Privacy policy for data collection at illy SHOP_illy CAFFÈ (accounting purposes)

Privacy policy pursuant to article 13 of the Italian Legislative Decree 196/03

illycaffè S.p.A. (hereinafter also referred to "illycaffè” or "Company") having its registered offices at Via Flavia 110, Trieste, Italy, Register of Companies of Trieste - registration number and VAT code IT00055180327 informs you that it will process some personal data of you/of a firm/company represented by you (as a customer, hereinafter also referred to “customer” or “data subject”) instrumental to achieve the purposes of this privacy policy. illycaffè may only require and process data which are instrumental to achieve the purposes of this privacy policy. The data are collected from the data subject, from third parties (in the cases specified  in point 2 of this privacy policy) or as a result of processing by illycaffè.

  1. Data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support). illycaffè has implemented safety measures to prevent any data loss, illegal use of data, misuse or unauthorised access. Data will be retained and processed by illycaffè in compliance with its confidentiality requirements and with the applicable local provisions (in compliance with the principles of fairness, lawfulness, transparency, and protection of the confidentiality and the rights of those concerned) strictly in line with the aims set forth in this privacy policy. Data will be processed by illycaffè exclusively to achieve the aims set forth in this privacy policy. Data will be filed at illycaffè S.p.A. offices and at the appointed data processors (as well as third parties who receive data as data Controller and specified in different points of this privacy policy). Data will be entered in databases, including IT databases.
  2. illycaffè may process data:
    for administrative and accounting purposes (including the practices necessary for the management of the Tax Free Refund), to comply with the requirements pursuant to the legislation in force, regulations or EU regulations and to assert or defend the rights of illycaffè S.p.A.; some data (VAT number, Company name, address) may also be collected in public records and business information companies if illycaffé is not in possession of any of these data essential to the contract or if illycaffé want to verify the correctness of data. The processing for these purposes can be carried out without the consent of data subjects pursuant to art. 24 point a), b), c), d), f) of D.Lgs. 196/03.
  3. The provision of data requested for the purposes under point 2 of this privacy policy is necessary and the lack of them could make it impossible for illycaffè to execute the contract or continue the contractual relationship. If other data are required for other purposes you will be informed of the new purposes and consequences of failure to provide them. Any such new purposes will of course be subject to your specific new and free consent if it is expected.
  4. Without prejudice to any further communications that may be necessary for legal and fiscal purposes, the data may be communicated by illycaffè for the purposes under point 2 of this privacy policy to: postal carriers and freight forwarders (for any communication), to organizations and public bodies or police forces (in the case of justified claims or provision of law), external consultants (e.g. legal), to audit firms or individual auditors (if not appointed as Data Processor), to business information companies to verify the correctness of the data as specified in point 2 of the privacy policy.
    Please note that illycaffé can communicate data which are instrumental to achieve each purpose.
    The data may be processed by all the persons (being aware on behalf of illycaffè) in charge of the data processing appointed by illycaffè (illy SHOP and/or illy CAFFÈ staff also external to the Company, administrative/legal and logistic staff- also envelope filling and mailing staff also external to the Company, executives, managers, members of the Board of Directors and the Board of Auditors, IT staff that can also carry out tasks of system administrators, being appointed as such in this case, customer service staff, call center staff, advisors also external to the Company- e.g. quality consultants/certifications, IT technicians that can also carry out tasks of system administrators being appointed as such in this case, lawyers, tax consultants – interns, internal auditor, staff of the data processor specified in point 7 and staff of other data processors as defined below) and data processors external to the Company (such as enveloping and shipping companies, more in general company-external studies and professionals performing instrumental activities to those of illycaffè such as accounting, audit, consulting - IT outsourcers that can also host illycaffé server, call center companies, companies involved in the practices related to Tax Free Refund) as well as the internal Data Processors.
    External data processors will process data either directly or through their providers which are in charge of data processing on behalf of illycaffè, performing the same tasks as data processors as well as the administration/maintenance of processors/servers of external data processors hosting illycaffè data. Data processors and persons in charge of processing will retain data insofar it is necessary to perform the tasks assigned by illycaffè by only performing the actions needed to implement such tasks.
    The undersigned company will take every precaution to ensure maximum confidentiality by third parties and persons in charge and Data Processors indicated, informing them of the purposes for which the data has been provided and indicating the purposes for which the data were communicated to them.
  5. The data will be conserved for a period appropriate to the purposes for which they are used and compliant with the relevant legal requirements
  6. The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39 040 3890 111, fax number +39 040 3890 490, e-mail:
  7. The Data Processor, whom you may contact for everything relating to the use of the data, and especially to exercise the rights contained in art. 7 of Italian Legislative Decree 196/03, within the times and by the procedures envisaged by the law, and to obtain the full, up-to-date list of the other Data Processors, is the Corporate Human Resources, Organization,  Processes and IT Director, who can be contacted for the purposes of this role at the addresses of illycaffè S.p.A. (via Flavia 110, 34147-Trieste, ITALY, tel. +39 040 3890 111, fax +39 040 3890 490, e-mail Any changes to the Data Processor identified above or this privacy policy statement may be published on the “privacy policy” page of the internet site You are therefore encouraged to visit this site, while information may also still be requested by the procedures envisaged by art. 9 of Legislative Decree 196/03. All information and enquiries relating to the use of the data may also be addressed to, marking communications “privacy, attn the Data Processor, the Corporate Human Resources, Organization,  Processes and IT Director”.
  8. You are also informed that art. 7 of D.Lgs. 196/03 assigns specific rights to the subjects whose personal data are used. The text of art. 7 of D.Lgs. 196/03 is thus provided:
    1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
    2. A data subject shall have the right to be informed
      1. of the source of the personal data;
      2. of the purposes and methods of the processing;
      3. of the logic applied to the processing, if the latter is carried out with the help of electronic means;
      4. of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
      5. of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
    3. A data subject shall have the right to obtain
      1. updating, rectification or, where interested therein, integration of the data;
      2. erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
      3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
    4. A data subject shall have the right to object, in whole or in part,
      1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
      2. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
  9. Please note that in case the customer needs to communicate to illycaffé names and addresses of its employees for reasons relating to the implementation of the contract, the customer must inform the employee of the information contained in this privacy policy and in particular that illycaffè will use these data for contractual reasons, to fulfill legal obligations, regulations and legislation, to assert or defend a right of illycaffè.

Information updated on 22 November 2016. Such update is carried out inside of policy of constant review of the informative ones. The versions of the previous policy statements are available writing to