Why the present document
This page describes the site's procedures for the processing of the personal data of its users. Data are always processed within the law and to the highest ethical standards in accordance with all relevant legal requirements ((and thus also in accordance with the principles of ethics, legality, transparency and the protection of privacy and rights) and thus by methods strictly correlated to the purposes pursued.
Giving due consideration to technological innovations, suitable prevent measures are adopted by illycaffè S.p.A. (hereinafter also 'illycaffè' or 'Company') when using personal data, in order to minimise the risk of even accidental destruction or loss, unauthorised access to the data, or uses which are illegal or incompatible with the purposes for which the data were acquired. illycaffè will only perform on the data the operations necessary for the pursuance of the purposes specified in the aforesaid notice and in the privacy policy statement given to the users to the collection of personal data.
Data will be conserved and used for a period appropriate to the relative purposes and compliant with the relevant legal requirements. Data may also be organised in databanks/databases, including electronic databases.
The privacy policy information is also provided as a short notice pursuant to EU 2016/679 to all those who interact with the web services of this site, for the purposes of the protection of the personal data accessible by internet through the address:
the address of the site's home page.
The information is provided solely for the site specifically referred to and not for any other websites the user may visit by means of links. The aforesaid websites are independent data controllers (except in the case of sites belonging to the company) and users should refer to the sites concerned.
The information is also based on Recommendation n. 2/2001, adopted by the European data protection authorities, meeting in the Group established by art. 29 of Directive 95-46-EC, on 17th May 2001 to set a number of minimum requirements for the on-line acquisition of personal data, and especially procedures, times, and the information the data controllers are required to provide to users when they log on to web pages, regardless of their reason for doing so.
The server on which the website resides is at web farm Aruba S.p.a, Via Sergio Ramelli 8 - 52100 Arezzo (AR) - Italy.
In addition to server address, data may be processed at illycaffè S.p.A.'s head-office or wherever data processors appointed by illycaffè S.p.A. may be based (as well as on the premises of third parties to whom the data can be communicated in quality of Data Processors and that are indicated in such policy or in appropriate privacy policy statement inside of the site).
Users are however advised to view all the specific information provided in the various sections of the site.
Types of data processed and procedures of processing data
Navigation data
During their normal operation, the IT systems and software procedures which operate this website acquire some personal data the transmission of which is implicit in the use of Internet communications protocols.
These data are not gathered for association with identified subjects, but by their very nature, when processed or associated with data held by third parties, they might allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who log onto the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used when submitting the request to the server, the size of the file obtained in reply, the numerical code indicating the server's response status (concluded successfully, error, etc.) and other parameters relating to the user's operating system and IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information concerning use of the site and to check that it is operating correctly and are deleted immediately after processing. The data might be used to identify those responsible in the event of IT crime against the site or more generally against the company.
The data could be processed by illycaffè manually, on paper or using IT or telematic means (and therefore illycaffè will store and process the data on paper or IT media).
Cookies
Definition of cookies
Cookies are small text files that are sent to your computer.
Session cookies
So-called session cookies (i.e. temporary cookies that are erased when the browser is closed at the end of a surfing session) are solely used for transmitting session identifying data in the form of numbers randomly generated by the server. These cookies are necessary to ensure secure and efficient site browsing.
Session cookies are used in this site precisely to ensure maximum user privacy during surfing as they do not permit acquisition of user's personal details that would otherwise permit user identification and recognition.
Data supplied voluntarily by the user
For specific provisions for which there is a specific form (e.g. form of registration) it is better to refer to the specific privacy policy statement.
The optional, explicit, voluntary dispatch of electronic mail to the addresses provided on this site (in the event in which it is only indicated address email and does not exist an appropriate form in presence of which it is better to refer to the specific notices that regulate the provision in the various form), leads by illycaffè to the subsequent acquisition of the sender's address, necessary in order to reply to the enquiry, and any other personal data included in the message (and its attachments) or the specific forms used. In this case (where email address is provided alone, without a specific form of compilation in the presence of which refer to specific information governing the provision in various forms) the provision of data is optional but failure to provide an address or other data necessary for dealing with the request will make any reply to the email, and thus the fulfilment of the request, impossible. With the sending of the e-mail the person concerned shall authorize illycaffè to the processing of data for responding to the requests.
In case of requests for material shipment, the necessary data to the shipment could be communicated by illycaffè to mail-carriers.
Data, in paper or electronic format, could be dealt by illycaffè manually or with computerized instruments.
Data Controller and Data Protection Officer
The Data Controller is illycaffè S.p.A., having its registered office in via Flavia 110, Trieste, phone number +39.040.3890.111, fax number +39.040.3890.490, e-mail: infoprivacy@illy.com. There is also a Data Protection Officer available at the email address dpo@illy.com and at the addresses of the Company.
Rights
We inform you that the GDPR provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.
Complaints
The data subject can always lodge a complaint with a supervisory authority whose references can be found on the website www.garanteprivacy.it/web/guest/home/footer/link.
Legal Basis
The legal basis the legal basis consists of legal obligations (Italian and European laws) as well as the legitimate interests of the Data Controller in the customer-supplier relationship. Furthermore, for the purposes for which consent is provided, the legal basis is the consent itself. The processing takes place in Italy.
Context of communication and disclosure of personal data
No data is being disclosed by illycaffè
For specific processing for which there is a specific form (e.g. form of registration) it is better to refer to the specific notices.
For any other processing, the data may be disclosed on behalf of illycaffè, each for own role, to all subjects delegated by illycaffè (IT staff that can also carry out tasks of system administrators being appointed as such in this case, IT technicians also external to the Company, that can also carry out tasks of system administrators being appointed as such in this case, envelope filling and mailing staff also external to the Company, website management staff also external to the Company, legal staff, consultants also external to the Company, staff of internal and external Data Processors) and to internal and external Data Processors (eg. companies that perform activities of mailing, management and maintenance of server, website management).
If necessary, the data can also be communicated by illycaffè to judicial bodies or to the police or to anyone it is necessary in order to satisfy obligation provided for the law, regulations or EU law or in order to assert a right during judicial proceedings.
Optional or compulsory provision data and procedures of processing
For a complete information on the processing of the data by illycaffè, we invite you to take vision of all the information contained within the various areas of application of the data and all sections of this privacy policy.
Specific Notices
As already mentioned, specific summary information is available on the site in the pages of the site prepared for particular services on request. Please also refer to these information that integrate this policy.
N.B. The consent can only be given by persons over 16 years, if the subject is under 16, he cannot use what is provided for in the purposes for which consent is required (eg. registration, ... ).
This privacy policy is updated as at 25/05/2018. Such update is carried out inside of policy of constant review of the informative ones. The versions of the previous policy statements are available writing to Data Controller (email dpo@illy.com).