Privacy policy for subscription to  ILLY LOVERS program - for users already joined to the illy world

Privacy policy pursuant to Regulation (EU) 2016/679 (GDPR) and national legislation in force in UK (Data Protection Act 2018)

 

1.   General information

illycaffè UK Limited (hereinafter, also “illycaffè UK” or “Company”) inform you (hereinafter, also referring to you as the “user”) that it will process the personal data you have provided for the purposes illustrated below. Only the data necessary for the purposes referred to in this policy will be requested and processed.

2.   Purposes and legal basis

The data will be processed by illycaffè UK:

A.    to enroll you in the ILLY LOVERS program as per the General Membership Conditions and to let you enjoy the dedicated benefits. The processing is based on the following legal basis: need for the performance of a contract;

B.    to fulfill an obligation established by law, by a regulation or by EU legislation (for this purposes the legal basis is the fulfillment of legal obligations) and for legitimate interests such as to assert or defend an illycaffè UK and illycaffè rights (for this purposes the legal basis is the fulfillment of legal obligations).

The data will be processed by illycaffè S.p.A:

3.   Mandatory provision of data

The provision of data is necessary for the purposes referred to in the previous point 2(A) and 2(B) of this policy. Any refusal to provide it in whole or in part may give rise to the impossibility for the Company to enroll you in the ILLY LOVERS program and let you enjoy the dedicated benefits.

4.   Data addressee categories

The data collected and processed may be disclosed to public bodies and post offices (which can see the address for sending any written communications) for the purposes referred to in point 2(A) of this policy.

The data may be disclosed to lawyers or legal consultants, public bodies, judicial bodies, police forces and post offices (which can see the address for sending any written communications) for the purposes referred to in point 2(B) of this policy.

The data may be disclosed on behalf of illycaffè UK, each for own role, to all subjects delegated by illycaffè UK [employees in charge of the Program (also external to the Company), employees in charge of public relations (also external to the Company), administrative employees, the IT staff (also external to the Company, who can also carry out system administration duties being appointed as such in this case), consultants (also external to the Company) such as IT technicians who can also carry out system administration duties being appointed as such in this case or legal consultants, interns, website management staff (also external to the Company), marketers (also external to the Company), call center employees (also external to the Company), enveloping and shipping staff (also external to the Company), legal procedures employees (also external to the Company), staff of internal and external data controllers, internal auditor], internal and external data controllers (such as marketing companies, IT outsourcers, enveloping and shipping companies, call center companies, companies that support illycaffè UK in various activities). The full list of data processors is available upon request to the illycaffè UK (by contacting them at the addresses indicated in point 6).

5.   Data retention

The data will be retained for the whole period necessary for the purposes stated in this policy. The data retention period is as follows:

-       for legal obligations, regulations and EU legislation, the data may be kept for the terms provided for by each regulatory source;

-       for the purposes referred to in point 2(A) of this policy, the data may be kept for the terms established by law or up to the withdrawal of the Member from the ILLY LOVERS program without prejudice to the retention in accordance with the law;

in any case, all data can be kept for a period necessary to assert or defend a company right based English and European regulations.

6.   Data Controller

The data controller is llycaffè UK Limited a company duly incorporated and validly existing under the laws of England & Wales, whose registered office is at Unit 7 – 8 Osyth Close Brackmills Northampton NN4 7DY, Ph: +44(0)1604 821234, e-mail sales.uk@illy.com

7.   Rights

We inform you that the GDPR allows the data subject to request to the Data Controller (at the contacts mentioned above) full access to personal data and its correction, cancellation or limitation of the processing and to object to the processing, in addition to exercising the right to data portability, as well as other rights provided for by Chapter 3 of the GDPR, including that of revoking consent, where envisaged: the revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation.

8.   Complaints

The data subject can always lodge a complaint with the British Supervisory Authority whose references can be found on the website https://ico.org.uk/

9.            Processing procedures

We inform you that such data will be processed and stored by illycaffè UK manually, on paper, computerized or telematic systems. Protection systems are in force to ensure confidentiality. All data will be stored and processed confidentially in compliance with all applicable regulations (in particular, the principles of correctness, lawfulness, transparency, and protection of confidentiality and rights) and strictly for the purposes referred to in this policy. The data will undergo only the operations necessary for the purposes referred to in this policy. The data will be stored by the data processors appointed by illycaffè UK as well as the third parties to whom the data is transmitted in compliance with this policy. The data may also be organized in databases (also electronic ones).

 

Policy updated on 09/30/2020.