Privacy policy

Privacy

Why the present document

The present document describes website user personal data processing procedures. Processing is made according to principles of correctness, permissibility, transparency, and confidentiality, and in such a way as to ensure utmost user protection in strict compliance with all prevailing laws and with logics rigorously consonant with declared scopes.

Thanks to state-of-the-art technology and special security measures, personal details are processed so as to minimise the risk of their destruction or loss, even accidental, or of unauthorised access or improper use, that is use that may be unlawful or incompatible with the declared scope for which the personal data is collected.

Data will be stored for as long as they need to be processed for the purposes set out hereunder and according to applicable law. Data may also be organised in databanks/databases, including computer-managed ones.

The present privacy policy document is also given by way of a statement pursuant to art. 13 of Decree Law 196/03 (Italian personal data processing and protection law, enacting European Directive 95-46-EC), informing whomsoever may interact with the web services provided under the present website as to processing procedures so as to best protect user personal details as may hereupon be submitted. To access the website beginning from the homepage digit:

www.illywords.com

The present statement and its contents strictly refer to the present website and not to any other the user may access via links. Excepting websites belonging to the firm, said other websites have separate and independent data controllers, as may thereunder be specified.

The present statement has been drawn up taking also into account Recommendation n. 2/2001 dated 17 May 2001 adopted by the European personal data protection authorities united in the Group set up under art. 29 of Directive n. 95-46-EC. The Recommendation provides basic guidelines for collecting personal data on-line. In particular, data controllers are recommended to fully inform website users, regardless of the reasons users may have for accessing the website, as to the methods by which data are collected, times, and the nature of the information collected.

The server hosting the website resides with KPNQwest Italia SpA, Via Leopardi 9, 20123 Milano MI – VAT Reg. No. 07957860153.

In addition to server address, data may be processed at illycaffè S.p.A.’s head-office or wherever data processors appointed by illycaffè S.p.A. may be based.

Users are in any case advised to familiarise themselves with the contents of specific privacy statements as may be found in the various sections of the site.

Type of processed data, processing methods, processing purposes, optional or compulsory

Surfing data

During routine operations the computer systems and software procedures by which the present website is managed acquire user personal details the transmission of which is intrinsic to the use of internet communication protocols.

Information so acquired is not collected for associating it with and thus identify the interested user. By its very nature and through subsequent processing and association with data held by third parties, the user may, however, be identified.

Information automatically acquired by the system includes: IP addresses or the names of the domain of users’ computers that link up to the site; addresses in Uniform Resource Identifier (URI) notation of the requested resources; request time; method of submission of the request to the server; the size of the file obtained in reply; the numerical code specifying server reply status (operation completed, error, etc.); other user operating system and computer environment parameters.

All data thus acquired shall solely be processed for statistical purposes as to the use of the site and to check that it is properly operating. They may, however, also be used to trace liability in the event of the site being damaged by fraudulent or criminal action. In such cases or whenever requested on legitimate grounds by authorities having jurisdiction thereof, said data may be disclosed to said authorities.

Information freely submitted by the user

E-mails optionally, voluntarily and explicitly addressed to the accounts specified hereunder necessarily entail subsequent acquisition by the recipient of the sender’s e-mail address for a reply, along with any other personal detail as may be contained in the message or attachments thereof, or in any special form, where contemplated. When only an e-mail contact is specified without any form having to be completed, it is understood that by sending an e-mail to the contact account the user authorises processing of acquired data (that is sender’s e-mail account and information contained in the message by way of user’s request or inquiry) by illycaffè. Processing shall in any case be made in full compliance with specifications as set out hereunder and for the sole purpose of replying to the request or inquiry. Be it further understood that submission of the user’s e-mail address or other information required for properly processing any request or inquiry is optional, but failure to do so means that the request or inquiry may not be processed.

Depending on services requested, users are in any case advised to familiarise themselves with the contents of specific privacy statements as may be found in the various sections of the site.

Definition of cookies

Cookies are small text files that are sent to your computer.
The site in question uses two types of cookies.

Session cookies

So-called session cookies (i.e. temporary cookies that are erased when the browser is closed at the end of a surfing session) are solely used for transmitting session identifying data in the form of numbers randomly generated by the server. These cookies are necessary to ensure secure and efficient site browsing.

