Privacy policy - Why the Present Document
The present document describes how personal data of users are processed in this website. Data are processed in compliance with lawfulness and fairness requirements and with the applicable regulations principles of need, fairness, lawfulness, transparency and confidentiality, strictly in line with the aims set forth in this privacy policy.
Personal data are processed by illycaffè S.p.A. (hereinafter referred to as "illycaffè" or the "Company") also building on technology innovation with a view to minimizing – with proper prevention measures – the risk of destruction or loss, including accidental loss, unauthorised access of data or processing actions which are illegal or incompatible with the aims for which data have been collected. Data will only be processed to achieve the aims described in this privacy policy and in other policies notified to users as their data are collected.
Data are retained and processed for the time required to achieve the aims of the processing and in compliance with any applicable regulations. Data may also filed in databases, including IT databases.
This privacy policy is also intended as a summary notice, as required in article 13 of the Italian Legislative Decree no.
196 dated 30 June 2003 (Italian law on the processing of personal data, transposing EU directive 95/46/EC), to users of web services of this website to protect personal data that may be accessed electronically on: www.playwithilly.com the opening page of this website.
This privacy policy is strictly referred to the present website, not for other websites that users may access by clicking on the relevant links. These websites are independent data controllers and therefore reference must be made to the relevant policy.
This privacy policy is also based on the recommendation n. 2/2001 that the European Data Protection Authorities – i.e. members of the Working Group set up in line with article 29 of the directive 95/46/EC – adopted on 17 May 2011 to identify a series of minimum standards on online collection of personal data, in particular procedures, time limits and nature of data. Data controller are required to provide users with the relevant information when they visit their web pages irrespective of the aims of the access.
The server hosting the website is located at Serverplan srl (server farm on which Nis Media d.o.o. relies), Via
G.Leopardi, 22 - 03043 Cassino (FR) Italy.
Besides the place where the server is located, data may be processed at the headquarters of illycaffè or at the headquarters of the data processors that may be appointed by illycaffè (as well as third parties that may receive data as independent data controllers and which are listed in this privacy policy or in the relevant policies of this website).
Type of processed data and processing procedures
Navigation Data
IT systems and software procedures of this website, in the framework of their regular operation, don’t acquire any personal data.
Cookies
We don’t use cookies to transmit personal information or persistent cookies of any kind or systems for tracking users.
Data that users provide on a voluntary basis
With regard to specific provisions for which there is a special form, please refer to such form and specific policy privacy.
The data, in paper or electronic format, can be processed by illycaffè on paper, manually, with IT and electronic means
(therefore, illycaffè may file and process data both on paper and IT support).
The data will always be processed by illycaffè to fulfill obligations under the law, a regulation or EU legislation or to assert or defend its rights in the relevant jurisdiction.
Data Controller and Data Processor and Rights of users
The Data Controller is illycaffè S.p.A, having its registered office in via Flavia 110, in Trieste, ph. +39.040.3890.111, fax +39.040.3890.490.
The Data Processor whom you can contact for all matters concerning data processing, in particular in order to exercise your rights pursuant to art. 7 of D.Lgs. 196/2003 in accordance with the procedures and timeframes set by law, and to obtain a complete and current listing of all other Data Processors is the Corporate Human Resources, Organization,
Processes and IT Director, whom you can contact for this purpose at illycaffè’s offices.

For any further information, please write to: infoprivacy@illy.com
, reporting in the subject "privacy" to the attention of the Data Processor.
Section 7 of D.Lgs. 196/2003 - Right to Access Personal Data and Other Rights
1.
A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
2.
A data subject shall have the right to be informed a) of the source of the personal data; b) of the purposes and methods of the processing; c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; d) of the identification data concerning data controller, data processors and the representative designated as per Section 5(2); e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
3.
A data subject shall have the right to obtain a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
4.
A data subject shall have the right to object, in whole or in part, a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
Notice and Disclosure Scope
With regard to specific provisions for which there is a special form, please refer to such form and specific policy privacy.
For any other processing, data provided by users are disclosed (and processed on behalf of illycaffè S.p.A.) to persons in charge of processing appointed by illycaffè S.p.A. (IT staff that can also carry out tasks of system administrators being appointed as such in this case, IT technicians also external to the Company, that can also carry out tasks of system administrators being appointed as such in this case, staff of the enveloping and mailing department, staff of the Internet website administration also external to the Company, staff of the legal office, legal advisors also external to the Company, staff of data processors that use the data to perform the same tasks that data processors make on behalf of illycaffè S.p.A.). Data may also be disclosed and processed by the Data Processors appointed by illycaffè
S.p.A. (such as envelope filling and mailing companies, IT outsourcers which store the data in their servers or perform maintenance on IT systems, companies appointed to manage the websites). These external companies may also process data using their staff in charge of data processing on behalf of illycaffè as well as management and maintenance of processors/serves of the outsourcers, that may host illycaffè data.
Persons in charge and data processors may process data only insofar the processing is instrumental to implement the tasks assigned by illycaffè by only performing the actions needed to implement such tasks.
If needed, illycaffè may disclose data to the judiciary or to the police or to any other organization requiring them pursuant to the law, the regulations in force or EU regulations or to defend any right in the appropriate jurisdiction.
Option to provide data and processing procedures
The user is free to provide personal data through specific forms. However, their lack could make impossible to fulfill the request.
For a complete information on the processing of data by illycaffè, please take note of all the privacy policy contained within the various forms that required data and all sections of this privacy policy.
Specific Notices
As already reported, this website includes other specific summary privacy policies in pages on services on request.
Reference is hereby made to such privacy policies integrating this privacy policy.
This privacy policy is updated as at 20/04/2015.