PRIVACY

Back

Policy Privacy - Why the Present Document

The present document describes how personal data of users are processed in this website. Data are processed in compliance with lawfulness and fairness requirements and with the applicable regulations principles of need, fairness, lawfulness, transparency and confidentiality) strictly in line with the aims set forth in this privacy policy.

Personal data are processed by illycaffè S.p.A. (hereinafter referred to as "illycaffè" or the "Company") also building on technology innovation with a view to minimizing – with proper prevention measures – the risk of destruction or loss, including accidental loss, unauthorised access of data or processing actions which are illegal or incompatible with the aims for which data have been collected. Data will only be processed to achieve the aims described in this privacy policy and in other policies notified to users as their data are collected.

Data are retained and processed for the time required to achieve the aims of the processing and in compliance with any applicable regulations. Data may also filed in databases, including IT databases.

This privacy policy is also intended as a summary notice, as required in article 13 of the Italian Legislative Decree no. 196 dated 30 June 2003 (Italian  law on the processing of personal data, transposing EU directive 95/46/EC), to users of web services of this website to protect personal data that may be accessed electronically on:

www.illy.com

the opening page of this website.

This privacy policy is strictly referred  to the present website, not for other websites that users may access by clicking on the relevant links. These websites are independent data controllers (save as for the Company websites, such as the e-shop) and therefore reference must be made to the relevant policy.

This privacy policy is also based on the recommendation n. 2/2001 that the European Data Protection Authorities – i.e. members of the Working Group set up in line with article 29 of the directive 95/46/EC – adopted on 17 May 2011 to identify a series of minimum standards on online collection of personal data, in particular procedures, time limits and nature of data. Data controller are required to provide users with the relevant information when they visit their web pages irrespective of the aims of the access.

The server hosting the website is located at: Engineering.IT - Via Carlo Viola 76  - 11026 Pont Saint Martin (AO) Italy.

The server on which reside some interactive services (photos, blogs, comments, ratings, ....) is at the Equinix data center Laarderhoogtweg 57 Amsterdam, Netherlands 1101 EB, NL.

Besides the place where the server is located, data may be processed at the headquarters of illycaffè or at the headquarters of the data processors that may be appointed by illycaffè (as well as third parties that may receive data as independent data controllers and which are listed in this privacy policy or in the relevant policies of this website).

Please, read all relevant privacy policies in this website.

Type of processed data and processing procedures

Navigation Data

IT systems and software procedures of this website, in the framework of their regular operation, acquires some personal data whose transfer is implicit in the use of Internet communication protocols.

These data are not collected with a view to linking them to their holders. However, these are data that, by their very nature, with processing and cross-reference with data of third parties, may identify users.

This data category includes IP addresses or domain names of computers of users visiting the website, URI (Uniform Resource Identifier) addresses of required resources, the time of the request, the method used to send the request to the server, the size of the obtained file, the numeric code on the reply status of the server (sent, error, etc.) and other requirements of the operative system and the IT environment of users.

These data are used by illycaffè with the exclusive aim of collecting anonymous statistical information on the website use and  to supervise its smooth operation, and they are deleted immediately after processing. Data may be used to determine any liability in the event of IT crimes against the website or, in general, against the Company.

Data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support).

Cookies

Definition of cookies

Cookies are small text files that are sent to your computer.
The site in question uses the following types of cookies:

  1. Technical session cookies

So-called session cookies are solely used for transmitting session identifying data in the form of numbers randomly generated by the server. These cookies are necessary to ensure secure and efficient site browsing.

Session cookies are used in this site precisely to ensure maximum user privacy during browsing as they do not permit acquisition of user’s personal details that would otherwise permit user identification and recognition. These cookies are processed with electronic means.

  1. Additional technical cookies

 illycaffè uses some technical cookies:

 - cookie of agreement: it is inserted to record the consent to the use of cookies analytics and / or profiling. You are free to delete cookies from your computer.

 - cookie shopping basket: it is used to fill the cart in shopping online.

 - additional technical cookies. There are other technical cookies essential for the proper operation of the website. These cookies allow you to provide the services requested by users and to browse the site using its best performance. This type of cookie cannot be disabled because it is necessary for the proper operation of the site.

  1. Analytic cookies

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States . Google (Data Controller) will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

For further information please refer to http://www.google.com/policies/privacy/.

This website also uses SESSIONCAM always in order to collect anonymous information about the pages visited by users and any other actions that users can make on these pages. It does not detect personal information about the user, but only data anonymously. The collection of this data is to improve the browsing experience.

For further information please refer to http://www.sessioncam.com/privacy-policy-cookies/.

  1. Profiling/advertising cookie of third parties

These cookies collect information about your browsing habits in order to offer advertising that is relevant and targeted to your interests. Your personal information will not be tracked, but you should visit the site http://www.youronlinechoices.com/it/ for more information. Removing these cookies will not be lost any functionality

Third parties are Data Controller, please refer to their privacy policy, below there is a list of the third parties:

OPTIMIZELY form more information visit https://www.optimizely.com/privacy/

33ACROSS form more information visit http://www.33across.com/privacy-policy/

DOUBLECLICK form more information visit http://www.google.com/policies/privacy/

QUANTCAST form more information visit https://www.quantcast.com/how-we-do-it/consumer-choice/privacy-policy/

MEDIAMIND form more information visit http://origin.www.mediamind.com/privacy-policy

NETSEER form more information visit http://www.netseer.com/privacy-policy/

illycaffè’s cookies are processed with electronic means.

How to delete Cookies

Most browsers allow you to reject/accept cookies. Below we present some practical information to disable cookies on major web browsers

Chrome:

  1. Select the top right icon to open the personalization dropdown menu
  2. Select More tools.
  3. Select Clear browsing data.
  4. In the box that appears, select “Cookies and other site and plug-in data,” and "Cached images and files.”
  5. On the menu box at the top, select "beginning of time" to delete everything.
  6. Select Clear browsing data.

