PRIVACY

Back

illy Locator Privacy Policy – Report an illy Bar

PRIVACY POLICY STATEMENT PURSUANT TO ARTICLE 13 OF THE LEGISLATIVE DECREE 196/03
illycaffè S.p.A. (hereinafter referred to as the "Company", "illycaffè" or "illy") hereby informs you that personal data will be processed as specified hereunder, in line with the following aims. Therefore, this privacy policy complies with the information requirement pursuant to article 13 of the Legislative Decree 196/03. illycaffè may only require and process data which are instrumental to achieve the aims of this privacy policy.
 

  1. illycaffè will process data on paper, manually, using IT systems, retaining them either on IT media or on paper. illycaffè has implemented safety measures to prevent any data loss, illegal use of data, misuse or unauthorised access. Data will be retained and processed by illycaffè in compliance with its confidentiality requirements and with the applicable provisions (in compliance with the principles of fairness, lawfulness, transparency, and confidentiality and the rights of those concerned) strictly in line with the aims of this privacy policy. illycaffè will process data exclusively to achieve the aims set forth in this privacy policy. Data will be retained at the premises of illycaffè S.p.A. (including foreign subsidiaries located in the European Union where data will be treated in compliance with the applicable local regulations) and by appointed data processors (as well as of third parties who receive data as specified in point 4 of this privacy policy). Data will be also retained in IT databases.
  2. Data will be processed by illycaffè (which will only process data as far as they are needed to achieve each of the following aims):A) to include coffee shops and bars (and the relevant data) in the illylocator in illycaffè websites; please, note that data processing does not require the consent of the party involved pursuant to article 24, points c, d of the Legislative Decree 196/03;
    B) illycaffè may process data in compliance with any requirements of law or any applicable national or EU regulation or to assert or defend any right of illycaffè in any court or other organisations. Please, note that data processing does not require the consent of the party involved pursuant to article 24, points a, f of the Legislative Decree 196/03;
    C) to get in touch with you in case of doubt on the actual data and with a view to identifying you to protect illycaffè, if needed.
  3. Data may be provided on a voluntary basis for the aims specified in point 2, letter A of this privacy policy. However, should data not be provided, the data may not be included in the illylocator. To this end, data specified in point 2, letter B of this privacy policy (i.e. personal data and addresses) are necessary and, should these data not be provided, the data may not be included in the illylocator. Data that may be required to achieve the aims specified in point 2, letter C, of this privacy policy are provided on a voluntary basis . However, should these data not be provided and the consent withheld, such data may not be included in the illylocator.
  4. Data concerning coffee shops and bars will be disclosed through the Internet, in particular through illylocator. Data on data providers will not be disclosed, but they may be disclosed (as for data on the coffee shops and bars) by illycaffè, if needed, in line with the aims specified in point 2, letter B of this privacy policy to public authorities, courts, the police, couriers/shippers, post offices, legal advisors/lawyers and in line with the aims specified in point 2, letter C of this privacy policy to courts, the police, couriers/shippers, post offices, legal advisors/lawyers.
  5. The data may be disclosed on behalf of illycaffè to all parties appointed as persons in charge of the processing by illycaffè (managers, administrative staff, staff in charge of mailing and packaging, including outsourced staff, IT staff that may also perform the role of system administrators, assistants of the data processors, as specified in point 8 of this privacy policy, IT experts that may also perform the role of system administrators including outsourcers, advisors including outsoucers – such as quality advisors and legal advisors - interns, staff in charge of the administration of the web site, including outsourcers, marketing staff, including outsourcers, internal auditors, assistants/employees of outsourcers, as specified herein) and to any other subject appointed as both internal and external data processors (appointed by illycaffè). External data controllers (enveloping and mailing companies, IT outsourcing companies, marketing companies, call centres and companies carrying out studies which are instrumental to illycaffè business) will process data either directly or through their assistants/staff in charge of data processing on behalf of illycaffè, performing the same tasks as the external data controllers appointed by illycaffè as well as the administration and maintenance of processing systems/servers of such external data controllers containing illycaffè data. Data processors and persons in charge of processing will retain data insofar it is necessary to perform the tasks assigned by illycaffè by only performing the actions needed to implement such tasks.
  6. Data will be retained for the time required to achieve the aims of the processing and in compliance with the applicable regulations.
  7. The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39.040.3890.111, fax number +39.040.3890.490, E-mail: infoprivacy@illy.com.
  8. The Data Processor that you may contact on any issue concerning data processing, in particular the rights described in article 7 of  the Legislative Decree 196/03, and to obtain a complete and updated list of other data processors is the IT Systems and Process Organisation Manager, domiciled for office at illycaffè S.p.A. (any notice in writing must be sent “to the attention of the data processor, the IT Systems and Process Organisation Manager”, with “privacy” as its subject). Any changes in the above data processor and any other updates of this privacy policy will be published in the "privacy policy" page of the website www.illy.com. Therefore, please visit the website, without prejudice for the option to require information also pursuant to article 9 of the Legislative Decree 196/03. Any query and request (including queries pursuant to article 7 of the Legislative Decree 196/03) on data processing may also be sent to infoprivacy@illy.com “to the attention of the Data Processor, the IT Systems and Process Organisation Manager”.
  9. Under section 7 of the Legislative Decree 196/03, data subjects are entitled to the following rights. Such rights are the following:
    1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
    2. A data subject shall have the right to be informed
      a) of the source of the personal data;
      b) of the purposes and methods of the processing;
      c) of the logic applied to the processing, if the latter is carried out with the help of electronic means;
      d) of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
      e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
    3. A data subject shall have the right to obtain
      a) updating, rectification or, where interested therein, integration of the data;
      b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
      c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
    4. A data subject shall have the right to object, in whole or in part,
      a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
      b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
  10. If data on coffee shops or bars are disclosed by a subject other than the coffee shop or bar owner, such subject is responsible for the notification and the actual contents of data.


This privacy policy is updated as at 28 February 2012. This update was implemented in the framework of steady review of privacy policies. Previous versions of privacy policies may be obtained by writing to infoprivacy@illy.com