Precontracttual Policy Privacy International Account that are in a Network
1. General information
2. Purposes and legal basis
illycaffè may process data for the following purposes:
A. For contacting the data subject (including through the persons representing him or her or appointed to manage commercial relations) or having him or her contacted by the local distributor, in order to establish a possible commercial relationship. The processing is based on the following legal basis: necessity in order to take steps at the request of the data subject prior to entering into a contract
B. to fulfil law obligations, European regulations and registrations. The processing is based on the following legal basis: the fulfillment of legal obligations
C. for legitimate interests such as to assert or defend an illycaffè rights. The processing is based on the following legal basis: the fulfillment of legitimate interests;
3. Mandatory nature of the provision
The communication of the required data is necessary for the purposes stated at point 2 (A), 2 (B), 2 (C) and therefore refusal to provide such data, be it total or partial, may make it impossible for the Company/their distributor to start a commercial negotiation.
4. Data recipient categories
Notwithstanding any further communication (of which you will be informed unless not yet communicated) that may be necessary for the fulfilment of legal and pre-contractual obligations, the Company may transmit the collected and processed data for those purposes listed under point no.2 letter A a.: distributors, post offices-couriers (communication of data necessary to send the possible aforementioned communications). For the purposes listed at point no.2 (B) data can be communicated to judicial authorities and police and supervisory bodies, public institutions. For the purposes listed at point no.2 (C) data can be communicated to judicial authorities and police and supervisory bodies, professionals (e.g. legal ones), public institutions, post offices-couriers (by communicating the necessary data to send the possible aforementioned communications). The data may also be known and processed by persons specifically delegated by illycaffè to process the data (administrative/legal, technical/IT and logistic staff, also outside illycaffè, members of the social bodies, heads of sector, consultants - e.g. lawyers, legal experts, quality/certifications, IT consultants, tax consultants - trainees, internal auditors, employees of data processors). The data may also be communicated to data processors appointed by illycaffè (e.g. companies/consultants that carry out activities ancillary to those of the illycaffè, such as, for example, tax, accounting and auditing consultancies/consultants, logistics and shipping companies, IT consultancy companies/consultants). The list of data processors can be found at illycaffè (by contacting them at the addresses indicated in point 6).
5. Data retention
Data can be retained and processed by the Company during the whole period necessary to pursue the purposes stated in this information report. The period of data retention is the following:
- for pre-contract purposes until the possible approval or formalisation of the contract or until te communication to the distributor, except possible further retention provided for by italian law and european laws;
- for law obligations, European regulations and laws, data can be retained for periods of time set by said legislative sources;
in any case all data can be retained for such a period as necessary to exercise or defend company’s rights according to talian and European laws.
6. Data Controller and Data Protection Officer
The Data Controller is illycaffè S.p.A., having its registered office in via Flavia, 110 – 34147-Trieste (TS), Italy, telephone number +39.040.3890.111, fax number +39.040.3890.490, e-mail: email@example.com. There is also a Data Protection Officer available at the email address firstname.lastname@example.org and at the addresses of the Company.
We inform you that the GDPR allows you to request from the data controller (at the addresses indicated above) access to personal data and rectification of data, cancellation of data or limitation of the processing that concerns it, data portability; you may also have the possibility to oppose the processing of data and to exercise the other rights contained in Chapter 3 section 1 of the GDPR, including the right to revoke consent, if possible. The revocation of consent does not affect the lawfulness of processing based on the consent given prior to the revocation.
The data subject, If considers that the processing of their personal data is in violation of the GDPR, can always adress a complaint with the Italian Data Protection Authority, whose references can be found on the website www.garanteprivacy.it
9. Data of collaborators
10. Processing procedures