Policy privacy for the registration form of your iperespresso machine

Privacy policy pursuant to Regulation (EU) 2016/679 (GDPR) and national legislation in force in UK (Data Protection Act 2018)

1.   General information

illycaffè UK Limited (hereinafter, also “illycaffè UK”) inform you (hereinafter, also referring to you as the “user”) that it will process the personal data you have provided for the purposes illustrated below. Only the data necessary for the purposes referred to in this policy will be requested and processed.

2.   Purposes and legal basis

The data will be processed by illycaffè UK:

A.    to register your Iperespresso machine and to benefit from the services dedicated to it; for this purpose the legal basis is the consent;

B.    to fulfill an obligation established by law, by a regulation or by EU legislation (for this purpose the legal basis is the fulfillment of legal obligations) and for legitimate interests such as to assert or defend an illycaffè UK rights (for this purpose the legal basis is the pursuit of legitimate interests).

3.   Mandatory provision of data

The provision of data for the purposes indicated in point 2(A) and consent are optional; failure to provision and consent may make it impossible to register the machine and therefore to use the services dedicated to it. The provision of data is necessary for the purposes indicated in point 2(B) and therefore the failure to provision make it impossible to register the machine and therefore to use the services dedicated to it.

4.   Data addressee categories

The data collected for the purposes indicated in point 2(A) may be communicated by illycaffè UK to the assistance centers and customer service in the country of origin of the registration.

The data may be disclosed to lawyers or legal consultants, public bodies, judicial bodies, police forces and post offices (which can see the address for sending any written communications) for the purposes indicated in point 2 (B) of this policy.

The data may be disclosed on behalf of illycaffè UK, each for own role, to all subjects delegated by illycaffè UK [technical support staff (also external to the Company), sales office staff, public relations staff (also external to the Company), administrative staff, the IT staff (also external to the Company, who can also carry out system administration duties being appointed as such in this case), consultants (also external to the Company) - such as IT technicians who can also carry out system administration duties being appointed as such in this case or legal consultants - trainees, website management staff (also external to the Company), call center staff (also external to the Company), enveloping and shipping staff (also external to the Company), legal procedures employees (also external to the Company), staff of internal and external data processors, internal auditor], internal and external data processors (such IT outsourcers, enveloping and shipping companies, call center companies, companies that support illycaffè UK in various activities). The full list of data processors is available upon request to the illycaffè UK (by contacting them at the addresses indicated in point 6).

5.   Data retention

The data will be retained for the whole period necessary for the purposes stated in this policy. The data retention period is as follows:

-       for legal obligations, regulations and EU legislation, the data may be kept for the terms provided for by each regulatory source;

-       for the purposes referred to in point 2(A) of this policy, the data may be kept until the withdrawal of consent or the request for cancellation without prejudice to retention to demonstrate the consent previously given as provided for by law;

in any case, all data can be kept for a period necessary to assert or defend a company right based English and European regulations.

6.   Data Controller

The data controller is illycaffè UK Limited a company duly incorporated and validly existing under the laws of England & Wales, whose registered office is at Unit 7 – 8 Osyth Close Brackmills Northampton NN4 7DY, Ph: +44(0)1604 821234, e-mail sales.uk@illy.com.

7.   Rights

We inform you that the GDPR allows the data subject to request to the Data Controller (at the contacts mentioned above) full access to personal data and its correction, cancellation or limitation of the processing and to object to the processing, in addition to exercising the right to data portability, as well as other rights provided for by Chapter 3 of the GDPR, including that of revoking consent, where envisaged: the revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation.

8.   Complaints

The data subject can always lodge a complaint with the British Supervisory Authority whose references can be found on the website https://ico.org.uk/.

9.            Processing procedures

We inform you that such data will be processed and stored by illycaffè UK manually, on paper, computerized or telematic systems. Protection systems are in force to ensure confidentiality. All data will be stored and processed confidentially in compliance with all applicable regulations (in particular, the principles of correctness, lawfulness, transparency, and protection of confidentiality and rights) and strictly for the purposes referred to in this policy. The data will undergo only the operations necessary for the purposes referred to in this policy. The data will be stored by the data processors appointed by illycaffè UK as well as the third parties to whom the data is transmitted in compliance with this policy. The data may also be organized in databases (also electronic ones).

Policy updated on 09/30/2020.