1. General information
2. Purposes and legal basis
illycaffè UK may process data for the following purposes:
A. to fulfil your information request and to take any necessary actions to fulfil your request; the processing is based on the following legal basis: consent;
B. to be compliant with the requirements pursuant to the legislation in force, regulations or EU regulations and for legitimate interests such as to assert or defend the rights of the Company; the processing is based on the following legal basis: legal obligations (British and European laws) as well as the legitimate interests.
3. Mandatory nature of the provision
4. Data recipient categories
5. Data retention
Data will be retained by illycaffè UK for the entire period necessary for the pursuit of the purposes contained in this information. The data retention period is as follows:
- for legal obligations, regulations and community regulations, data may be retained for the periods imposed by these regulatory sources;
- for the purposes described in point 2 (A) of this policy, the data can be retained until the fulfillment of the request;
in any case, all data may be retained for a period necessary to assert or defend a company right according to British and European regulations.
6. Data Controller
The Data Controller is the undersigned company illycaffè UK Limited a company duly incorporated and validly existing under the laws of England & Wales, whose registered office is at Unit 7 – 8 Osyth Close Brackmills Northampton NN4 7DY, Ph: +44(0)1604 821234, e-mail firstname.lastname@example.org.
We inform you that the GDPR and the Data Protection Act 2018, provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to exercising the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.
The data subject can always lodge a complaint with the British Supervisory Authority whose references can be found on the website https://ico.org.uk/.
9. Processing procedures
N.B. The consent can only be given by persons over 13 years, if the subject is under 13 years, he cannot use what is provided for in the purposes for which consent is required.