Privacy Policy statement for the processing of personal data:

Subject: Privacy Policy statement and request for consent in accordance with provisions of the Italian Privacy Law (section 13,23 and 26 of Legislative Decree 30.6.2003 n. 196) regarding the handling of personal data.

Dear Customer / Supplier

Pursuant to section 13 of Legislative decree 196/2003 the Company, in its capacity as Data Controller, hereby informs you that:
the processing of your personal data in our possession or which may be requested or that we may receive from you or third parties shall be obtained for the following purposes:
legal obligations: invoices, legal agreements and mandatory accounting entries;
Contractual obligations: contractual conditions of supply/sales and related amendments and supplements.
The handling of data may be undertaken both by manual or electronic means for the memorisation, management and transmission of the data itself, in a manner that is strictly instrumental to achieving the purposes, based on the data in our possession and with a commitment from you to immediately communicate any corrections, additions and updates.
The consent to data processing is not necessary in cases where the data is processed in execution of legal or contractual obligations, or if such data comes from public lists (section 24 of Legislative Decree 196/03). In other cases (commercial promotion, etc.) explicit consent is required.
In the absence of consent to the processing of personal data the following may ensue:
The inability of the Company to utilise the data for activities not functionally related to employment or not covered by legal obligations (commercial promotion, etc.);
The inability of the Company to communicate the data to subjects who carry out other activities which are not functionally related to the transaction.
Your data, in addition to the assigned person / controller, can be consulted by or disclosed to:
a tax consultant;
legally entitled persons who can access your data in accordance with regulatory requirements;
control bodies, also following inspections or audits;
transport and logistics companies (in the execution of contractual obligations);
companies or professional contractors or subcontractors (in the execution of contractual obligations);
third parties, for the purposes of commercial promotion and advertising (the latter only following your explicit consent).
legally entitled persons who can access your data in accordance with regulatory requirements in force;

You may exercise at any time your rights in respect of  the data controller, under Article 7 of Legislative Decree no. 196/2003, which for your convenience is provided below in its entirety:

Section 7. Right of access to personal data and other rights

A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.

A data subject shall have the right to be informed:
a)      of the source of the personal data;
b)      of the purposes and methods of the processing;
c)      of the logic applied to the processing, if the latter is carried out with the help of electronic  means;
d)      of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
e)      of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

A data subject shall have the right to obtain:
a)      updating, rectification or, where interested therein, integration of the data;
b)      erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c)      certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

A data subject shall have the right to object, in whole or in part,
a)      on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b)      to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

The data controller is Jolly Caffè S.p.A. P.IVA 01349450484, legally based in Comune di Bagno a Ripoli (FI) – Via di Vacciano Nr. 9