Privacy policy for subscription to illy Lovers program for those who already have a My Account

Privacy policy pursuant to Regulation (EU) 2016/679 (GDPR), national legislation in force in UK (Data Protection Act 2018 and Uk GDPR)

1.    General information
illycaffè Uk Limited ((hereinafter, also “illycaffè UK”) inform you (hereinafter, also referring to you as the “user”) that it will process the personal data you have provided for the purposes illustrated below. Only the data necessary for the purposes referred to in this policy will be requested and processed.

2.    Purposes and legal basis
We may process your data
A.    to enroll you in the ILLY LOVERS program as per the General Membership Conditions and to let you enjoy the dedicated benefits. The processing is based on the following legal basis: need for the performance of a contract;
B.    to fulfill an obligation established by law, by a regulation or by EU legislation; for these purposes the legal basis is the fulfillment of legal obligations;
C.    for legitimate interests such as to assert or defend illycaffè UK rights (for these purposes the legal basis is the fulfillment of legal obligations).

3.    Mandatory provision of data
The provision of the data requested for the purposes of points 2(A), 2(B) and 2(C) is necessary and, consequently, a possible refusal to provide them, in whole or in part, may result in the impossibility to enroll you in the ILLY LOVERS program.

4.    Data addressee categories
The data collected and processed may be disclosed to public bodies and notaries and post offices (which can see the address for sending any written communications) for the purposes referred to in point 2 (A).
The data may be disclosed to public bodies, judicial bodies, police forces for the purposes referred to in point 2 (B). The data may be disclosed to lawyers or legal consultants, public bodies, judicial bodies, police forces and post offices (which can see the address for sending any written communications) for the purposes referred to in point 2 (C).
The data may be disclosed on behalf of illycaffè UK, each for own role, to all subjects delegated by illycaffè UK [employees in charge of the Program (also external to the Company), employees in charge of public relations (also external to the Company), administrative employees, the IT staff (also external to the Company, who can also carry out system administration duties being appointed as such in this case), consultants (also external to the Company) such as IT technicians who can also carry out system administration duties being appointed as such in this case or legal consultants, interns, website management staff (also external to the Company), marketers (also external to the Company), call center employees (also external to the Company), enveloping and shipping staff (also external to the Company), legal procedures employees (also external to the Company), staff of data processors, internal auditor], and to data processors  (such as marketing companies, IT outsourcers, enveloping and shipping companies, call center companies, companies that support illy UK in various activities). The full list of data processors is available upon request to the illycaffè UK by contacting it at the addresses indicated in point 6.

5.    Data retention
The data will be retained for the whole period necessary for the purposes stated in this policy. The data retention period is as follows:
-   for legal obligations, regulations and EU legislation, the data may be kept for the terms provided for by each regulatory source;
-   for the purposes referred to in point 2(A) of this policy, for the terms established by law or up to the withdrawal of the Member from the ILLY LOVERS program without prejudice to the retention in accordance with the law;
in any case, all data can be kept for a period necessary to assert or defend a company right based English, Italian and European regulations.

6.    Data Controller
The data controller is llycaffè UK Limited a company duly incorporated and validly existing under the laws of England & Wales, whose registered office is at Unit 7 – 8 Osyth Close Brackmills Northampton NN4 7DY, Ph: +44(0)1604 821234, e-mail sales.uk@illy.com.

7.    Rights
Please note that the GDPR and GDPR Uk, provide that you may request (by contacting illycaffè UK at the contact details set out in point 6) access to and rectification of your personal data, erasure of your data or limitation of the processing concerning you, data portability; you may also have the opportunity, again by contacting illycaffè UK, to oppose the processing of your data and to exercise the other rights contained in Chapter 3 Section 1 of the GDPR and the GDPR Uk, including the right to withdraw consent, where applicable: the withdrawal of consent shall not affect the lawfulness of the processing based on the consent given before the withdrawal.

8.    Complaints
If you consider that the processing of your personal data is in violation of the GDPR, GDPR UK and Nationals privacy regulations, you can always address a complaint to the British Supervisory Authority (for illycaffè UK) whose references can be found on the website https://ico.org.uk/.

9.    Processing procedures
We inform you that such data will be processed and stored by illycaffè UK manually, on paper, computerized or telematic systems. Protection systems are in force to ensure confidentiality. All data will be stored and processed confidentially in compliance with all applicable regulations (in particular, the principles of correctness, lawfulness, transparency, and protection of confidentiality and rights) and strictly for the purposes referred to in this policy. The data will undergo only the operations necessary for the purposes referred to in this policy. The data will be stored by the data processors appointed by illycaffè UK as well as the third parties to whom the data is transmitted in compliance with this policy. The data may also be organized in databases (also electronic ones).

Privacy policy updated to 03rd May 2022. This update is part of a policy of constant revision of the information. The versions of the previous disclosures can be obtained by contacting the Data Controller (e-mail infoprivacy@illy.com and sales.uk@illy.com).