illycaffè France s.a.s. (hereinafter also referred to as the "Company" or “illycaffè France Belux”) hereby informs you (according to you to register to the site and shop and defining you also as "user" or "data subject") the purposes and procedures of data processing (provided by you and/or as a result of processing by the Company) of which will be hold. If you purchase and register as a legal representative of a firm/company/organization, per user or data subject shall be considered the firm /company/organization represented by you (which will be the subject recorded and will purchase) and your data will be processed by illycaffè France Belux only to identify you as the legal representative and for the purposes specified in point 2 letter A, B, C, considering the consent to the processing of data provided (through you) by the firm/company/organization that you represent.
Please note that your will indicate only your data and/or data of the firm/company/institution represented by you.
illycaffè France Belux may process data for the following purposes:
For the purposes described in point 2 letter B and C of this information, the processing can be carried out without the consent of data subjects. Therefore, this consent is not required.
The data will not be disclosed to third parties by illycaffè France Belux for the purposes specified in point 2 letter A of this information. The data may be communicated by illycaffè France Belux for the purposes specified in point 2 letter B of this information (communicating only data that are necessary for the pursuit of these purposes) both in France and abroad to: banks for payments, carriers and forwarding agents, post offices, distributors, companies (including foreign) that contracts could be sold as provided in the contract of purchase (in which case it will be, with the assignment of the contract, including the transfer of data relating to the contract and its implementation and management), lawyers and legal consultants, companies audit where no appointed as data processor. For the purposes specified in point 2 letter B and C of this information, data may be communicated in France and abroad (by communicating only the data that are necessary for the pursuit of these purposes) by illycaffè France Belux to judicial authorities, tax police and public security and public bodies if there is an obligation to this disclosure, also to law firms and legal advisers and to post offices (being able to see the address for sending any written notices). The data may be disclosed on behalf of illycaffè France Belux, each for own role, to all subjects delegated by illycaffè France Belux (administrative staff, transport and correspondence staff, including external to the Company, marketing staff and site management staff also external to the Company, IT technicians and IT staff that can also carry out tasks of system administrators, public relations staff, legal department staff, members of Board and Statutory Auditors, internal auditor, trainees, freelancers and consultants-employees also external to the Company acting under the direct responsibility of the Company, such as It technicians that can also carry out tasks of system administrators, quality control consultants, legal consultants and auditors, staff of internal and external Data processors) and to internal and external Data processors (companies-professional studies who perform instrumental activities of illycaffè France Belux such as marketing activities, shipping and enveloping or call center activities, audit of accounts and management public relationships, including information technology outsourcing company based in other states). The list of Data Processors is always available by contacting the Data Controller.
Data will be retained by illycaffè France Belux for the entire period necessary for the pursuit of the purposes contained in this information. The data retention period is as follows:
in any case, all data may be retained for a period necessary to assert or defend a company right according to French and European regulations.
The Data Controller is the undersigned company illycaffè France s.a.s. located in Immeuble Imagine 20-26 bld du Parc, 92200 Neuilly/Sein, telephone +33 1 41438800, nr. di fax: +33 1 41438801, e-mail: firstname.lastname@example.org.
We inform you that the GDPR provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to exercising the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.
The data subject can always lodge a complaint with the French Data Protection Authority, whose references can be found on the website https://www.cnil.fr/
The legal basis is provided by the fulfilment of legal obligations (French and European laws) as well as the legitimate interests of the Data Controller in the customer-supplier relationship. Furthermore, for the purposes for which consent is provided, the legal basis is the consent itself.
We remind you that only for technical assistance needs data may be sent to companies outside the European community who are specifically designated as data processors by committing to comply with all the requirements of European legislation. also by signing the appropriate Contractual Clauses indicated by the Data Protection Authority; the data are only a copy of those contained in the European servers and the copy of the same is always available at illycaffè S.p.A..
N.B. The consent can only be given by persons over 16 years, if the subject is under 16, he cannot use what is provided for in the purposes for which consent is required (e.g. receiving commercial communication, profiling, ...).