PRIVACY POLICY – Art. 13 Legislative Decree 196/2003

In accordance to this privacy policy, compiled as set forth by art. 13 of Legislative Decree no. 196 of 30th June 2003, Code on Personal Data Protection (herein after, the "Code"), IL GUFO SpA, with legal office in via G. Galilei 3/A - 31011 Asolo (TV) ITALY,  Tax code, VAT number and IT 03450970268 Business Register number, ("IL GUFO "), and Triboo Digitale S.r.l., with registered office in Viale Sarca, 336 – 20126, Milan, Italy, Tax code, VAT number and Milan Business Register number 02912880966, ("TD”), in quality of joint Data Controllers (hereinafter, jointly, the "joint Data Controllers"), intend to provide information on data processing procedures concerning the personal data of visitors of website  (hereinafter, the “Site”) and those who purchase products available on it.

If you wish to complete the registration process and/or exploit the services offered by the Site by accessing reserved areas (e.g.: make a purchase and perform related activities, including those to fulfil administrative and tax obligations, etc.), please fill out the specific fields and accept this privacy policy. Conferral of data requested in the registration and/or product purchase form  is not mandatory. Nonetheless, please note that data conferral has the purpose to execute the order and stipulate the agreement. Your refusal may prevent concluding the purchase of the requested products and/or services. The collected personal data will be mostly processed with electronic procedures and, only in rare cases, in paper-based forms.

To execute the functional activities for the sale of products through this website, TD, in quality of joint Data Controller, processes the users' data such as name and surname, home address and information concerning the credit card used by the same (e.g. name and surname of the card holder, number, expiry date, security code).

Conferral of your data is not mandatory but required to conclude the registration process to the Site or make the purchase. We will not be able to provide the requested services, should you refuse to confer the afore-cited data.

TD processes the data of Site users and buyers aimed at managing, completing and executing commercial transactions concerning the purchase of products through the same Site. Therefore, IL GUFO is the exclusive Data Controller with regards to any further activities not related to the sale of products through this website (such as for example and not limitedly to, transmission of advertising material, sales communications, promotions).

Each joint Data Controller decides the scopes and processing methods to be implemented and the tools to be used for security measures. For purely organisational and functional needs, external Data Processors were appointed for processing the personal data of Site users. These Data Processors have been chosen based on their skills, experience and reliability, through compliance with applicable laws on personal data processing, as also related to security matters.

IL GUFO can also use  your data to transmit advertising emails on its products and services, in line with your previous purchases, unless you deny said use by exercising your objection right according to the procedures illustrated further on (art. 130, paragraph 4, Legislative Decree 196/2003).

Your personal data will not be transferred outside the European Union. Should the above be required, the Data Controller will request your specific consent.

Moreover, prior specific consent, your personal data will be processed by IL GUFO also for marketing purposes, such as transmission via email at the address provided by you, of promotional material concerning products and services other than those already purchased, news, promotions, market and/or statistic researches and customer satisfaction surveys.

Any use of your credit card details for scopes other than verifying the existence of payment methods, charge and management of payments, and also to handle any claims and litigations, is excluded. For said scope, the aforementioned data will also be processed by the bank that provides services related to the management of online payments, and by the institute that issued the credit card that you will enter to confirm your order.

One of the Data Processors is currently Arcese Logistic S.r.l., which processes the data required to perform logistic activities aimed at shipping and potentially return the purchased products. For a complete list of Data Processors, please contact the Customer Service or send an email at the following email addresses: for IL GUFO, and for Triboo Digitale.

The categories of Designated Officers who will process data for the abovementioned scopes are those subjects who mange the site, accounting, customer service, marketing activities (when consent is granted), computer systems and also third companies that process data on our behalf (such as for example, maintenance of computer services, shippers and couriers, legal counsels, companies that realise and/or manage promotional campaigns, etc.); lastly, data can be disclosed to authorities entitled to receive it, by law.

Pursuant to art. 7 of the Code that is transcribed in full for clarity purposes at the end of this document, you are entitled to obtain data updating, correction, integration, deletion and transformation in anonymous form. Moreover, you can object to the processing of your data for marketing scopes or for the transmission of sale communications, by contacting  IL GUFO, at the post addresses indicated above or by sending an email at Using same procedure, you can request the complete and updated list of Data Processors.


Art. 7 Legislative Decree  no. 196/2003 - Right to access personal data and other rights


1. The concerned party is entitled to obtain confirmation about the existence of his/her personal data, even if not registered yet, and its disclosure in intelligible form.

2. The concerned party has the right to obtain indication on:

a) the source of the personal data;

b) processing scopes and procedures;

c) logic applied in case of processing executed with electronic tools;

d) identification details of the Data Controller, Data processors and Designated Officers in accordance to art. 5, paragraph 2;

e) subjects or categories of subjects to whom personal data may be disclosed or who may become aware of such data in their quality of Designated Officers for the Country or Data Processors.

3. The concerned party has the right to obtain:

a) data updating, correction or integration, if necessary;

b) deletion, transformation in anonymous form or blocking of data that has been processed unlawfully, including data whose storage is not required according to the scopes for which it was collected or subsequently processed;

c) confirmation that the transactions indicated in letters a) and b) were disclosed, also with regards to their content, to those subjects to whom data was notified or disclosed, except in case notification proves impossible or requires the use of means clearly disproportionate to the right being protected.

4. The concerned party is entitled to oppose, totally or partially:

a) for legitimate reasons, to the processing of personal data, even if related to the collection scope;

b) processing of personal data for the transmission of advertising material or direct sales, or for market researches or business communications.