back

Privacy policy for video surveillance at illycaffè S.p.A.

Privacy policy pursuant to Regulation (EU) 2016/679 (GDPR) and national legislation in force

General information
This privacy policy statement is full information in relation to the video surveillance equipment located at the offices of illycaffè in Trieste.
Purposes
The data can be processed by illycaffè S.p.A.:
1. for purposes of protection of persons, property or assets of the Company;
2. to facilitate in civil or criminal proceedings, the exercise of the right of defense on the basis of images useful in case of unlawful facts and therefore for legitimate interests.
Mandatory nature of the provision
The provision of data is optional and the lack of them could make it impossible to access to offices in which the equipment is present or go around near the equipment.
Data recipient categories
Data may therefore be communicated to the competent authorities by illycaffè (e.g. judicial authorities and police) and to lawyers. The data may be disclosed on behalf of illycaffè, each for own role, to all subjects delegated by illycaffè (subsidiary security staff also external to illycaffè, security guards also external to illycaffè, staff providing common services, legal office staff also external to illycaffè, staff of internal and external Data Processors, staff involved in the maintenance and management of software and hardware components of the systems also external to illycaffè which can also act as system administrators and are appointed as such in this case) and to internal and external Data Processors (such as security company).
Data retention
Data will be retained by illycaffè for the entire period necessary for the pursuit of the purposes contained in this information. The data retention period is as follows:
- for legal obligations, regulations and community regulations, data may be retained for the periods imposed by these regulatory sources;
- for the purposes described in point 2 lett. A of this policy, the data can be retained for the entire period required by laws in force;
in any case, all data may be retained for a period necessary to assert or defend a company right according to Italian and European regulations.
Data Controller and Data Protection Officer
The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39.040.3890.111, fax number +39.040.3890.490, e-mail: infoprivacy@illy.com. There is also a Data Protection Officer available at the email address dpo@illy.com and at the addresses of the Company.
Rights
We inform you that the GDPR provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.
Complaints
The data subject can always lodge a complaint with a supervisory authority whose references can be found on the website www.garanteprivacy.it/web/guest/home/footer/link.
Legal Basis
The legal basis the legal basis consists of legal obligations (Italian and European laws) as well as the legitimate interests of the Data Controller in the customer-supplier relationship.
Processing procedures
Data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support). illycaffè has implemented safety measures to prevent any data loss, illegal use of data, misuse or unauthorised access. Data will be retained and processed by illycaffè in compliance with its confidentiality requirements and with the applicable local provisions in the different states in which illycaffè has its offices (in compliance with the principles of fairness, lawfulness, transparency, and protection of the confidentiality and the rights of those concerned) strictly in line with the aims set forth in this privacy policy. Data will be processed by illycaffè exclusively to achieve the aims set forth in this privacy policy. Data will be filed at illycaffè S.p.A. offices and at the appointed data processors (as well as third parties who receive data as specified in point 4 of this privacy policy). Data will be entered in databases, including IT databases.

This privacy policy is updated as at 25/05/2018. Such update is carried out inside of policy of constant review of the informative ones. The versions of the previous policy statements are available writing to Data Controller (email dpo@illy.com).