PRIVACY

Back

Newsletter Subscription

Privacy policy statement pursuant to article 13 of the Italian Legislative Decree 196/03 (D.Lgs. 196/03)

The undersigned company (illycaffè S.p.A., hereinafter also referred to as the "Company" or "illycaffè") hereby informs you that it will process the data you have provided in the form and later for the purposes listed in the following paragraphs. illycaffè may only require and process data which are instrumental to achieve the purposes of this privacy policy.

  1. Data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support). illycaffè has implemented safety measures to prevent any data loss, illegal use of data, misuse or unauthorised access. Data will be retained and processed by illycaffè in compliance with its confidentiality requirements and with the applicable local provisions in the different states in which illycaffè has its offices (in compliance with the principles of fairness, lawfulness, transparency, and protection of the confidentiality and the rights of those concerned) strictly in line with the aims set forth in this privacy policy. Data will be processed by illycaffè exclusively to achieve the aims set forth in this privacy policy. Data will be filed at illycaffè S.p.A. offices and at the appointed data processors (as well as third parties who receive data as specified in point 4 of this privacy policy). Data will be entered in databases, including IT databases. We remind you that only for technical assistance needs data may be sent to companies outside the European community who are specifically designated as data processors by committing to comply with all the requirements of European legislation.

  2. illycaffè may process data for the following purposes:

  1. to carry out advertising communications/information on products-services-initiatives of illycaffè and its partners and market research and/or interviews for the evaluation of product-services of illycaffè, all by illycaffè to the addresses that you provided in the form or other contact details provided later (please note that the sending of SMS/MMS and e-mail will also be in electronically with the help of automated tools);

  2. illycaffè may also process data to comply with the requirements pursuant to the legislation in force, regulations or EU regulations and to assert or defend the rights of the Company in a court of law; in this framework, consent is not mandatory, as such processing may also occur without the consent of data subject pursuant to article 24, point a), f) of the Legislative Decree 196/03.

  1. The provision of data and consent for the purposes under point 2, letter A of this privacy policy are optional and the lack of them could make it impossible to be subject to the activities specified in this point. In addition, if you agreed to the data processing for the purposes described in this point, you may cancel your consent at any time by sending a notice to the data processor specified in point 8 of this privacy policy, with subject “opposition to the data processing to the attention of the Data Processor, the Corporate Human Resources, Organization, Processes and IT Director”. Other cancellation-opposition procedure may be further notified.

The provision of data for the purposes under point 2, letter B of this privacy policy is necessary and the lack of them could make it impossible to be subject to the activities specified in this privacy policy.

  1. The collected and processed data may be communicated by illycaffè for the purposes described in point 2, letter B of this information to carriers / shippers, lawyers and legal advisors, public authorities, judicial bodies, for the purposes of point 2 letter A of this information data may be communicated by illycaffè to carriers / shippers. illycaffè will only communicate the personal data required for the pursuit of each purpose indicated in this information

  2. The data may be disclosed on behalf of illycaffè to all parties appointed as persons in charge of the processing by illycaffè (legal department staff, mailing and enveloping staff also external to the Company, IT staff that may also perform the role of system administrators being appointed as such in this case, staff of the internal data processor specified in point 8 of this privacy policy, consultants also external to the Company -such as IT technicians that may also perform the role of system administrators being appointed as such in this case and quality advisors- staff in charge of the website also external to the Company, interns, staff in charge of the website also external to the Company, marketing staff also external to the Company, internal auditor) and external data processor (appointed by illycaffè) also external to the Company (such as enveloping and shipping companies, IT outsourcers, marketing companies and more in general consultants performing instrumental activities such as legal and communication advisors) in addition to internal data processor specified in point 8 of this privacy policy. External data processors will process data either directly or through their providers which are in charge of data processing on behalf of illycaffè, performing the same tasks as data processors as well as the administration/maintenance of processors/servers of external data processors hosting illycaffè data. Data processors and persons in charge of processing will retain data insofar it is necessary to perform the tasks assigned by illycaffè by only performing the actions needed to implement such tasks.

  3. Data will be retained and processed by illycaffè for the time required to achieve the purposes of the processing and in compliance with the applicable regulations.

  4. The Data Controller is illycaffè S.p.A., having its registered office in via Flavia, 110 – 34147-Trieste (TS), Italy, telephone number +39.040.3890.111, fax number +39.040.3890.490, e-mail: infoprivacy@illy.com.

  5. The Data Processor that you may contact for everything relating to the use of the data, and especially to exercise within the times and by the procedures envisaged by the law the rights pursuant to art. 7 of Italian Legislative Decree 196/03 and to obtain the complete and updated list of the other Data Processors is the Corporate Human Resources, Organization, Processes and IT Director, who can be contacted for the purposes of this role at the addresses of illycaffè S.p.A. (written communications or enquiries must be addressed “to the Data Processors, the Corporate Human Resources, Organization, Processes and IT Director”, with subject “privacy”). Any changes to the Data Processor identified above or this privacy policy statement may be published on the privacy policy of the website www.illy.com. You are therefore encouraged to visit this site, while information may also still be requested by the procedures envisaged by art. 9 of D.Lgs. 196/03.

  6. Please, note that, pursuant to article 7 of the Legislative Decree 196/2003 some special rights are assigned to the holders of personal data. Rights are reported hereunder:

  1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.

  2. A data subject shall have the right to be informed

    1. of the source of the personal data;

    2. of the purposes and methods of the processing;

    3. of the logic applied to the processing, if the latter is carried out with the help of electronic means;

    4. of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);

    5. of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

  1. A data subject shall have the right to obtain

  1. updating, rectification or, where interested therein, integration of the data;

  2. erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;

  3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

  1. A data subject shall have the right to object, in whole or in part,

    1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;

    2. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

 

This privacy policy is updated as at 28/03/2017. Updates are implemented in the framework of a policy on a steady review of privacy policies. Previous versions of privacy policies may be obtained by writing to infoprivacy@illy.com.