PRIVACY

Back

Single integrated registration profile – illy sites

Privacy policy statement pursuant to article 13 of the Italian Legislative Decree 196/2003, article 5 of the “Ley Orgánica 15/1999 of 13 diciembre de Protección de Datos de Carácter Personal”, article 19 of “Bundesdatenschutzgesetz-German Federal Data Protection Act”, article 32 of the “Loi n°78-17” of 06/01/1978, article 33 of the “Wbp- Dutch Data Protection Act”, § 24 of “Datenschutzgesetz 2000 - Federal Act concerning the Protection of Personal Data”.

illycaffè S.p.A. (hereinafter also referred to as the "Company" or "illycaffè") hereby informs you that it will process the data you have provided in the form or after filling your form for the purposes listed in the following paragraphs. illycaffè may only require and process data which are instrumental to achieve the aims of this privacy policy.

  1. Data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support). illycaffè has implemented safety measures to prevent any data loss, illegal use of data, misuse or unauthorised access. Data will be retained and processed by illycaffè in compliance with its confidentiality requirements and with the applicable local provisions (i.e. in compliance with the principles of fairness, lawfulness, transparency, and protection of the confidentiality and the rights of those concerned) strictly in line with the aims set forth in this privacy policy. Data will be processed by illycaffè exclusively to achieve the aims described in this privacy policy. Data will be filed at illycaffè S.p.A. offices in Europe (Italy, Spain, Germany, Netherlands, Austria) depending on the relevant request area and at the appointed data processors (as well as third parties who receive data as independent data controllers as described in point 4 of this privacy policy). Data will be entered in databases, including IT databases.
  2. illycaffè may process your data for the following purposes:
  1. in order to access and make you enjoy the services of illycaffe websites, including interactive, provided in the Terms of Use and in any Terms of purchase contained in the various sections of the site by logging with the same credentials. In some cases it may be required to give any further information that will be processed with your consent where required; among the services there is also the Facebook “Custom Audiences” feature (for further information please refer to: https://www.facebook.com/help/381385302004628;
  2. to send advertising/information notices on products, services and initiatives of illycaffè and its partners through illycaffè; illycaffè will send such notices to the email address you provided also for newsletters (please, note that emails may also be sent electronically with the support of automated tools);
  3. to comply with the requirements pursuant to the legislation in force, regulations or EU regulations and to assert or defend illycaffè rights in the relevant jurisdiction; in this framework, consent is not mandatory, as such processing may also occur without the consent of data subjects pursuant to article 24, point a, of the Italian Legislative Decree 196/2003, article 6 of the “Ley Orgánica 15/1999 del 13 diciembre de Protección de Datos de Carácter Personal”, article 4, point 2), of the “Bundesdatenschutzgesetz-German Federal Data Protection Act”, article 7 of the “Loi no. 78-17” dated 06/01/1978, article 23 of the “Wbp- Dutch Data Protection Act”, § 8 and § 9 of “Datenschutzgesetz 2000 - Federal Act concerning the Protection of Personal Data”.
  1. Provision of data for the purposes described in point 2, letter A, of this privacy policy is not mandatory and failure to provide them makes impossible to access and enjoy the services of illycaffè websites (including the impossibility of buying in the eshop) with the same credentials. The consent for the purposes described in point 2, letter A, of this privacy policy is always optional, but the lack of it makes impossible to access and possibly enjoy the services of the illycaffè websites (including the impossibility of buying in the eshop) with the same credentials.  Provision of data for the purposes described point 2, letter B, of this privacy policy and the relative consent are not mandatory; failure to provide such data and the consent will have not consequences, except that you won’t receive any information (without any consequence on other purposes). Additionally, if you agreed to the data processing for the purposes described in point 2, letter B, of this privacy policy, you may cancel you consent at any time and without having to justify your decision (to unsubscribe) by sending a notice to the data processor specified in point 8 of this privacy policy, with “cancellation/opposition to the data processing on the sending of advertising material” as its subject to the attention of the Data Processor, the Corporate Human Resources, Organization,  Processes and IT Director”. Other cancellation-opposition procedure may be further notified.
    Data provision for the purposes described in point 2, letter C, of this privacy policy is necessary; should data not be provided, your request may not be fulfilled and relations may be truncated.
  2. Data, collected and processed for the purposes described in point 2, letter A, of this privacy policy will not be disclosed unless provision is made for special services, submitted to specific conditions and for which your explicit consent will be required where necessary. Please note that data relating to comments, photos posted and your nickname will be visible to other subscribers of the websites as well to third parties that will be able to read the comments on the websites, all in accordance with the Terms of Use. For the purposes described in point 2, letter B of this privacy policy, data will not be disclosed. For the purposes of point 2, letter C, of this privacy policy, illycaffè may disclose data to lawyers, solicitors, public authorities, the judiciary, the police, the post office (as the address is visible when sending any written material). illycaffè will only disclose data which are essential for the achievement of each of the aims of the privacy policy.