Mozilla Firefox

  1. Go to 'Tools' in the menu bar
  2. Click on 'Options'
  3. Click on 'Privacy Tab'
  4. Click on "Clear Now"
  5. Select "Cookies"
  6. Click on "Clear Private Data Now"

Internet Explorer

  1. Select “Tools”
  2. Select “Internet Properties”
  3. In “General” tab select “Delete…”
  4. Select the option “Cookie”
  5. Select “Delete”

Safari

  1. Click Safari then Preferences. Click on 'Privacy.'
  2. Click on 'Details.'
  3. You will see a list of websites that store cookies. You can remove single sites by clicking the 'Remove' button and selecting a site. If you want clear all cookies, click 'Remove All.'
  4. When you have finished removing sites, click 'Done.'

 

How to browse without cookies


Google Chrome

  1. Select the top right icon to open the personalization dropdown menu
  2. Select “New Incognito Window”

Mozilla Firefox

  1. Select the top right icon to open the personalization dropdown menu
  2. Select “Select New Private Window”

Internet Explorer

  1. Select “Tools”
  2. Select “Safety”
  3. Select “InPrivate Browsing”

Safari

  1. Select the Gear icon to open the personalization menu
  2. Select “Private Browsing...”
  3. Click OK

Data that users provide on a voluntary basis

As for specific data collected with relevant forms (i.e. navigation forms), reference is hereby made to the relevant forms and the relevant privacy policies.

The optional, explicit and voluntary sending of emails to the addresses listed on the website (if an email address is reported instead of a form that must filled out, including references to the relevant privacy policies) requires illycaffè to acquire the sender's address for the relevant reply as well as any other personal data included  in the email (or in the relevant attachments) or in the relevant forms. In this event (email only without forms that must filled out, including references to the relevant privacy policies), provision of data is not mandatory. However, should data or the relevant email address not be provided, the relevant request cannot be fulfilled. By sending an email, the sender authorises illycaffè to process data with a view to fulfilling the relevant requests.

For any request for materials, illycaffè may disclose the relevant data for the delivery to the mail /courier companies.

illycaffè may process data, whether on paper or on IT support, both manually and with other IT or electronic means.

 

Data Controller and Data Processor and Rights of users

The Data Controller is illycaffè S.p.A, having its registered office in via Flavia 110, in Trieste, ph. +39.040.3890.111, fax +39.040.3890.490.

The Data Processor whom you can contact for all matters concerning data processing, in particular in order to exercise your rights pursuant to art. 7 of D.Lgs. 196/2003 in accordance with the procedures and timeframes set by law, and to obtain a complete and current listing of all other Data Processors is the Corporate Human Resources, Organization,  Processes and IT Director, whom you can contact for this purpose at illycaffè’s offices.

For any further information, please write to: infoprivacy@illy.com, reporting in the subject "privacy" to the attention of the Data Processor.

Section 7 of D.Lgs. 196/2003 - Right to Access Personal Data and Other Rights

  1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
  2. A data subject shall have the right to be informed
    1. of the source of the personal data;
    2. of the purposes and methods of the processing;
    3. of the logic applied to the processing, if the latter is carried out with the help of electronic means;
    4. of the identification data concerning data controller, data processors and the representative designated as per Section 5(2); 
    5. of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
  3. A data subject shall have the right to obtain
    1. updating, rectification or, where interested therein, integration of the data;
    2. erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
    3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
  4. A data subject shall have the right to object, in whole or in part,
    1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
    2. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

 

Notice and Disclosure Scope

No data from the web service (i.e. the above navigation data) may be notified or disclosed (except for notification to the judiciary or the police, if required).

As for processing based on the relevant forms in the website (i.e. registration), reference is hereby made to the relevant forms and any applicable rules.

For any other processing, data provided by users are disclosed (and processed on behalf of illycaffè S.p.A.) to persons  in charge of processing appointed by illycaffè S.p.A. (administrative staff, staff in charge of external relations, other staff described in the relevant privacy policies, IT staff that may also be system managers, IT experts, also external to the Company that may also be system managers, members, agents, marketing staff also external to the Company, staff of the enveloping and mailing department, staff of the Data Processors processing data for the same purposes of the Data Processor on behalf of illycaffè S.p.A., staff of the Internet website administration, also external to the Company, attorneys, also external to the Company, staff of the legal office). Data may also be disclosed and processed by the Data Processors appointed by illycaffè S.p.A. (including outsourcers in charge of mailing, marketing, administration and maintenance of servers, website administration). These external companies may also process data using their staff in charge of data processing on behalf of illycaffè and administration and management of processors/serves of the outsourcers, that may host illycaffè data.

Persons in charge and Data Processors may process data only insofar the processing is instrumental to implement the tasks assigned by illycaffè, exclusively for the activities which are necessary to such end.

If needed, illycaffè may disclose data to the judiciary or to the police or to any other organisation requiring them pursuant to the law, the regulations in force or EU regulations or to defend any right in the appropriate jurisdiction.

Option to provide data and processing procedures

For a complete information on the treatment of the data by illycaffè, we invite you to take vision of all the information contained within the various areas of application of the data and all sections of this privacy policy.

 

Specific Notices

As already reported, this website includes other specific summary privacy policies in pages on services on request. Reference is hereby made to such privacy policies integrating this privacy policy.

This privacy policy is updated as at 29 May 2015. Updates are implemented in the framework of a policy on a steady review of privacy policies and they will be loaded on this page. Previous versions of privacy policies may be obtained by writing to infoprivacy@illy.com.