Why the Present Document
The present document describes how personal data of users are processed in this website. Data are processed in compliance with lawfulness and fairness requirements and with the applicable regulations principles of need, fairness, lawfulness, transparency and confidentiality) strictly in line with the aims set forth in this privacy policy.
Personal data are processed by illycaffè S.p.A. (hereinafter referred to as "illycaffè" or the "Company") also building on technology innovation with a view to minimizing – with proper prevention measures – the risk of destruction or loss, including accidental loss, unauthorised access of data or processing actions which are illegal or incompatible with the aims for which data have been collected. Data will only be processed to achieve the aims described in this privacy policy and in other policies notified to users as their data are collected.
Data are retained and processed for the time required to achieve the aims of the processing and in compliance with any applicable regulations. Data may also filed in databases, including IT databases.
This privacy policy is also intended as a summary notice, pursuant to EU 2016/679, to users of web services of this website to protect personal data that may be accessed electronically on:
www.illy.com
the opening page of this website.
This privacy policy is strictly referred to the present website, not for other websites that users may access by clicking on the relevant links. These websites are independent data controllers (save as for the Company websites, such as the e-shop) and therefore reference must be made to the relevant policy.
This privacy policy is also based on the recommendation n. 2/2001 that the European Data Protection Authorities – i.e. members of the Working Group set up in line with article 29 of the directive 95/46/EC – adopted on 17 May 2011 to identify a series of minimum standards on online collection of personal data, in particular procedures, time limits and nature of data. Data controller are required to provide users with the relevant information when they visit their web pages irrespective of the aims of the access.
The server hosting the website is located at: Engineering D.Hub S.p.A.- Via Carlo Viola 76 - 11026 Pont Saint Martin (AO) Italy.
Besides the place where the server is located, data may be processed at the headquarters of illycaffè or at the headquarters of the data processors that may be appointed by illycaffè (as well as third parties that may receive data as independent data controllers and which are listed in this privacy policy or in the relevant policies of this website).
Please, read all relevant privacy policies in this website.
Type of processed data and processing procedures
Navigation Data
IT systems and software procedures of this website, in the framework of their regular operation, acquires some personal data whose transfer is implicit in the use of Internet communication protocols.
These data are not collected with a view to linking them to their holders. However, these are data that, by their very nature, with processing and cross-reference with data of third parties, may identify users.
This data category includes IP addresses or domain names of computers of users visiting the website, URI (Uniform Resource Identifier) addresses of required resources, the time of the request, the method used to send the request to the server, the size of the obtained file, the numeric code on the reply status of the server (sent, error, etc.) and other requirements of the operative system and the IT environment of users.
These data are used by illycaffè with the exclusive aim of collecting anonymous statistical information on the website use and to supervise its smooth operation, and they are deleted immediately after processing. Data may be used to determine any liability in the event of IT crimes against the website or, in general, against the Company.
Data may be processed on paper, manually, with IT and electronic means (therefore, illycaffè may file data both on paper and IT support).
Cookies
Definition of cookies
Cookies are small text files that are sent to your computer.
The site in question uses the following types of cookies:
Technical session cookies
So-called session cookies are solely used for transmitting session identifying data in the form of numbers randomly generated by the server. These cookies are necessary to ensure secure and efficient site browsing.
Session cookies are used in this site precisely to ensure maximum user privacy during browsing as they do not permit acquisition of user’s personal details that would otherwise permit user identification and recognition. These cookies are processed with electronic means.
Additional technical cookies
illycaffè uses some technical cookies:
- cookie of agreement: it is inserted to record the consent to the use of cookies analytics and / or profiling. You are free to delete cookies from your computer.
- cookie shopping basket: it is used to fill the cart in shopping online.
- additional technical cookies. There are other technical cookies essential for the proper operation of the website. These cookies allow you to provide the services requested by users and to browse the site using its best performance. This type of cookie cannot be disabled because it is necessary for the proper operation of the site.
Analytic cookies
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States . Google (Data Controller) will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
For further information please refer to http://www.google.com/policies/privacy/.
Our web site may use SessionCam for analysis. SessionCam is a product that has been developed by SessionCam LTD. SessionCam may record mouse clicks, mouse movements, page scrolling and any text keyed into website forms. The information collected does not include bank details or any sensitive personal data. Data collected by SessionCam from illycaffè S.p.A. website is for illycaffè S.p.A. internal use only. The information collected is used to improve our website usability and is stored and used for aggregated and statistical reporting.
