illy ArtWorks - Image Banking

Why the present document

This page describes the site's procedures for the processing of the personal data of its users. Data are always processed within the law and to the highest ethical standards in accordance with all relevant legal requirements ((and thus also in accordance with the principles of ethics, legality, transparency and the protection of privacy and rights) and thus by methods strictly correlated to the purposes pursued.

Giving due consideration to technological innovations, suitable prevent measures are adopted by illycaffè S.p.A. (hereinafter also 'illycaffè' or 'Company') when using personal data, in order to minimise the risk of even accidental destruction or loss, unauthorised access to the data, or uses which are illegal or incompatible with the purposes for which the data were acquired. illycaffè will only perform on the data the operations necessary for the pursuance of the purposes specified in the aforesaid notice and in the privacy policy statement given to the users to the collection of personal data.

Data will be conserved and used for a period appropriate to the relative purposes and compliant with the relevant legal requirements. Data may also be organised in databanks/databases, including electronic databases.

The privacy policy information is also provided as a short notice pursuant to EU 2016/679 to all those who interact with the web services of this site, for the purposes of the protection of the personal data accessible by internet through the address:

artworks.illy.com

the address of the site's home page.

The information is provided solely for the site specifically referred to and not for any other websites the user may visit by means of links. The aforesaid websites are independent data controllers (except in the case of sites belonging to the company) and users should refer to the sites concerned.

The information is also based on Recommendation n. 2/2001, adopted by the European data protection authorities, meeting in the Group established by art. 29 of Directive 95-46-EC, on 17th May 2001 to set a number of minimum requirements for the on-line acquisition of personal data, and especially procedures, times, and the information the data controllers are required to provide to users when they log on to web pages, regardless of their reason for doing so.

The server on which the website resides is at web farm Aruba S.p.a, Via Sergio Ramelli 8 - 52100 Arezzo (AR) - Italy.

In addition to server address, data may be processed at illycaffè S.p.A.'s head-office or wherever data processors appointed by illycaffè S.p.A. may be based (as well as on the premises of third parties to whom the data can be communicated in quality of Data Processors and that are indicated in such policy or in appropriate privacy policy statement inside of the site).

Users are however advised to view all the specific information provided in the various sections of the site.

Types of data processed and procedures of processing data

Navigation data

During their normal operation, the IT systems and software procedures which operate this website acquire some personal data the transmission of which is implicit in the use of Internet communications protocols.

These data are not gathered for association with identified subjects, but by their very nature, when processed or associated with data held by third parties, they might allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who log onto the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used when submitting the request to the server, the size of the file obtained in reply, the numerical code indicating the server's response status (concluded successfully, error, etc.) and other parameters relating to the user's operating system and IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information concerning use of the site and to check that it is operating correctly and are deleted immediately after processing. The data might be used to identify those responsible in the event of IT crime against the site or more generally against the company.

The data could be processed by illycaffè manually, on paper or using IT or telematic means (and therefore illycaffè will store and process the data on paper or IT media).

Cookies

Definition of cookies
Cookies are small text files that are sent to your computer.

Session cookies
So-called session cookies (i.e. temporary cookies that are erased when the browser is closed at the end of a surfing session) are solely used for transmitting session identifying data in the form of numbers randomly generated by the server. These cookies are necessary to ensure secure and efficient site browsing.

Session cookies are used in this site precisely to ensure maximum user privacy during surfing as they do not permit acquisition of user's personal details that would otherwise permit user identification and recognition.

Data supplied voluntarily by the user
For specific provisions for which there is a specific form (e.g. form of registration) it is better to refer to the specific privacy policy statement.