Session cookies are used in this site precisely to ensure maximum user privacy during surfing as they do not permit acquisition of user’s personal details that would otherwise permit user identification and recognition.

Persistent cookies

Persistent cookies are small data files that the server sends to the user’s browser upon accessing a website to enable the requested pages to be accessed and to monitor the visited pages.

illycaffè uses persistent cookies in one case concerning the registered user. If the user wishes to use the “remember me on your computer” function, he/she accepts a persistent cookie, which means the website will remember him/her on the next visit, avoiding having to type in the password again (by clicking on “remember me on your computer” the user gives consent to the use of cookies and the relative data use). The registered user is always free to refuse this cookie, by not clicking the option. He/she is also free to delete cookies from his/her browser. The duration of these cookies is 1 month.

Data controller, data processor and user’s rights

The data controller is the drafter of the present policy statement, and namely illycaffè S.p.A., based at 110 Via Flavia in Trieste, Italy, exchange phone number +39 040 3890 111; fax number +39 040 3890 490. The data processor is illycaffè S.p.A.’s Computer Systems and Process Organising Manager who, for the purpose of her/his office, is based at illycaffè S.pA.’s head-office. The data processor may be contacted for the full, up-to-date list of data processors or to exercise any user right as provided for under art. 7 of Decree Law 196/03, according to the terms and conditions as thereunder contemplated.

Inquiries in matters relating to privacy and data protection may at any time be made by writing to infoprivacy@illy.com, taking care to specify “privacy” in reference and to address the inquiry to the attention of the data processor.

Article 7. Right to access personal data and other rights

1. The interested party is entitled to be informed as to the existence or otherwise of personal data concerning it, even if not yet recorded, and to have said data fully disclosed to it in an intelligible form.
2. The interested party is entitled to be informed as to the:
   1. source of said personal data;
   2. processing purposes and methods of said personal data;
   3. processing logic applied in case of processing with the aid of electronic devices;
   4. data controller and processor I.D. as well as that of the representative as designated under par. 2, art. 5 hereof;
   5. parties or categories thereof to whom personal data may be disclosed or who may become acquainted with them in their capacity as designated representatives in the territory of the State, processors or individuals in charge of processing.
3. The interested party is further entitled to request and obtain:
   1. that its personal data be duly up-dated, corrected, or, if deemed to be in its interest, suitably complemented;
   2. that its personal data be duly deleted, anonymised or blocked if processed in breach of law, including data not requiring to be stored in relation to the purposes for which they were collected or subsequently processed;
   3. a statement certifying that parties to whom personal data have been disclosed or circulated have been duly informed as to the operations under the foregoing letters a) and b), including contents thereof, except when fulfilment of the present obligation were to prove impossible or require resources manifestly disproportionate to the right being protected.
4. The interested party is entitled to object, in part or in full, to the processing of its personal data:
   1. even if consonant with the scope for which they were collected, subject to there being legitimate grounds for such objection;
   2. for the purpose of transmitting it publicity material, soliciting direct sales, carrying out market surveys, or sending it communications of a commercial nature.

Data disclosure and circulation; processing methods

All data are processed by in- and/or out-house personnel in charge of processing, specifically appointed thereto by illycaffè S.p.A. according to the scope of processing as detailed under policy statements specific to each section of the site. Personnel in charge of processing may include computer system operators (also outhouse in the case of an inquiry or request referring to a subject matter commissioned to such operators); personnel specifically referred to in the policy statement of each section; other personnel, including outhouse personnel, responsible for site and project management; in-house data processors; outhouse data processors, such as marketing consultancy agencies, firms commissioned to manage the project, and server farms. Data are processed and operations performed by said personnel only in so far as necessary to the job assigned to them.

Personal details submitted by users requesting informative material to be sent to them or making inquiries shall be used solely for the purpose of processing their requests or answering their queries on a case-by-case basis. Personal details may be disclosed to third parties, but only in so far as necessary and useful for the intended purpose (to carriers, for instance, in case of informative material having to be sent by mail delivery).

Data may be processed on paper, by means of computers, and/or telematically.

For more details as to exactly whom data may be disclosed and the extent of their circulation, the user is advised to refer to the specific policy statements relating to each section.

Special Privacy Statements

Privacy statements may be found in the various sections of the site where specific processing procedures are contemplated. Reference should therefore be made to these statements, as the case may be.

Policy Statement revision as at December 15^th 2009.