For further information please refer to http://www.sessioncam.com/privacy-policy-cookies/.
Profiling/advertising cookie of third parties
These cookies collect information about your browsing habits in order to offer advertising that is relevant and targeted to your interests. Your personal information will not be tracked, but you should visit the site http://www.youronlinechoices.com/it/ for more information. Removing these cookies will not be lost any functionality
Third parties are Data Controller, please refer to their privacy policy, below there is a list of the third parties:
GOOGLE ANALYTICS, ADWORDS, ADMOB, DOUBLECLICK for more information visit http://www.google.com/policies/privacy/
AUDIENCE STREAM for more information visit https://tealium.com/privacy/
CHANNEL ADVISOR for more information visit https://www.channeladvisor.com/privacy-policy/
SESSION CAM for more information visit https://sessioncam.com/privacy-policy-cookies/
DOUBLECLICK for more information visit http://www.google.com/policies/privacy/
CJ AFFILIATE BY CONVERSANT for more information visit https://www.conversantmedia.com/legal/privacy
REASONATE ANALYTICS for more information visit https://www.resonate.com/privacy-policy/
QUANTCAST for more information visit https://www.quantcast.com/how-we-do-it/consumer-choice/privacy-policy/
DATAXU for more information visit https://www.dataxu.com/about-us/privacy/
PEBBLE POST for more information visit https://pebblepost.com/documents/privacy-policy
TURN e AMOBEE for more information visit https://www.amobee.com/trust/privacy-guidelines
MNIX for more information visit https://subscription.timeinc.com/storefront/privacy/tio/generic_privacy_new.html?dnp-source=E
LINKEDIN for more information visit https://www.linkedin.com/legal/privacy-policy
FACEBOOK for more information visit https://www.facebook.com/policy.php
SHOPSOCIALLY for more information visit https://shopsocially.com/platform/privacy-policy
PINTEREST for more information visit https://policy.pinterest.com/en/privacy-policy
SOCIOMANTIC for more information visit https://www.sociomantic.com/privacy/it/
EBAY for more information visit https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260
SHAREASALE for more information visit http://shareasale.com/PrivacyPolicy.pdf
LINQIA for more information visit http://www.linqia.com/privacy-policy/
CONVERSANT for more information visit http://www.conversantmedia.com/legal/privacy
BING for more information visit https://privacy.microsoft.com/en-us/privacystatement
PAYCLICK for more information visit https://payclick.it/it/privacy
TWITTER for more information visit https://twitter.com/it/privacy
AMAZON for more information visit https://www.amazon.com/gp/help/customer/display.html?nodeId=468496
DATAWAD for more information visit http://www.datawad.com/privacy/
MEDIAMIND for more information visit http://origin.www.mediamind.com/privacy-policy
YAHOO for more information visit https://policies.yahoo.com/xa/en/yahoo/privacy/index.htm
SMART AD SERVER for more information visit http://smartadserver.it/privacy-policy
TABOOLA for more information visit https://www.taboola.com/privacy-policy
ADFORM for more information visit https://site.adform.com/privacy-policy-opt-out/
RESPONSYS, BLUEKAI for more information visit https://www.oracle.com/legal/privacy/privacy-policy.html
illycaffè’s cookies are processed with electronic means.
How to delete Cookies
Most browsers allow you to reject/accept cookies. Below we present some practical information to disable cookies on major web browsers
Chrome:
Select the top right icon to open the personalization dropdown menu
Select More tools.
Select Clear browsing data.
In the box that appears, select “Cookies and other site and plug-in data,” and "Cached images and files.”
On the menu box at the top, select "beginning of time" to delete everything.
Select Clear browsing data.
Mozilla Firefox
Go to 'Tools' in the menu bar
Click on 'Options'
Click on 'Privacy Tab'
Click on "Clear Now"
Select "Cookies"
Click on "Clear Private Data Now"
Internet Explorer
Select “Tools”
Select “Internet Properties”
In “General” tab select “Delete…”
Select the option “Cookie”
Select “Delete”
Safari
Click Safari then Preferences. Click on 'Privacy.'
Click on 'Details.'
