1.   INTRODUCTION
This information on cookies and other tracking tools explains the function and type of cookies and other tracking tools used on our website, as well as providing information on how to refuse or delete them.
illycaffè S.p.A. acts as a technical intermediary only for the third-party links shown above and does not accept any liability for any changes to them by their respective Owners/Editors.

2.   DEFINITIONS AND CLASSIFICATIONS
2.1    Cookies
As is acknowledged, cookies are generally text strings that are positioned or archived on a user’s device by websites (known as Publishers or “first parties”) or other websites or web servers (known as “third parties”), when browsing. This can be done directly, in the case of publishers, and indirectly through the publishers in the case of “third parties”.
The devices in question may be, for example, computers, tablets, smartphones, or any other device that can store information. Today, and even more so in the future, these devices must include IoT (Internet of Things) systems, which are designed to connect to the internet and other devices to provide a variety of services, not necessarily limited to communication alone. Software for web browsing and operating these devices, such as browsers, can save cookies and resend them to the sites that originally generated them in the event that the same user visits the site again, thereby keeping a record of their previous interaction with one or more websites. The information contained in cookies may include personal data, such as an IP address, username, unique identifier or email address, and they may also contain non-personal data, such as language settings or information on the type of device that a person is using to browse the website. Cookies can therefore perform a variety of important functions, including monitoring sessions, storing information on specific configurations relating to the users who access the server, to support access to online content etc. They can be used, for example, to keep track of items in an online shopping cart, or the information used to complete and online form. While, on the one hand, cookies can be used to allow websites to load more quickly, or for information to be directed on a network – in line, therefore, with features linked to the functioning of the website itself – they can also be used to direct behavioural advertising and then measure the effectiveness of the advertising message, or to adapt the type and method of services provided to the user’s previous tracked behaviour.
As it is not possible to differentiate between cookies on the basis of their technical characteristics, they can be categorised as explained below.
The main subdivisions relate to their origin. Based on this, cookies may be:
1.    first-party cookies, which are installed directly by the manager of the website on the user’s terminal;
2.    third-party cookies, installed by a different website via the manager of the website that the user is visiting.
Cookies can be categorised by their function:
- Technical cookies are used for the sole purpose of “carrying out the transmission of a communication over an electronic communications network, or as is strictly necessary, for the provider of an information society service for the information explicitly requested by the subscriber or user, to provide the service” (see art. 122, paragraph 1 of D.Lgs. 196/03). The lawful basis for the processing of technical cookies is the legitimate interest of the site owner, in the interest of operating the site and possibly gathering statistics.
- Profiling cookies are used to track, in relation to certain identified or identifiable subjects, specific actions or behaviour patterns in the use of the functionalities offered (patterns) in order to group different profiles within homogeneous clusters of varying sizes, so that the owner may, among other things, modify the provision of a service in an increasingly personalised manner, beyond what is strictly necessary for the provision of the service, and send targeted advertising messages, i.e. in line with the preferences expressed by the user in the context of web browsing. These cookies can only be used with the consent of the data subject, which also constitutes the lawful basis for the processing. The user may never be obliged, without an alternative, to give their consent to receive cookies or other tracking tools, under penalty of being unable to access the site. Please visit http://www.youronlinechoices.com for further information. Removing/refusing these cookies will not lead to any loss of functionality.
- There are also analytics cookies that provide analysis and statistics on the use of the website and flow of visitors. These cookies come under the category of technical cookies if there is no possibility of directly identifying (singling out) the data subject through their use, which is equivalent to preventing the use of analytics cookies that, due to their characteristics, may result in direct and unique identifiers.
Analytics cookies are also included in the category of technical cookies if the use of statistical analysis related to multiple domains, websites or apps may be linked to the same owner as long as the owner carries out their own statistical analysis, without in any case such analyses resulting in an activity which, beyond the boundaries of a mere statistical record, in reality assumes the characteristics of processing with the purpose of making decisions of a commercial nature. The lawful basis for the processing is that of technical cookies where they come under such category or consent where they do not.

2.2    Other tracking systems
Other technologies may exist that pursue the same purposes as cookies.
For example, although cookies can be used in both web and mobile browsers, it would be inappropriate to talk about cookies in the context of mobile applications, since these are tracking tools that require the presence of a browser. For this reason, within this document the term cookie is used only to specifically indicate that particular type of tracking tool. The same criteria used for cookies apply to these technologies.