The optional, explicit, voluntary dispatch of electronic mail to the addresses provided on this site (in the event in which it is only indicated address email and does not exist an appropriate form in presence of which it is better to refer to the specific notices that regulate the provision in the various form), leads by illycaffè to the subsequent acquisition of the sender's address, necessary in order to reply to the enquiry, and any other personal data included in the message (and its attachments) or the specific forms used. In this case (where email address is provided alone, without a specific form of compilation in the presence of which refer to specific information governing the provision in various forms) the provision of data is optional but failure to provide an address or other data necessary for dealing with the request will make any reply to the email, and thus the fulfilment of the request, impossible. With the sending of the e-mail the person concerned shall authorize illycaffè to the processing of data for responding to the requests.

In case of requests for material shipment, the necessary data to the shipment could be communicated by illycaffè to mail-carriers.

Data, in paper or electronic format, could be dealt by illycaffè manually or with computerized instruments.

Data Controller and Data Protection Officer
The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39.040.3890.111, fax number +39.040.3890.490, e-mail: infoprivacy@illy.com. There is also a Data Protection Officer available at the email address dpo@illy.com and at the addresses of the Company.

Rights
We inform you that the GDPR provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.

Complaints
The data subject can always lodge a complaint with a supervisory authority whose references can be found on the website www.garanteprivacy.it/web/guest/home/footer/link.

Legal Basis
The legal basis the legal basis consists of legal obligations (Italian and European laws) as well as the legitimate interests of the Data Controller in the customer-supplier relationship. Furthermore, for the purposes for which consent is provided, the legal basis is the consent itself. The processing takes place in Italy.

Context of communication and disclosure of personal data
No data is being disclosed by illycaffè

For specific processing for which there is a specific form (e.g. form of registration) it is better to refer to the specific notices.

For any other processing, the data may be disclosed on behalf of illycaffè, each for own role, to all subjects delegated by illycaffè (IT staff that can also carry out tasks of system administrators being appointed as such in this case, IT technicians also external to the Company, that can also carry out tasks of system administrators being appointed as such in this case, envelope filling and mailing staff also external to the Company, website management staff also external to the Company, legal staff, consultants also external to the Company, staff of internal and external Data Processors) and to internal and external Data Processors (eg. companies that perform activities of mailing, management and maintenance of server, website management).

If necessary, the data can also be communicated by illycaffè to judicial bodies or to the police or to anyone it is necessary in order to satisfy obligation provided for the law, regulations or EU law or in order to assert a right during judicial proceedings.

Optional or compulsory provision data and procedures of processing
For a complete information on the processing of the data by illycaffè, we invite you to take vision of all the information contained within the various areas of application of the data and all sections of this privacy policy.

Specific Notices
As already mentioned, specific summary information is available on the site in the pages of the site prepared for particular services on request. Please also refer to these information that integrate this policy.

N.B. The consent can only be given by persons over 16 years, if the subject is under 16, he cannot use what is provided for in the purposes for which consent is required (eg. registration, ... ).

This privacy policy is updated as at 25/05/2018. Such update is carried out inside of policy of constant review of the informative ones. The versions of the previous policy statements are available writing to Data Controller (email dpo@illy.com).

Privacy policy pursuant to Regulation (EU) 2016/679 (GDPR) and national legislation in force

