1. INTRODUCTION

This information describes the cookies and other tracking tools used on our blog (www.blog.illy.com), their function, as well as the different types available and how to reject or delete them.

illycaffè S.p.A acts as a technical intermediary only for the third-party links shown above and accepts no responsibility for any changes made by their respective Owners/Publishers.

1. DEFINITIONS AND CLASSIFICATIONS

2.1 Cookies

As is well known, cookies are generally text strings that websites (known as Publishers or ‘origin’) or other websites or web servers (known as ‘third parties’) place or archive on the user's device when the user browses them. This can be done directly, in the case of Publishers, and indirectly through publishers, in the case of ‘third parties’.

The devices in question can be, for example, computers, tablets, smartphones or any other device that can store information. Nowadays, and even more so in the future, these devices must include IoT (Internet of Things) systems, which are designed to connect to the Internet and to other devices in order to provide different services, not necessarily limited to communication. The software for web browsing and the operation of these devices, such as browsers, can save cookies and forward them to the sites that originally generated them in case the same user revisits the site, thus keeping a record of their previous interaction with one or more websites. The information contained in cookies may include personal data, such as IP address, username, unique identifier or email address, as well as non-personal data, such as language settings or information about the type of device being used to browse the website. Cookies can therefore perform several important functions, such as tracking sessions, storing information about specific configurations related to users accessing the server, facilitating access to online content, etc. They can be used, for example, to keep track of items in a shopping cart or the data used to fill in an online form. While, on the one hand, cookies can be used to allow websites to load more quickly or to direct information on a network (in line, therefore, with the characteristics linked to the functioning of the website itself), they can also be used to direct behaviour-based advertising and then measure the effectiveness of the advertising message, or to adapt the type and method of services provided to the user's behaviour detected previously.

As it is not possible to differentiate cookies by their technical characteristics, they can be classified as detailed below.

The main subdivisions are related to their origin. Depending on this, cookies can be:

1. - first-party cookies, which the website manager installs directly on the user's terminal;
2. - third-party cookies, installed by a different website through the manager of the website that the user is visiting.

Likewise, cookies can be classified by their function:

- Technical cookies are used for the sole purpose of ‘carrying out the transmission of a communication over an electronic communications network, or as strictly necessary for the provider of an information society service to provide the information explicitly requested by the subscriber or user’ (see art. 122, paragraph 1 of Legislative Decree 196/03). The legal basis for the processing of technical cookies is the legitimate interest of the site owner, for the benefit of the operation of the site and the possible collection of statistics.

- Personalisation cookies are used to track, in relation to certain identified or identifiable subjects, specific actions or patterns of behaviour related to the use of the functionalities offered (patterns) in order to group different profiles within homogeneous groups of different sizes, so that the owner can, among other things, modify the provision of a service in an increasingly personalised way, beyond what is strictly necessary for the provision of the service, and send personalised advertising messages; for example, according to the preferences expressed by the user in the context of web browsing. These cookies can only be used with the consent of the data subject, which also constitutes the legal basis for the processing. The user can never be forced, without alternative, to give their consent to receive cookies or other tracking tools, under penalty of not being able to access the site. For more information, visit http://www.youronlinechoices.com. Deleting or rejecting these cookies will not result in any loss of functionality.

- There are also analytical cookies that provide analysis and statistics on the use of the website and the flow of visitors. These cookies fall into the category of technical cookies, if there is no possibility of directly identifying (individualising) the data subject through their use, which is equivalent to preventing the use of analytical cookies that, due to their characteristics, can give rise to direct and unique identifiers.

Analytical cookies are also included in the category of technical cookies if it is possible that the use of statistical analysis related to multiple domains, websites or applications is linked to the same owner, provided that the owner carries out its own statistical analyses, without, in any case, such analyses giving rise to an activity that, beyond the limits of a mere statistical record, in reality takes on the characteristics of processing for the purpose of making commercial decisions. The legal basis for the processing is that of technical cookies, when they fall into that category, or consent, when they do not.

2.2 Other tracking systems

There may be other technologies that pursue the same purposes as cookies.

For example, although cookies can be used in both web and mobile browsers, it would be inappropriate to talk about cookies in the context of mobile applications, as these are tracking tools that require the presence of a browser. For this reason, in this document the term ‘cookie’ is used only to specifically indicate that particular type of tracking tool. The same criteria used for cookies apply to these categories.

2.3 Classification criteria on this blog

Tracking tools are classified into predefined categories according to the following criteria.

The list of cookies, third-party privacy policies and retention times can be viewed via the link.

• Necessary cookies: always active unless the user exercises their right to block them via their browser settings. These cookies are necessary for the website to function. They are usually only enabled in response to any action you take that represents a request for services, such as setting your privacy preferences, logging in or filling in forms. Their use does not require your consent. Without these cookies, the website may not function properly. The legal basis for the processing of these cookies is legitimate interest, which is to make the site work properly.
• Analytical cookies: these cookies help us to understand how visitors interact with the website. We may use a set of cookies to collect information and report on statistics on how the site is used. In addition to this, the data collected may also be used, together with some of the advertising cookies described above, to help display the most relevant ads on the web and to measure interactions with the ads we display.

