Privacy and Cookie Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

COOKIE POLICY

Woolf S.r.l. (hereinafter Woolf or Data Holder) issues the following information to the interested party, i.e. the person to whom the personal data refer, pursuant to art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereinafter GDPR), relating to the protection of individuals with regard to the processing of personal data. This information is intended to describe the characteristics of the treatments carried out in relation to the personal data provided by the interested party and the measures taken to protect their rights

This information is released on the Woolf website (https://woolfid.com, hereinafter the Site), on the Home Page.

Holder of the treatment

The Data holder is Woolf S.r.l. with registered office in Milan in Foro Buonaparte n. 76 – 20121 – Milan – (VAT number 10270870966) – e-mail of the Owner: privacy@woolfid.com

What is a cookie

A cookie is a small text file that is stored by the computer when a website is visited by the user. The text stores information that the site is able to read when it is consulted at a later time. Some of these cookies are necessary for the proper functioning of the site, others are useful because they are able to allow some services to function.

Regarding the nature of cookies, there are different types:

• Technical cookies

These cookies are used for the sole purpose of “carrying out the transmission of a communication over an electronic communications network, or as strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide this service”

They are not used for other purposes and are normally installed directly by the website owner or manager.

Technical cookies can be divided into:

i) navigation or session cookies, which guarantee normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); they are in fact necessary for the proper functioning of the site;

ii) analytics cookies, similar to technical cookies when used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site, in order to improve site performance;

iii) functionality cookies, which allow the user to browse according to a series of selected criteria (for example, the language) in order to improve the service provided. For the installation of these cookies, the prior consent of the users is not required (more information in the paragraph on Managing cookies below).

• Profiling cookies

These are cookies designed to create user profiles and are used in order to send advertising messages in line with the preferences expressed by the user while surfing the net. The consent of the interested party is required for the use of profiling cookies. The user can always authorize or deny consent to the installation of profiling cookies.

• First-party cookies and third-party cookies

There is also a distinction based on the different subject that installs cookies on the user’s terminal, depending on whether it is the same operator of the site that the user is visiting (so-called “first part”) or a different site that installs cookies. through the first (so-called “third parties”).

In the case of third-party cookies, the site does not have direct control of the individual cookies and cannot control them (it cannot install them directly or delete them).

Which cookies are used on this site

This site uses cookies that are used to remember the visitor’s screen resolution and set the site accordingly, in order to improve usability.

Which cookies we use:

I authorise the use of MATOMO statistics

[matomo_opt_out language=en]

Duration of cookies

The duration of the cookies on the Site is indicated in the table above in the expiration section

How to disable / delete cookies by configuring the browser

Chrome
1. Run the Chrome Browser.
2. Click on the menu in the browser toolbar next to the URL entry window for navigation.
3. Select Settings.
4. Click Show Advanced Settings.
5. In the “Privacy” section, click on the “Content settings” button.
6. In the “Cookies” section you can change the following cookie settings:
• I Allow data to be saved locally.
• Change local data only until the browser is closed.
• Prevent sites from setting cookies.
• Block third-party cookies and site data.
• Handle exceptions for some internet sites.
• Delete one or all cookies.

Mozilla Firefox
1. Run the Mozilla Firefox browser.
2. Click on the menu in the browser toolbar next to the URL entry window for navigation.
3. Select Options.
4. Select the Privacy panel.
5. Click Show Advanced Settings.
6. In the “Privacy” section, click on the “Content settings” button.
7. In the “Tracking” section you can change the following cookie settings:
• Ask the sites not to make any tracking.
• Communicate to the sites the availability to be tracked.
• Do not communicate any preference regarding the tracking of personal data.
8. From the “History” section you can:
• By enabling “Use custom settings” select to accept third-party cookies (always, from the most visited sites or never) and to keep them for a specified period (until they expire, when Firefox is closed or to ask every time).
• Remove the individual cookies stored.

Internet Explorer
1. Run the Internet Explorer Browser.
2. Click the Tools button and choose Internet Options.
3. Click on the Privacy tab and, in the Settings section, change the slider according to the desired action for cookies:
• Block all cookies.
• Allow all cookies.
• Select the sites from which to obtain cookies: move the cursor to an intermediate position so as not to block or allow all cookies, then click on Sites, in the Website Address box enter a website and then click on Block or Allow.

Safari
1. Run the Safari Browser.
2. Click on Safari, select Preferences and click on Privacy.
3. In the Block Cookies section, specify how Safari must accept cookies from websites.
4. To see which sites have stored cookies click on Details.

Safari iOS (mobile)
1. Run the iOS Safari Browser.
2. Tap on Settings and then Safari 3. Tap on Block Cookies and choose from the various options: “Never”, “From third parties and advertisers” or “Always”.
3. To delete all cookies stored by Safari, tap on Settings, then on Safari and finally on Delete Cookies and data.

Opera
1. Run the Opera Browser
2. Click on Preferences then on Advanced and finally on Cookies
3. Select one of the following options:
• Accept all cookies
• Accept cookies only from the site you visit: third-party cookies and those that are sent from a domain other than the one you are visiting will be rejected
• Never accept cookies: all cookies will never be saved. For more information visit the dedicated page.