  3. Data – that are necessary to the implementation of tasks assigned by illycaffè and exclusively for the procedures that are required for the implementation of such tasks – may also be disclosed to the Company staff in charge of data processing (legal staff also external to the Company, marketing staff also external to the Company, staff in charge of the website also external to the Company - such as legal advisors, IT experts that may also perform the role of system administrators, and appointed as such, quality service staff and staff in charge of the administration of the website – IT system staff which may also be system administrators, and which are appointed as such, external relations staff also external to the Company, staff in charge of mailing and enveloping also external to the Company, internal auditors and interns) and data processors (appointed by the Company), also external to the Company (such as enveloping and shipping companies, IT outsourcers, marketing companies and more in general consultants performing instrumental activities such as legal and communication advisors) as well as the Data Processor described in point 8 of this privacy policy. External data processors will process data either directly or through employees appointed to process data on behalf of illycaffè, performing the same tasks as data processors as well as the administration/maintenance of processors/servers of external data processors hosting illycaffè data. Data processors and persons in charge of processing will retain data insofar it is necessary to perform the tasks assigned by illycaffè by only performing the actions needed to implement such tasks.
  4. Data will be retained for the time required to achieve the aims of the processing and in compliance with the applicable regulations.
  5. The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39 +39.040.3890.111, fax number +39 +39.040.3890.490, E-mail: infoprivacy@illy.com.
  6. The Data Processor that you may contact to exercise your rights – i.e. article 7 of the Italian Legislative Decree 196/2003,  articles 15 and 16 of “Ley Orgánica 15/1999 del 13 diciembre de Protección de Datos de Carácter Personal”, article 20 of the “Bundesdatenschutzgesetz-German Federal Data Protection Act”, article 40 of the “Loi no. 78-17”dated 06/01/1978, articles 35 and 36 of the “Wbp- Dutch Data Protection Act”, § 27 and § 28 of “Datenschutzgesetz 2000 - Federal Act concerning the Protection of Personal Data” – and to obtain a complete and updated list of the other data processors is the Corporate Human Resources, Organization,  Processes and IT Director, domiciled for office at illycaffè S.p.A. (any notice in writing must be sent “to the attention of the Data Processor, the Corporate Human Resources, Organization,  Processes and IT Director”, with “privacy” as its subject). Any changes in the above data processor and any other updates of this privacy policy will be published in the "privacy policy" page of the website www.illy.com. Please visit the website for further information, without prejudice for the option to require information also pursuant to article 9 of the Italian Legislative Decree 196/2003. Any query and request (including queries pursuant to article 7 of the Italian Legislative Decree 196/2003) on data processing may also be sent to “to the attention of the Data Processor, the Corporate Human Resources, Organization,  Processes and IT Director”.
  7. Please, note that, pursuant to article 7 of the Italian Legislative Decree 196/2003, articles 15 and 16 of the “Ley Orgánica 16 del 15/1999 diciembre de Protección de Datos de Carácter Personal”, article20 of the “Bundesdatenschutzgesetz-German Federal Data Protection Act”, article 40 of the “Loi no. 78-17” dated 06/01/1978, article 35 and 36 of the “Wbp- Dutch Data Protection Act”, § 27 and § 28 of “Datenschutzgesetz 2000 - Federal Act concerning the Protection of Personal Data” some special rights are assigned to the data subjects. Such rights are the following:
    1. A data subject is entitled to obtain confirmation as to whether or not personal data concerning him/her exist, regardless of their being already recorded, and communication of such data in intelligible form.
    2. A data subject is entitled to be informed
      1. of the source of the personal data;
      2. of the purposes and methods of the processing;
      3. the logic applied to the processing, if the latter is carried out with the help of electronic means;
      4. of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
      5. of the entities or categories of entities to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
    3. A data subject is entitled to obtain
      1. updating, rectification or, where interested therein, integration of the data;
      2. erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
      3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
    4. A data subject is entitled to object, in whole or in part,
      1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
      2. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

This privacy policy is updated as at 25 January 2016. This update was implemented in the framework of a policy of a steady review of privacy policies. Previous versions of privacy policy may be obtained by writing to: infoprivacy@illy.com.