Privacy Policy

This page describes how to manage the site with reference to the processing of personal data of users who consult it.

This information is also provided pursuant to art. 13 of Legislative Decree no. 196/2003 - Code for the protection of personal data to those who interact with the web services of Mug di Elena Giuffrida for the protection of personal data, accessible electronically from the address www.mugbakery.com, corresponding to the home page of the official website of Mug di Elena Giuffrida.

The information is provided only for the Mug di Elena Giuffrida website and not for other websites that may be consulted by the user through links.

The information is also inspired by Recommendation No. 2/2001 that the European authorities for the protection of personal data, gathered in the Working Party established by thearticle 29 of Directive 95/46/ECadopted on May 17, 2001 to identify certain minimum requirements for the collection of personal data online, and, in particular, the manner, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection.

"Holder" of the treatment

Following the consultation of this site, data relating to identified or identifiable persons may be processed.

The "holder" of their treatment is the owner of Mug di Elena Giuffrida, based in Piazza Hortis 6 - 34124 Trieste.  

Place of data treatment

The data treatment connected to the web services of this site take place at the above mentioned offices and are only handled by the owner, or by persons in charge of occasional maintenance operations.

No data from the web service is communicated or disseminated.

The personal data provided by users who send e-mail requests or information material are used only to perform the requested service and are not disclosed to third parties.

Types of data treated

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but, by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc. ...) and other parameters relating to the operating system and computer environment of the user.

This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing. The data could be used to check responsibility in case of hypothetical computer crimes against the site: except for this possibility, at present the data on web contacts do not persist for more than seven days.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on demand.

Data delivery

Apart from that specified for navigation data, the user is free to provide personal data in emails sent to Mug di Elena Giuffrida or indicated in telephone contacts with the owner to request informative material or other communications.

Failure to do so may result in the impossibility of obtaining what has been requested.

For the sake of accuracy, it should be remembered that in some cases (not object of the ordinary management of this site) the Authority may request news and information pursuant to art. 157 of Legislative Decree no. 196/2003, for the purposes of controlling the processing of personal data. In these cases the reply is mandatory under penalty of administrative sanction.

Methods of treatment

The personal data provided are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected and will be processed for the following purposes:

  1. purposes related to associated communications;
  2. purposes functional to the activity of Mug of Elena Giuffrida including the sending of informative material of the structure;
  3. purposes functional to the fulfilment of regulatory obligations, required by laws, decrees, regulations and/or acts equivalent to them, as well as by Community legislation;
  4. purposes for the management of relations with customers, suppliers, banks, etc.... .

The treatment of the data provided will be based on principles of fairness, lawfulness and transparency and will take place, in compliance with the above mentioned law, respecting the utmost confidentiality and protection of the Customer's rights.

We will not communicate, disseminate or sell any information regarding Mug di Elena Giuffrida's customers and website users for commercial purposes.

Specific security measures are observed to prevent data loss, illegal or incorrect use and unauthorized access.

Rights of data subjects

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence of such data and to know its content and origin, verify its accuracy or request its integration or updating, or correction (art. 7 of Legislative Decree no. 196/2003).

Requests should be addressed to Data Protection Authority.

Art. 7. Right of access to personal data and other rights

  1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him/her exist, regardless of their being already registered, and communication of such data in intelligible form.
  2. The interested party has the right to obtain the indication:
    a) of the origin of the personal data;
    b) of the purposes and methods of the processing;
    c) of the logic applied in case of treatment with the aid of electronic instruments;
    d) of the holder identification details, of the persons in charge and of the representative appointed in accordance with Article 5, paragraph 2;
    e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State.
  3. The interested party has a right to obtain:
    a) updating, correction or, where interested therein, integration of the data;
    b) the cancellation, transformation into anonymous form or blockage of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently treated;
    c) certification to the effect that the operations as per letters a) and b) have been notified to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
  4. The interested party has the right to object, in whole or in part:
    a) for legitimate reasons to the treatment of personal data concerning him/her, even if pertinent to the purpose of collection;
    b) to the treatment of personal data concerning him/her for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communications.

Art. 13. Notice

  1. The data subject or the person from whom the personal data are collected shall be informed in advance, either verbally or in writing, about:
    a) the purposes and the methods of treatment for which the data are intended;
    b) the mandatory or optional nature of providing data;
    c) the consequences of any refusal to reply;
    d) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as data processors or persons in charge, and the context of diffusion of such data;
    e) the rights referred to in Article 7;
    f) the identification details of the holder and, if designated, the representative in the territory of the State pursuant to Article 5 and the person responsible. When the owner has designated more than one responsible person, at least one of them shall be mentioned, specifying the site of the communication network or the means by which the updated list of responsible persons can be easily found. When a responsible person has been designated to answer to the interested party in case of exercise of the rights referred to in Article 7, this responsible person is specified.
  2. The notice referred to in paragraph 1 also contains the elements provided for by specific provisions of this code and may not include the elements already known to the person providing the data or whose knowledge may concretely impede the performance, by a public entity, of inspection or control functions carried out for purposes of defense or state security or the prevention, investigation or prosecution of a crime.
  3. The Privacy Authority can identify with its own measure simplified methods for the information provided, in particular through telephone services of assistance and information to the public.
  4. If the personal data are not collected from the data subject, the information referred to in paragraph 1, including the categories of data treated, is given to the data subject at the time the data are recorded or, when their communication is required, no later than the first communication.
  5. The measure referred to in paragraph 4 shall not apply when:
    a) the data are treated according to an obligation established by law, regulation or Community legislation;
    b) the data are treated for the purposes of carrying out the defensive investigations referred to in Law no. 397 of December 7, 2000, or, in any case, to assert or defend a right in court, provided that the data are treated exclusively for such purposes and for the period strictly necessary to pursue them;
    c) the notice to the interested party involves a use of means that the Privacy Authority, prescribing any appropriate measures, declares manifestly out of proportion to the protected right, or proves, in the opinion of the Privacy Authority, impossible.

Information regarding online dispute resolution in accordance with Art. 14 Par. 1 of the ODR (Online Dispute Resolution Regulation):

The European Commission gives consumers the possibility to resolve disputes online, according to Art. 14 Par. 1 of the Online Dispute Resolution (ODR) on one of its platforms. The platform (https://ec.europa.eu/consumers/odr) acts as a place where consumers can try to reach out-of-court agreements on disputes arising from online purchases and service contracts.