Cookie management and deactivation

You can refuse the installation of cookies by clicking on the appropriate option that appears in the dedicated banner.
However, some functions of the site may be limited.
As a result of the acceptance of cookies, the consent bar may not appear on subsequent accesses.

The Data Holder will keep track of the User’s consent (s) through a special technical cookie, considered by the Guarantor for the protection of personal data to be a “not particularly invasive” tool.

If consent has already been given but you want to change the cookie permissions, you can proceed using the appropriate button in the information, before the cookie table.
Or you can act through your browser, as indicated below, because otherwise those already installed will not be removed. In particular, please note that it is not possible in any way to control third-party cookies, so if consent has already been given previously, it is necessary to delete the cookies through the browser (dedicated section) or by requesting the opt- out directly to third parties, where there are said cookies, or through the site http://www.youronlinechoices.com/it/le-tue-scelte.
For further information, we invite you to consult the following sites:

• http://www.youronlinechoices.com/
• http://www.allaboutcookies.org/
• https://www.cookiechoices.org/
• http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb- display/docweb/3118884

INFORMATION ON THE PROCESSING OF PERSONAL DATA

CONTACT US

Woolf S.r.l. (hereinafter Woolf or Data Holder) issues the following information to the interested party, i.e., the person to whom the personal data refer, pursuant to art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereinafter GDPR), relating to the protection of individuals with regard to the processing of personal data. This information is intended to describe the characteristics of the treatments carried out in relation to the personal data provided by the interested party and the measures taken to protect their rights.

This information is released on the Woolf site (https://woolfid.com, hereinafter the Site), in the “Contacts” section.

Holder of the treatment

The Data holder is Woolf S.r.l. with registered office in Milan in Foro Buonaparte n. 76 – 20121 – Milan – (VAT number 10270870966) – e-mail of the Owner: privacy@woolfid.com

Data object of treatment

The Data Holder essentially collects the following personal data:

• Personal data

• Contact information

Purpose of the processing and storage time

Personal data will be processed for the following purposes:

1. find a request from the interested party.

2. with your express consent, authorize the Data Holder to send periodic newsletters.

Retention time

The personal data collected for the purpose referred to in letter (a) will be kept for a maximum period of 6 months from the last request.

The personal data collected for the purposes referred to in letter (b) will be kept, unless the consent is revoked, for a period of 24 months.

Because the treatment we carry out is lawful

The processing is lawful because it is based on the following legal bases:

• execution of pre-contractual measures adopted at the request of the interested party.

• Consent of the interested party.

Processing methods

Personal data are processed for the pursuit of the Purposes indicated in this information on electronic support.

Mandatory or optional nature of providing data

The provision of data for the Purpose provided for in letter (a) is mandatory and refusal to provide them will make it impossible for the Data Holder to find the request.

The provision of data for the Purpose provided for in letter (b) is optional and refusal to provide them will make it impossible for the Owner to send newsletters.

Categories of subjects to whom personal data may be disclosed

The processing of personal data provided to us may be carried out, in compliance with the principle of the strict indispensability of the treatments:

• by the employees of the Data Holder, who act and process the data under the authority and instructions of the same, in accordance with art. 29 of the GDPR or the employees designated by the Data Holder, pursuant to art. 2 quaterdecies of Legislative Decree no. 101/2018.

• By natural or legal persons whose right to access the personal data of the interested party is recognized by legal provisions provided for by European Union law or by Italian law, such as, by way of example, competent authorities and / or supervisory bodies for the ” fulfilment of legal obligations, and public administrations for their institutional purposes.

• By natural or legal persons that the Data Holder uses to carry out the activities instrumental to the achievement of the Purposes (such as, for example, software suppliers, cloud partners, datacentres, IT consultants). Third parties who will access the data will do so in compliance with the current legislation on the protection of personal data and the instructions given by the Data Holder and will in any case be appointed by the Data Holder, external data processors.

A list of data processors is available at the headquarters of the owner.

Disclosure of the data

The data will not be disclosed in any case.

Rights of the interested party

The GDPR guarantees the data subject specific rights and the latter, for each treatment, can exercise the following rights:

• Right of access: you have the right to obtain a copy of the personal data we hold and which are being processed.

• Right to rectification: has the right to rectify the personal data stored by the Data Holder if they are not updated or correct.

• Right to object to the processing of personal data for commercial purposes: you can request that the Data Holder stop sending commercial communications at any time.

• Right to object to decisions based on exclusively automated processes: you can request not to be the recipient of decisions made on the basis of exclusively automated processes, including profiling activity.

• Right to revoke a consent given: you have the right to revoke the consent given for a given treatment at any time.

• Right to contact the Guarantor for the protection of personal data: you have the right to contact the Authoritỳ Guarantor for the protection of personal data if you have doubts about the processing of personal data by the Data Holder.

The Data Holder may also exercise the following rights under certain circumstances:

• Right to erasure: it may request that the Data Holder erase the personal data of the interested party if the purposes of the processing have ceased and there are no legitimate interests or legal provisions requiring their continuation.