General information
With the present policy statement, illycaffè S.p.A. (hereby referred to as the 'Company" or 'illycaffè') informs you on the purposes and modalities for processing the personal data (provided by yourself) which it shall possess.
Purposes
illycaffè may process data for the following purposes:
A. to allow you to register yourself in the website, to recognize you as an authorized user, and to grant you access to the reserved areas and documentation (in accordance with the purpose you have indicated);
B. to be compliant with the requirements pursuant to the legislation in force, regulations or EU regulations and for legitimate interests such as to assert or defend the rights of the Company in the appropriate offices.
Mandatory nature of the provision
The provision of data indicated as mandatory in the form and requested for the purposes set out under point 2 lett. A of the present policy statement is optional for the purposes set out under point 2 lett. A of the present policy statement; nevertheless, it is indispensable for website registration and for accessing the website's services. The provision of data indicated as optional is optional, and failure to provide said data shall not result in any prejudice to the possibility of registering with the website and accessing the services contained therein (said data can only be used for better identifying those who register). It is evident that failure to consent to data processing for the purposes set out under point 2 lett. A of the present policy statement shall result in failure to register with the website and failure to access the services contained therein. The provision of data (personal data, address, and other data requested in case of controversies or to exert one's rights for the purposes set out under point 2 lett. B of the present policy statement is necessary, and failure to do so shall result in failure to register.
Data recipient categories
illycaffè shall be authorized to communicate the data for the purposes described in point 2 lett. B of this policy statement (communicating only the data necessary for fulfilling these purposes) to: judicial authorities, excise and revenue police, law enforcement agencies, and public bodies (whenever there is the obligation to do so) as well as law firms, legal consultants, post offices and couriers (who shall be able to see the address in order to send any written communications). illycaffè shall not communicate the data for the purposes described in point 2 lett. A of this policy statement. The data may be disclosed on behalf of illycaffè, each for own role, to all subjects delegated by illycaffè (envelope filling and mailing staff also external to the Company; marketing staff and website management staff also external to the Company; IT technicians also external to the Company, that can also carry out tasks of system administrators being appointed as such in this case; IT staff that can also carry out tasks of system administrators being appointed as such in this case; external relations officers, also external to the Company; legal office staff; freelancers and consultants such as legal consultants and IT technicians, staff of internal and external Data Processors) and to internal and external Data Processors (eg. companies performing activities instrumental to those of illycaffè S.p.A., such as, for example, marketing, shipping, call centers, public relations, management of information systems, and website management).
Data retention
Data will be retained by illycaffè for the entire period necessary for the pursuit of the purposes contained in this information. The data retention period is as follows:
- or legal obligations, regulations and community regulations, data may be retained for the periods imposed by these regulatory sources;
- for the purposes described in point 2 lett. A of this policy, the data can be retained until the withdrawal of consent or request for cancellation;
- or legal obligations, regulations and community regulations, data may be retained for the periods imposed by these regulatory sources;
in any case, all data may be retained for a period necessary to assert or defend a company right according to Italian and European regulations.
Data Controller and Data Protection Officer
The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39.040.3890.111, fax number +39.040.3890.490, e-mail: infoprivacy@illy.com. There is also a Data Protection Officer available at the email address dpo@illy.com and at the addresses of the Company.
Rights
We inform you that the GDPR provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.
Complaints
The data subject can always lodge a complaint with a supervisory authority whose references can be found on the website www.garanteprivacy.it/web/guest/home/footer/link.
Legal Basis
The legal basis the legal basis consists of legal obligations (Italian and European laws) as well as the legitimate interests of the Data Controller in the customer-supplier relationship. Furthermore, for the purposes for which consent is provided, the legal basis is the consent itself. The processing takes place in Italy.
Dati di collaboratori/dipendenti
If you enter the references of the company / entity for which you work, you assume the obligation and responsibility to be authorized by that company / entity to enter the data and also assumes the obligation and responsibility to inform the company/entity for which you work of all that is contained in this information.
Processing procedures
Data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support). illycaffè has implemented safety measures to prevent any data loss, illegal use of data, misuse or unauthorised access. Data will be retained and processed by illycaffè in compliance with its confidentiality requirements and with the applicable local provisions in the different states in which illycaffè has its offices (in compliance with the principles of fairness, lawfulness, transparency, and protection of the confidentiality and the rights of those concerned) strictly in line with the aims set forth in this privacy policy. Data will be processed by illycaffè exclusively to achieve the aims set forth in this privacy policy. Data will be filed at illycaffè S.p.A. offices and at the appointed data processors (as well as third parties who receive data as specified in point 4 of this privacy policy). Data will be entered in databases, including IT databases.

N.B. The consent can only be given by persons over 16 years, if the subject is under 16, he cannot use what is provided for in the purposes for which consent is required (eg. registration, ... ).

Privacy Policy