Privacy Policy Statement Espressamente

Privacy Policy statement in accordance with provision of the Italian Privacy Law (art. 13 of D.Lgs. 196/03)


illycaffè S.p.A. (hereinafter also referred to as the "Company" or "illycaffè") hereby informs you the purposes and procedures of data processing (provided by you) of which it will be hold.

  1. We inform you that  data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support). illycaffè has implemented safety measures to prevent any data loss, illegal use of data, misuse or unauthorised access. The data will be processed and stored by illycaffè in accordance with confidentiality and the relevant legal requirements (in compliance with the principles of fairness, lawfulness, transparency, and protection of the confidentiality and the rights of those concerned) and strictly in line with the purposes set forth in this privacy policy. Data will be filed at illycaffè S.p.A. offices and at the data processors appointed by illycaffè as well as third parties, as Data controllers, specified in that information. Data will be entered in databases, including IT databases.
  2. illycaffè may process data which are instrumental to achieve the purposes of this privacy policy only performing the actions needed to implement such purposes:
    1. in order to make you record the reserved area of the site, and make you recognize you as Espressamente illy and later on access to the reserved area to use it;
    2. illycaffè may also process data to assert or defend illycaffè’s rights in the relevant jurisdiction, to comply with the requirements pursuant to the legislation in force, regulations or EU regulations; in this framework, consent is not mandatory, as such processing may also occur without the consent of data subject pursuant to article 24, point a, f of the Legislative Decree n. 196/03.
  1. The data may be communicated by illycaffè for the purposes specified in point 2 letter B of this information (communicating only data that are necessary for the pursuit of these purposes) to: judicial authorities, tax police and public security and public bodies if there is an obligation to this disclosure, also to law firms and legal advisers and to post offices (being able to see the address for sending any written notices). For the purposes specified in point 2 letter A of this information, data will not be communicated by illycaffè.The data may be disclosed on behalf of illycaffè to all parties appointed as persons in charge of the processing by illycaffè, if necessary for the performance of the tasks assigned to them by the Company, only carrying out on the data the operations necessary for the performance of the said tasks (administrative staff and management of Espressamente illy, transport and correspondence staff, including external to the Company, marketing staff and site management staff also external to the Company, IT technicians and IT staff that can also carry out tasks of system administrators, being appointed as such in this case, public relations staff, legal department staff, members of Board and Statutory Auditors, internal auditor, interns, freelancers and consultants-employees also external to the Company acting under the direct responsibility of the Company, such as legal consultants) and any data processor (for example, the data processor specified in paragraph 7 of this information, companies-professional studies who perform instrumental activities of illycaffè S.p.A. such as marketing activities, shipping and enveloping or call center activities, management public relationships, including information technology outsourcing company, management activities of the website) always appointed by illycaffè. External data processors will process data either directly or through their providers which are in charge of data processing on behalf of illycaffè, performing the same tasks as data processors as well as the administration/maintenance of processors/servers of external data processors hosting illycaffè data.
  2. Provision
    1. Provision of data required on the registration form for the purposes described in point 2, letter A, of this privacy policy is optional, however, if the data are not provided, access to the specific area Espressamente illy and also to access to the services of the area itself will be denied.
    2. Provision of data (personal data, address and other information requested in the event of dispute or requests to exercise the rights under art. 7 of Legislative Decree 196/03) provided on the registration form or required also later on is necessary for the purposes described in point 2, letter B, of this privacy policy, and the lack of provision will make it impossible to register to the “Single sign on” and then access also later on to the specific area Espressamente illy, and/or impossible to keep the login credentials once you have registered.
  1. The data will be conserved for a period appropriate to the purposes for which they are used and compliant with the relevant legal requirements.
  2. The Data Controller is the undersigned company illycaffè S.p.A. located in Via Flavia 110 in Trieste, telephone +39 040 3890 111, fax +39 040 3890 490, email
  3. The Data Processor, whom you may contact for everything relating to the use of the data, and especially to exercise the rights contained in art. 7 of D.Lgs. 196/03 within the times and by the procedures envisaged by the law, and to obtain the full, up-to-date list of the other Data Processors, is the Information Systems and Process Organisation Manager, who can be contacted for the purposes of this role at the addresses of illycaffè S.p.A. (written communications or enquiries must be addressed “to the Data Processors, the Information Systems and Process Organisation Manager”, specifying the subject of “privacy”). Any changes to the Data Processor identified above or this privacy policy statement may be published on the “privacy policy” page of the Internet site You are therefore encouraged to visit this site, while information may also still be requested by the procedures envisaged by law. All information and enquiries (including those pursuant to art. 7 of D.Lgs. 196/03) relating to the use of the data may also be addressed to, marking communications “privacy, attn the Data Processor, the Information Systems and Process Organisation Manager.
  4. You are also informed that art. 7 of D.Lgs. 196/03 assigns specific rights to the subjects whose personal data are used. The text of art. 7 of D.Lgs. 196/03 is thus provided below:
    1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
    2. A data subject shall have the right to be informed
      1. of the source of the personal data;
      2. of the purposes and methods of the processing;
      3. of the logic applied to the processing, if the latter is carried out with the help of electronic means;
      4. of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
      5. of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
    1. A data subject shall have the right to obtain
      1. updating, rectification or, where interested therein, integration of the data;
      2. erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
      3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
    1. A data subject shall have the right to object, in whole or in part,
      1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
      2. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.


Information updated as at 07/12/2012. Such update is carried out inside of policy of constant review of the informative ones. The versions of the previous policy statements are available writing to