NOTICE PURSUANT TO STATUTE 13 OF DECREE LAW 196/03

Why this notice
On this page you will find the description of the management procedure for the web site in reference, regarding the treatment of the personal data by the users who consult it. The treatment is always based on principals of lawfulness and correctness in accordance with all the normative currently in force (and therefore with respect also to principles of correct lawfulness and transparency and protection of privacy and rights), and with strictly correlated logic to the destined goal.

Personal data subject to treatment are dealt by the Fondazione Ernesto Illy, also in consideration of the technological innovations, in such a manner as to reduce to the minimum, by means of timely preventive measures of safety, the risk of their destruction or loss, also accidental, of non-authorized access to data or treatment operations that are illegal or incompatible with the finality for which the data were collected. On the data, only the necessary operations to the pursuit of the aim indicated in such document and in the policy statement varieties are done.

The data will be conserved for a period in accordance with the finality for which they are treated and in accordance to the normative in force. The data can also be organized in computer databases.

This privacy policy is offered as a short policy statement in accordance with the provisions of the Italian law, art. 13 d.lgs 196/03 (Italian policy statement on the treatment of personal data in accordance to the directive 95-46–CE) to those who interact with the web services of this site, with the finality of protecting personal data, accessible via data transmission from the URL:

www.fondazionernestoilly.org

corresponding to the home page of the site.

The policy statement regards only this specific site of the Fondazione Ernesto Illy and not for other websites consultable by the user through links. These links are autonomous of the treatment (except in cases regarding the company) and it returns to the sites in question.

The privacy policy of this web site is inspired by the official document (Recommendation n. 2/2001) issued by the European authorities for the protection of personal data. These authorities have grouped into a legal entity (art.29 policy n. 95/46/CE) with the purpose of tracing the minimum requisites regulating the capturing of personal data on-line, and, in particular, the methods, times and nature of the information which the owners of the data-handling must give to those accessing their web-pages.

The server is located at Accenture OutSourcing - Strada 4, palazzo Q1, Milano Fiori - 20089 Rozzano (MI) Italy.

Apart from the location where the server resides, data will be able to be treated at illycaffè S.p.A. and at the locations of the people in charge of data-handling, nominated by the Fondazione Ernesto Illy (as well as at possible third parties which data can be communicated in quality of autonomous official holders and that are indicated in such policy or in the policy statement varieties located in this site).

Nonetheless, please review all the specific policy statements present in the various sections of the site.

Types of data processed, purposes and methods of the processing, optional or not

Navigation data
Data processing and software procedures of this web site require us to receive and record information during consultation of this web-site.

Its transmission is implicit in the protocols of internet communication. This information is not connected with other personal data, but however by its nature, may lead to the user’s identification, if combined with data detained by a third party.

This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) of the resources required, the time of the request, the method used to submit the request to the server, the file size obtained in response, the numeric code indicating status of the response provided by the server (successful, error, etc..) and other parameters relating to the operating system and computer environment.

The collected information is used by the Fondazione Ernesto Illy for statistical purposes, which are anonymous and relate to the use of this site and its correct functioning and are canceled immediately after elaboration. The data could be used to ascertain responsibility in case of hypothetical crimes against the site. In that case, such as with requests motivated by the legal authorities, the data will be communicated to the same aforesaid legal authorities.

No data is communicated or disclosed by the Fondazione Ernesto Illy (expect communications to legal bodies or the police, if necessary).

The data can be treated in paper format, technological format and via computer.

COOKIES
No personal data of the users is acquired by the site.

Cookies are not used for the transmission of personal information nor are persistent cookies of any type used. In other words, no system is used for the profiling of the users.

The use of session cookies (which are not stored in a user's computer and cancelled with the closing of the browser) is strictly limited to the transmission of session identifiers (constituted by random numbers generated by the server) necessary for an efficient and safe site navigation.

The session cookies used in this site avoid the recourse to other technological information potentially prejudicial for the confidentiality of the navigation of the users and they do not allow personal acquisition of data identifying the user.

