< back

back

Privacy Policy (Single integrated registration profile) - espressamente illy Reserved Area

Privacy policy pursuant to Regulation (EU) 2016/679 (GDPR) and national legislation in force
  1. General information
    illycaffè S.p.A. (hereinafter also referred to as the "Company" or "illycaffè") hereby informs you the purposes and procedures of data processing (provided by you) of which it will be hold.
     
  2. Purposes 
    illycaffè may process data for the following purposes: 

    A. to access and possibly make you enjoy all the services, including interactive, of the websites of illycaffè provided in the Terms of Use and in any Terms of purchase contained in the various sections of the site by logging with the same credentials to all services of the sites of illycaffè. In some cases, it may be required to give any further information that will be processed prior to your consent where required; among the services there is also the Facebook “Custom Audiences” feature (for further information please refer to: https://www.facebook.com/help/381385302004628;

    B. to register you to the reserved area of the site, recognizing you as illycaffè Client; 

    C. to be compliant with the requirements pursuant to the legislation in force, regulations or EU regulations and for legitimate interests such as to assert or defend the rights of the Company in the appropriate offices;

    D. to carry out advertising communications/information on products-services-initiatives of illycaffè and its partners and market research and/or interviews for the evaluation of product-services of illycaffè, all by illycaffè to the addresses that you provided in the form or other contact details provided later (please note that the sending of SMS/MMS and e-mail will also be in electronically with the help of automated tools).
     
  3. Mandatory nature of the provision
    A. Provision of data required on the registration form for the purposes described in point 2, letter A, of this privacy policy is optional; however, the lack of it make impossible to access and possibly enjoy the services of the sites of illycaffè (including the impossibility of buying in the shop) all even with the same credentials and then access also later on to the private area. The consent for the purposes described in point 2, letter A, of this privacy policy is optional; however, the lack of it make impossible to access and possibly enjoy the services of the sites of illycaffè (including the impossibility of buying in the shop) all even with the same credentials and then access, also later on, to the private area.

    B. Provision of data for the purposes described in point 2, letter B, of this privacy policy and the consent are optional; however, if the data and the consent are not provided, access to the private area and to access to the services of the area itself will be denied.

    C. Provision of data (personal data, address and other information requested in the event of dispute or requests to exercise the rights) provided on the registration form or required also later on is necessary for the purposes described in point 2, letter C, of this privacy policy, and the lack of provision will make it impossible to access and possibly enjoy the services of the websites of illycaffè and then access also later on to the private area, and/or impossible to keep the login credentials once you have registered. 

    D.Provision of data for the purposes described point 2, letter D, of this privacy policy and the relative consent are not mandatory; failure to provide such data and the consent will have not consequences, except that you won’t receive any information (without any consequence on other purposes). Additionally, if you agreed to the data processing for the purposes described in point 2, letter D, of this privacy policy, you may cancel you consent at any time and without having to justify your decision (to unsubscribe) by sending a notice to the Data Controller.
     
  4. Data recipient categories 
    The data may be communicated by illycaffè for the purposes specified in point 2 letter C of this information (communicating only data that are necessary for the pursuit of these purposes) to: judicial authorities, tax police and public security and public bodies if there is an obligation to this disclosure, also to law firms and legal advisers and to post offices (being able to see the address for sending any written notices). For the purposes specified in point 2 letter B of this information, data will not be communicated by illycaffè. For the purposes specified in point 2 letter A of this information, data will not be communicated by illycaffè unless provision is made for special services, in which case you will be subject to specific conditions and, if necessary, you will be required explicit consent. For the purposes indicated in point 2, letter D of this information, the data will not be disclosed. The data may be disclosed on behalf of illycaffè, each for own role, to all subjects delegated by illycaffè (administrative staff and management of illycaffè Clients, transport and correspondence staff, including external to the Company, marketing staff and site management staff also external to the Company, IT technicians and IT staff that can also carry out tasks of system administrators, being appointed as such in this case, public relations staff, legal department staff, members of Board and Statutory Auditors, internal auditor, trainees, freelancers and consultants-employees also external to the Company acting under the direct responsibility of the Company, such as legal consultants, staff of the internal and external Data Processors) and to internal and external Data Processors to the Company (for example companies-professional studies who perform instrumental activities of illycaffè S.p.A. such as marketing activities, shipping and enveloping or call center activities, management public relationships, including information technology outsourcing company, management activities of the website).
     
  5. Data retention

    Data will be retained by illycaffè for the entire period necessary for the pursuit of the purposes contained in this information. The data retention period is as follows:

    - for legal obligations, regulations and community regulations, data may be retained for the periods imposed by these regulatory sources;

    - for the purposes described in point 2 letter A and B of this policy, the data can be retained until the withdrawal of consent or request for cancellation;

    - for the purposes described in point 2 letter D of this policy, the data can be retained until the withdrawal of consent or request for cancellation without prejudice to the conservation in accordance with the law to prove the consent previously given;

    in any case, all data may be retained for a period necessary to assert or defend a company right according to Italian and European regulations.

  6. Data Controller and Data Protection Officer
    The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39.040.3890.111, fax number +39.040.3890.490, e-mail: infoprivacy@illy.com. There is also a Data Protection Officer available at the email address dpo@illy.com and at the addresses of the Company.
     
  7. Rights
    We inform you that the GDPR provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.
     
  8. Complaints 
    The data subject can always lodge a complaint with a supervisory authority whose references can be found on the website www.garanteprivacy.it/web/guest/home/footer/link.
     
  9. Legal Basis
    The legal basis the legal basis consists of legal obligations (Italian and European laws) as well as the legitimate interests of the Data Controller in the customer-supplier relationship. Furthermore, for the purposes for which consent is provided, the legal basis is the consent itself.
     
  10. Processing procedures
    Data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support). illycaffè has implemented safety measures to prevent any data loss, illegal use of data, misuse or unauthorised access. Data will be retained and processed by illycaffè in compliance with its confidentiality requirements and with the applicable local provisions in the different states in which illycaffè has its offices (in compliance with the principles of fairness, lawfulness, transparency, and protection of the confidentiality and the rights of those concerned) strictly in line with the aims set forth in this privacy policy. Data will be processed by illycaffè exclusively to achieve the aims set forth in this privacy policy. Data will be filed at illycaffè S.p.A. offices and at the appointed data processors (as well as third parties who receive data as specified in point 4 of this privacy policy). Data will be entered in databases, including IT databases.
     
 
N.B. The consent can only be given by persons over 16 years, if the subject is under 16, he cannot use what is provided for in the purposes for which consent is required (e.g. registration... ).
 
This privacy policy is updated as at 06/08/2018. Such update is carried out inside of policy of constant review of the informative ones. The versions of the previous policy statements are available writing to Data Controller (email dpo@illy.com).