You will see a list of websites that store cookies. You can remove single sites by clicking the 'Remove' button and selecting a site. If you want clear all cookies, click 'Remove All.'
When you have finished removing sites, click 'Done.'
How to browse without cookies
Google Chrome
Select the top right icon to open the personalization dropdown menu
Select “New Incognito Window”
Mozilla Firefox
Select the top right icon to open the personalization dropdown menu
Select “Select New Private Window”
Internet Explorer
Select “Tools”
Select “Safety”
Select “InPrivate Browsing”
Safari
Select the Gear icon to open the personalization menu
Select “Private Browsing...”
Click OK
Data that users provide on a voluntary basis
As for specific data collected with relevant forms (i.e. navigation forms), reference is hereby made to the relevant forms and the relevant privacy policies.
The optional, explicit and voluntary sending of emails to the addresses listed on the website (if an email address is reported instead of a form that must filled out, including references to the relevant privacy policies) requires illycaffè to acquire the sender's address for the relevant reply as well as any other personal data included in the email (or in the relevant attachments) or in the relevant forms. In this event (email only without forms that must filled out, including references to the relevant privacy policies), provision of data is not mandatory. However, should data or the relevant email address not be provided, the relevant request cannot be fulfilled. By sending an email, the sender authorises illycaffè to process data with a view to fulfilling the relevant requests.
For any request for materials, illycaffè may disclose the relevant data for the delivery to the mail /courier companies.
illycaffè may process data, whether on paper or on IT support, both manually and with other IT or electronic means.
Data Controller and Data Protection Officer
The Data Controller is illycaffè S.p.A, having its registered office in via Flavia 110, in Trieste, ph. +39.040.3890.111, fax +39.040.3890.490. There is also a Data Protection Officer available at the email address dpo@illy.com and at the addresses of the Company.
Rights
We inform you that the GDPR provides the possibility for the data subject to ask the Data Controller (at the above addresses) to access personal data and to correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability, as well as other rights contained in Chapter 3 of the GDPR including the revocation of consent, where provided: the withdrawal of consent does not affect the lawfulness of the processing based on consent given before revocation.
Complaints
The data subject can always lodge a complaint with the Italian Data Protection Authority, whose references can be found on the website www.garanteprivacy.it.
Legal Basis
The legal basis the legal basis consists of legal obligations (Italian and European laws) as well as the legitimate interests of the Data Controller in the relationship with the user. Furthermore, for the purposes for which consent is provided, the legal basis is the consent itself.
Notice and Disclosure Scope
No data from the web service (i.e. the above navigation data) may be notified or disclosed (except for notification to the judiciary or the police, if required).
As for processing based on the relevant forms in the website (i.e. registration), reference is hereby made to the relevant forms and any applicable rules.
The data may be disclosed on behalf of illycaffè, each for own role, to all subjects delegated by illycaffè (administrative staff, staff in charge of external relations, other staff described in the relevant privacy policies, IT staff that may also be system managers, IT experts, also external to the Company that may also be system managers, members, agents, marketing staff also external to the Company, staff of the enveloping and mailing department, staff of the internal and external Data Processors, staff of the Internet website administration, also external to the Company, attorneys, also external to the Company, staff of the legal office) and to the internal and external Data Processors (e.g. outsourcers in charge of mailing, marketing, administration and maintenance of servers, website administration). The list of Data Processors is always available by contacting the Data Controller.
If needed, illycaffè may disclose data to the judiciary or to the police or to any other organisation requiring them pursuant to the law, the regulations in force or EU regulations and for legitimate interests such as to assert or defend the rights of the Company.
Option to provide data and processing procedures
For a complete information on the treatment of the data by illycaffè, we invite you to take vision of all the information contained within the various areas of application of the data and all sections of this privacy policy.
Specific Notices
As already reported, this website includes other specific summary privacy policies in pages on services on request. Reference is hereby made to such privacy policies integrating this privacy policy.
N.B. The consent can only be given by persons over 14 years, if the subject is under 14, he cannot use what is provided for in the purposes for which consent is required (e.g. receiving commercial communication, ... ).
This privacy policy is updated as at 18/12/2018. Updates are implemented in the framework of a policy on a steady review of privacy policies and they will be loaded on this page. Previous versions of privacy policies may be obtained by writing to Data Controller (email: dpo@illy.com).