Personal data provided voluntarily by the user
The optional forwarding, explicit and voluntary, of an e-mail to the e-mail addresses indicated in this site (when only the e-mail address is indicated and there is not a special form. In the case of a special form, please refer to the specific policy statement that regulates the assignments of the various forms), entails on behalf of the Fondazione Ernesto Illy the successive acquisition of the necessary e-mail address to answer the requests, as well as of any eventual other personal data included in the e-mail (and the attachments as well) or in the special form. In such case, (when only the e-mail address is indicated and there is not a special form of compilation. In the case of a special form, please refer to the specific policy statement that regulates the assignments of the various forms) the assignment of the data is optional but missing addresses or any other necessary data to complete the request, will allow the impossibility of not being able to dispatch the same request. With the forwarding of an e-mail, the interested party authorizes the Fondazione Ernesto Illy to the treatment of the data to complete the requests.

In case of requests regarding material consignment (not by means of a form. In the case of a special form, please refer to the specific policy statement that regulates the assignments of the various forms), the necessary data for shipping will be communicated by the Fondazione Ernesto Illy to the post office or couriers.

The data can be treated by the Fondazione Ernesto Illy in paper format, technological format and via computer.

Please go through all the specific policy statements present in this site.

Information on data regarding donations
The requested data will be treated to the purposes of allowing execution of the donation and to the purposes of fulfilling every legal obligation, regulation and normative.

Please review the specific policy statements.

DATA CONTROLLER, DATA PROCESSOR, RIGHTS IN ACCORDANCE WITH THE ITALIAN LAW (art. 7 d.lgs. 196/03)
The data controller is Fondazione Ernesto Illy, via Flavia 110, Trieste (Italy) tel. +39 040 3890 111, fax +39 040 3890 490. The party responsible for data management is the Director of the Fondazione Ernesto Illy, who, in this role, is based and may be contacted at the offices of the aforementioned address (110 Via Flavia in Trieste), or via e-mail at info@fondazioneilly.org. The interested party may also request from the Director an updated list of any other party having data management responsibilities as contemplated and provided for under Statute 9 of Decree Law 196/03.

For any information regard data process, the user can write to infoprivacy@illy.com with the subject “privacy” to the attention of the Director of the Fondazione Ernesto Illy.

Section 7 of D.lgs 196/2003 - Right to Access Personal Data and Other Rights
1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
2. A data subject shall have the right to be informed
a) of the source of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; 19
d) of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
3. A data subject shall have the right to obtain
a) updating, rectification or, where interested therein, integration of the data;
b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
4. A data subject shall have the right to object, in whole or in part,
a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

PURPOSE OF COMMUNICATION AND OF DISSEMINATION OF DATA; MODALITIES OF THE PROCESSING
To understand the area of communication and diffusion of data, please go through the specific policy statements present in the various sections of this site.

Data will be communicated by Fondazione Ernesto Illy according to the request, to the categories listed in the various specific policy statements that it refers to and in this privacy policy. They will always be communicated if necessary to either the bodies of law or to exercise or defend the right of the company to the bodies in charged.

Data are known (and treated on behalf of the Fondazione Ernesto Illy) by subjects expressly named by the Fondazione Ernesto Illy who are in charged of data treatment (IT employees as well as external employees, those who are responsible of the area that regards the aim of the request, those who are responsible also externally to the management of the site, employees responsible to public relations, consultants). Data can also be known and treated on behalf of the Fondazione Ernesto Illy by people in charge of data treatment, internally and externally, nominated by the Fondazione Ernesto Illy. External people in charge (auditors, IT outsourcers that preserve the data in their server or carry out maintenance of the computer systems, companies that carry out services for the Foundation, such as reimbursement services and shipping, IT management) can treat data also through their collaborators that do the same activity that such company and externals carry out on behalf of the Fondazione Ernesto Illy.

The persons nominated and in charged of data treatment can treat only the data necessary for the fulfilment of the tasks assigned by the Foundation doing only the necessary operations for the fulfilment of the same tasks.

To understand the area of communication and the diffusion of the data, please review the specific policy statement information present in the various sections of the site.

The option regarding the ordination of data and formal procedure of treatment
For complete information, we invite you to go through all of the specific policy statements in the various sections of data requests and in all the sections of this privacy policy.

Specific privacy policy statement in accordance with the provisions of the Italian law
As mentioned before, in this site you can find the synthesis of every specific policy statement aranged by services or request. Please refer also to the policy statements that are integrated in this policy.

This statement has been updated on October 6, 2010. Such updating is carried out internally by a procedure that constantly revisions the statement. Previous statement versions are available upon request; infoprivacy@illy.com.