Privacy policy for subscription to professional reserved area for those who already have a My Account

Privacy policy pursuant to Regulation (EU) 2016/679 (GDPR) and national legislation in force in Italy (D.Lgs.196/03)

1.    General information
illycaffè S.p.A. (hereinafter also referred to as the "Company" or "illycaffè") hereby informs you of the purposes and methods of processing of the data (provided by you) of which it will be in possession.
2.    Purposes and legal basis
illycaffè may process data for the following purposes:
A.    to sign up you in the reserved area of the site, to recognize you as a Professional customer and to let you access the reserved area to use it; the processing is based on the following legal basis: consent;
B.    to fulfill an obligation established by law, by a regulation or by EU legislation. The processing is based on the following legal basis: the fulfillment of legal obligations;
C.    for legitimate interests such as that of asserting or defending a right of illycaffè. The processing is based on the following legal basis: the pursuit of legitimate interests.

3.    Mandatory provision of data
The provision of data indicated in the form required for the purposes described in point 2 (A) of this privacy policy and the consent are optional, however, failure to provide and consent will make it impossible to access the reserved area of the site and access the services of the reserved area itself.
The provision of data (personal details, address and other data requested in the event of disputes or requests to exercise rights) provided in the form or requested later, is necessary for the purposes described in point 2(B) and 2(C) of this privacy policy, and failure to provide such data may make it impossible to access and possibly use the services of the illycaffè websites, to access the specific reserved area and/or to maintain access credentials once registered.

4.    Data addressee categories
Data, collected and processed for the purposes described in point 2(A) of this privacy policy will not be disclosed. For the purposes of point 2(B) and 2(C) of this privacy policy, illycaffè may disclose data to lawyers, solicitors, public authorities, the judiciary, the police, the post office (as the address is visible when sending any written material). illycaffè will only disclose data which are essential for the achievement of each of the aims of the privacy policy. The data may be disclosed on behalf of illycaffè, each for own role, to all subjects delegated by illycaffè (legal staff also external to the Company, staff in charge of the website also external to the Company - such as legal advisors, IT experts that may also perform the role of system administrators, and appointed as such, quality service staff and staff in charge of the administration of the website – IT system staff which may also be system administrators, and which are appointed as such, external relations staff also external to the Company, staff in charge of mailing and enveloping also external to the Company, internal auditors, trainees, staff of data processors) and to data processors (for example, companies that carry out activities that are instrumental to those of illycaffè S.p.A., such as, for example, enveloping/shipping, management of IT systems, management of the website). The list of Data Processors is always available by contacting the Data Controller at the addresses indicated in point 6.

5.    Data retention
Data will be retained by illycaffè for the entire period necessary for the pursuit of the purposes contained in this information. The data retention period is as follows:
-   for legal obligations, regulations and community regulations, data may be retained for the periods imposed by these regulatory sources;
-  for the purposes described in point 2(A) of this policy, the data can be retained until the withdrawal of consent or request for cancellation;
in any case, all data may be retained for a period necessary to assert or defend a company right according to Italian and European regulations.

6.    Data Controller and Data Protection Officer
The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39.040.3890.111, fax number +39.040.3890.490, e-mail: infoprivacy@illy.com. There is also a Data Protection Officer available at the email address dpo@illy.com and at the addresses of the Company.

7.    Rights
We inform you that the GDPR allows the data subject to request to the Data Controller (at the contacts mentioned above) full access to personal data and its correction, cancellation or limitation of the processing and to object to the processing, in addition to exercising the right to data portability, as well as other rights provided for by Chapter 3 of the GDPR, including that of revoking consent, where envisaged: the revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation.

8.    Complaints
The data subject can file a complaint with the Italian Data Protection Authority whose contacts are available on the website www.garanteprivacy.it.

9.    Processing procedures
We inform you that such data will be processed and stored by illycaffè manually, on paper, computerized or telematic systems. Protection systems are in force to ensure confidentiality. All data will be stored and processed confidentially in compliance with all applicable regulations (in particular, the principles of correctness, lawfulness, transparency, and protection of confidentiality and rights) and strictly for the purposes referred to in this policy. The data will undergo only the operations necessary for the purposes referred to in this policy. The data will be stored by the data processors appointed by illycaffè S.p.A. as well as the third parties to whom the data is transmitted in compliance with this policy. The data may also be organized in databases (also electronic ones).

10.    Access to collaborators
If you decide to allow access to your collaborators through the appropriate sharing function, you undertake to inform the collaborator of the communication of him/her e-mail to illycaffè so that illycaffè can send an e-mail containing the link to register, obtaining him/her consent, and informing him/her of everything contained in this privacy policy as well as the optional nature of the provision.

Policy updated on 20th October 2021.