If the user has left their details on a form, we can also use these cookies to associate their data with the actions taken to analyse their actions on the blog in order to carry out specific marketing actions based on the result of the analysis. In this case, please refer to the specific privacy notices on the data supply forms. Without these cookies, users can continue to browse the site without any problems or restrictions.

The legal basis for the processing of data for these cookies is consent.

Advertising cookies

We use cookies to make our ads more attractive and useful to site visitors. Some of the most common functions of cookies are to select advertising based on the user's interests, to improve information on the performance of advertising campaigns and to avoid displaying ads that the user has already seen.

Without these cookies, users can continue to browse the site without any problems or restrictions.

The legal basis for the processing of data for these cookies is consent.

Functionality cookies

We use a set of optional cookies to make the website work. In general, they are only set in response to information provided to the website to personalise and optimise your experience, as well as to remember your chat history.

Without these cookies, users can continue to browse the site without any problems or restrictions.

The legal basis for the processing of data for these cookies is consent.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The Data Controller is illycaffè S.p.A., with headquarters at Via Flavia 110, Trieste (Italy), telephone +39.040.3890.111, fax +39.040.3890.490, e-mail infoprivacy@illy.com. There is also a Data Protection Officer available at the email address dpo@illy.com and at the company addresses.

illycaffè S.p.A. can be contacted in Spain at illycaffè S.p.A. branch in Spain, C/ Pere IV, 397/401, Navi 7-8, 08020 - Barcelona, Telephone: +34 933034050 e-mail: illy.iberica@illy.com

1. RIGHTS

We inform you that the GDPR provides for the possibility for the interested party to request access to personal data and the rectification or cancellation of the same or the limitation of the processing from illycaffè (by contacting illycaffè at the addresses indicated in point 6);

In addition, you may have the possibility, by contacting illycaffè, to object to the processing of your data and to exercise the other rights contained in Chapter 3, Section 1, of the GDPR, including the right to withdraw consent: the withdrawal of consent shall not affect the lawfulness of processing based on consent prior to withdrawal.

1. COMPLAINTS

If the data subject believes that the processing of his or her data violates the provisions of the GDPR, he or she has the right to lodge a complaint with the Italian Supervisory Authority (whose contact details can be found at www.garanteprivacy.it), as provided for in Article 77 of the GDPR, or to take appropriate legal action (Article 79 of the GDPR).

In addition, you can also contact the Supervisory Authority of the State in which you reside or habitually work.

The list of supervisory authorities can be consulted at www.garanteprivacy.it/home/footer/link

1. COMMUNICATION OF DATA

The data may only be processed by authorised processing staff (IT technicians who may also be external to the Company, consultants who may also be external to the company - IT technicians, consultants involved in the management of the site - marketing staff who may also be external to the company, staff involved in the management of the site, who may also be external to the company, employees from all sectors to whom a request may be addressed) and specifically appointed data processors (for example, companies that manage or host the website, digital marketing companies). The interested party may request the list of data processors by contacting illycaffè. All the aforementioned subjects process only the data essential for the performance of their duties.

If necessary, the data may also be communicated by the Company to judicial or police authorities, lawyers and anyone who requires it to fulfil obligations established by law, by a regulation or by community legislation or to support or defend a legal claim.

1. ADDITIONAL PURPOSES

It should be borne in mind that all data may always be processed for the purpose of exercising or defending the rights of the Company and all obligations provided by law, by a regulation or by community legislation, remembering that, in this sense, the contribution of data is necessary and, if it is not done, this will imply the impossibility of accessing the site and/or establishing any relationship with the Company (even simply writing an email to obtain information) and that, for these purposes, the data may be provided to judicial or police bodies, lawyers or anyone who requires it in order to comply with obligations established by law, by a regulation or by community legislation, or to uphold or defend a legal claim.

1. INSTRUCTIONS TO DISABLE COOKIES DIRECTLY FROM THE BROWSER

– Chrome –> https://support.google.com/chrome/answer/95647?hl=it

– Internet Explorer –> http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookie#ie=ie-11

– Opera –> http://help.opera.com/Windows/10.00/it/cookie.html

– Safari for mobile devices –> http://support.apple.com/kb/HT1677?viewlocale=it_IT

– Safari for computers –> https://support.apple.com/kb/PH19214?locale=it_IT

– Firefox–>https://support.mozilla.org/it/products/firefox/protect-your-privacy/cookie

– Microsoft Edge –> http://windows.microsoft.com/it-it/windows-10/edge-privacy-faq

If you are using a web browser not mentioned above, please refer to your browser's instructions or online guide for more information.

10 TRANSFER OUTSIDE THE EUROPEAN UNION

If third-party cookies are installed by third-party companies based outside the EU, the data may also be processed outside the EU. In this case, the processing takes place through the consent given for the use of cookies.

Information note updated on 23/01/2024.