3.   LIST OF COOKIES, TRACKING SYSTEMS AND PURPOSES

Technical cookies – First party
Cookie name: utag_main
Domain: illy.com
Description: Used by Tealium's internal library.
Duration: 1 year

Analytics cookies – First party
Cookie name: _ga
Domain: illy.com
Description: These cookies are used to limit the number of requests and to distinguish unique users by assigning a randomly generated number as a client identifier. They are included in every page request for a site and are used to calculate visitor, session, and campaign data, for website data analysis reports. They will also be used to store data on ad clicks when auto-tagging is on.
Duration: 730 days

Cookie name: _gat_primary
Domain: illy.com
Description: The JavaScript Google Universal Analytics library uses cookies to distinguish unique users anonymously and to manage the frequency of requests to the server.
Duration: session

Cookie name: _gid
Domain: illy.com
Description: These cookies are used to limit the number of requests and to distinguish unique users by assigning a randomly generated number as a client identifier. They are included in every page request for a site and are used to calculate visitor, session, and campaign data, for website data analysis reports. They will also be used to store data on ad clicks when auto-tagging is on.
Duration: 1 day

Cookie name: s_cc
Domain: illy.com
Description: Cookie from Adobe SiteCatalyst, determines whether cookies are enabled in the browser.
Duration: session

Cookie name: s_sq
Domain: illy.com
Description: This cookie is set and read by the JavaScript code when SelectMap and Activity Map features are enabled; it contains information about the link previously selected by the user.
Duration: session

4.   DATA CONTROLLER AND DATA PROTECTION OFFICER
The Data Controller is illycaffè S.p.A, having its registered office in via Flavia 110, in Trieste, ph. +39.040.3890.111, fax +39.040.3890.490, e-mail: infoprivacy@illy.com. There is also a Data Protection Officer available at the email address dpo@illy.com and at the addresses of the Company.

5.   RIGHTS
We inform you that the (EU) regulation 2016/679 (GDPR) provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to exercising the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.

6.   COMPLAINTS
The data subject can always lodge a complaint with the Italian Data Protection Authority, whose references can be found on the website www.garanteprivacy.it.

7.   COMMUNICATION OF DATA
The data can only be processed by authorised processing personnel (IT technicians who may also be external to the Company, consultants who may also be external to the company – IT technicians, consultants involved in the management of the site – marketing personnel who may also be external to the company, personnel involved in the management of the site, who may also be external to the company, employees in all sectors to which a request may be addressed) and specifically appointed data processors (for example, companies that manage the website or host the website). The list of data processors is available by contacting the data controller. All the above subjects process only the essential data for the performance of their duties.
If necessary, the data may also be communicated by the Company to judicial or police bodies, lawyers and anyone who requires them in order to meet obligations provided for by law, by a regulation or by community legislation or to assert or defend a legal claim.

8.   ADDITIONAL PURPOSES
Please note that all data may always be processed in order to assert or defend the rights of the Company and all the obligations provided for by law, by a regulation or by community legislation, recalling that in this sense, provision of data is necessary and failure to do so will result in inability to access the site and/or establish any relationship with the Company (even simply writing an e-mail for information) and that for these purposes the data may be communicated to judicial or police bodies, lawyers, and anyone who requires them in order to meet obligations provided for by law, by a regulation or by community legislation or to assert or defend a legal claim.

9.   INSTRUCTIONS FOR DISABLING COOKIES DIRECTLY FROM THE BROWSER
– Chrome –> https://support.google.com/chrome/answer/95647?hl=it
– Internet Explorer –> http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookie#ie=ie-11
– Opera –> http://help.opera.com/Windows/10.00/it/cookie.html
– Safari for mobile devices –> http://support.apple.com/kb/HT1677?viewlocale=it_IT
– Safari per for desktops –> https://support.apple.com/kb/PH19214?locale=it_IT
– Firefox–>https://support.mozilla.org/it/products/firefox/protect-your-privacy/cookie
– Microsoft Edge –> http://windows.microsoft.com/it-it/windows-10/edge-privacy-faq

If you use a web browser that is not listed above. please refer to the instructions or the online guide for your browser for further information.
This privacy policy is updated to 03rd of May 2022.