technologies used on the website or to delete them.

b.  Via their browser and prevent, for example, non-partner third parties from installing cookies. In this case, the procedures for managing cookie installation authorisations and cookie deletion vary depending on the browser used. You can find more information on how to manage cookies on your browser at the following address:

If services are provided by third parties (not partners), users can also exercise their right to oppose tracking by using the information provided in the privacy policies of these third parties.

Data subjects may exercise the rights granted to them under the applicable privacy regulations, in accordance with Articles 15-22 of the GDPR. For any information/request regarding the processing of your personal data and to exercise any of the rights granted to you under Articles 15-22 of the GDPR, you can contact our DPO Group at privacydpo@maxicoffee.com .

Settings on a Cookie Management Platform

You can decide to opt out of behavioural advertising by using the tool provided on this website . Cookies stored when using share buttons are also included in this platform.

This cookie policy may be amended from time to time. This may be the case, for example, when it is necessary to respond to new sectoral regulations, to update or provide new services, or even when implementing new technologies. Users are therefore invited to frequently read this cookie policy in order to check for updates or changes.

At MaxiCoffee, we take your online security very seriously. Full details about how we protect the information you provide us are given below.

Our website uses the latest technologies such as 3D Secure to provide a safe, secure site for electronic commerce transactions, including secure socket layer (SSL) technology for payment transactions. SSL is a method for establishing a link between one computer and another safe one. Banks also use these links for online banking. You will recognise an SSL link by the little padlock appearing on the lower right in the menu bar of your browser and at the address bar beginning with "https" instead of "http". In this case the "S" stands for "secure".

E-mail correspondence is not a secure means of communication as it is a free text format that cannot be encrypted. Although we use advanced security measures to protect your information against loss, misuse and alterations, because of the nature of the internet, we cannot guarantee the security of the information provided to us over the internet and cannot be held responsible for this.

We have identified several frauders that may use our identity, making you think we are asking for personal data: email address, phone number, bank details, etc.

Some sites, hosted in France and abroad such as mesaromesduportugal.com, use graphic interface and a visual identity similar to those of MaxiCoffee.com, to encourage you to place an order. We are not connected to these sites .

IDENTIFY A FRAUDULENT E-MAIL :

MaxiCoffee will never ask you for your login details, your password, or even your bank details. Beware of spelling and grammar as some fraudulent e-mails includes spelling mistakes. If you receive an e-mail asking for documents or any other kind of attachments without a proper justification, it is likely to be a phishing attempt.

If you have purchased on a fraudulent website and / or suspect to be victim of a fraud, we highly recommend the following procedure:
• If you have shared your bank details, contact your bank as soon as possible and oppose to the payment.
• If you have shared ID documents (ID card, passport ...), get in touch with the police.
• Modify all of your personal passwords.
• Make sure that your protection softwares are up to date.

You received a fraudulent e-mail ?

• Do not answer that e-mail and do not click on any content it contains : hyperlinks, attached files, etc.
• Flag this e-mail as spam in your mailbox.
• Inform MaxiCoffee.com customer service at 020 3481 1654, or help@maxicoffee.com .