• Right to object to processing: may request that the Data Holder cease to carry out a specific processing on personal data.

• Right to limit the processing: you have the right to request that the Data Holder limit the processing operations on the personal data of the interested party.

• Right to data portability: has the right to obtain a copy of the data in a structured format of common use and readable by an automatic device by another Data Holder.

To exercise each of the aforementioned rights, the interested party can send an e-mail or write to the following address specifying the request and providing the Data Holder with the information necessary for the correct identification of the sender (also attaching a copy of the identity document) at the following addresses:

• by post: Woolf S.r.l., via Foro Buonaparte n. 76 – 20121 – Milano

• by mail: privacy@woolfid.com

Woolf will respond within a month. If for some reason the Controller fails to respond, you

will provide a detailed explanation as to why you cannot fulfill the request.

This information may undergo changes or additions over time; therefore, we invite you to

periodically consult the website of the Data Holder- https://woolfid.com – to stay

constantly updated.

Latest version November 2021

INFORMATION ON THE PROCESSING OF PERSONAL

DATA REGISTRATION

Woolf S.r.l. (hereinafter Woolf or Data Holder) issues the following information to the interested party, i.e., the person to whom the personal data refer, pursuant to art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereinafter GDPR), relating to the protection of individuals with regard to the processing of personal data. This information is intended to describe the characteristics of the treatments carried out in relation to the personal data provided by the interested party and the measures taken to protect their rights.

This information is released on the Woolf website (https://woolfid.com, hereinafter the Site), in the “Register” section.

Holder of the treatment

The Data Holder is Woolf S.r.l. with registered office in Milan in Foro Buonaparte n. 76 – 20121 – Milan – (VAT number 10270870966) – e-mail of the Owner: privacy@woolfid.com

Data subject to processing

The Data Holder collects the following personal data:

• Personal data

• Contact details

• Residence data

• Data relating to payment

Purpose of the processing and storage time

Personal data will be processed for the following purposes:

1. Allow registration on the Site to proceed with purchases.

2. Make purchases on the Site by completing the sections relating to billing and delivery data.

3. Allow the Owner to carry out post-sales activities (e.g., management of warranty claims)

4. With your express consent, authorize the Data Holder to send periodic newsletters.

Storage time

The personal data collected for the purpose referred to in letter (a) will be kept for a maximum period of 24 months from registration.

The personal data collected for the purposes referred to in letters (b) (c) will be kept for a maximum period of 10 years and 6 months from the purchase of the product. If no purchase is made, the data will be kept for 24 months.

The personal data collected for the purposes referred to in letter (d) will be kept, unless the consent is revoked, for a period of 24 months.

Lawfulness of data processing

The processing is lawful because it is based on the following legal bases:

• Execution of the contract or pre-contractual measures adopted at the request of the interested party.

• Consent of the interested party.

Methods of processing and place of storage

Personal data are processed for the pursuit of the purposes indicated in this information, both electronically and on paper.

To achieve the purposes set out in letters (b) and (c), the Data Holder makes use of the company The Rocket Science Group, LLC, with registered office in 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (Mailchimp) which could transfer data outside the European Economic Area. Mailchimp declares to adopt adequate guarantees for this transfer pursuant to Article 46 of the GDPR (Standard contractual clauses).

Mandatory or optional nature of providing data

The provision of data for the purpose referred to in letter (a) is mandatory and the refusal to provide them makes it impossible for the Data Holder to proceed with registration on the Site.

The provision of data for the Purposes provided for in letters (b) (c) is mandatory and the refusal to provide them will make it impossible for the owner to conclude the purchase.

The provision of data for the purpose referred to in letter (d) is optional and the refusal to provide the same will make it impossible for the owner to send the newsletter.

Categories of subjects to whom personal data may be disclosed

The processing of personal data provided to us may be carried out, in compliance with the principle of the strict indispensability of the treatments:

• by the employees of the Data Holder, who act and process the data under the authority and instructions of the same, in accordance with art. 29 of the GDPR or the employees designated by the Data Holder, pursuant to art. 2 quaterdecies of Legislative Decree no. 101/2018.

• By natural or legal persons whose right to access the personal data of the interested party is recognized by legal provisions provided for by European Union law or by Italian law, such as, by way of example, competent authorities and / or supervisory bodies for the fulfilment of legal obligations, and public administrations for their institutional purposes.

• By natural or legal persons that the Data Holder uses to carry out the activities instrumental to the achievement of the Purposes (such as, for example, software suppliers, cloud partners, data centers, IT consultants). The third parties who will access the data will do so in compliance with the current legislation on the protection of personal data and the instructions given by the Data Holder and will in any case be appointed by the Data Holder, external data processors.

A list of data processors is available at the headquarters of the owner.

Disclosure of data

The data will not be disclosed in any case.

Rights of the interested party

The GDPR guarantees the data subject specific rights and the latter, for each treatment, can exercise the following rights:

• Right of access: you have the right to obtain a copy of the personal data we are in possession of, and which are being processed.

• Right to rectification: you have the right to rectify the personal data stored by the Data Holder if they are not updated or correct.

• Right to object to the processing of personal data for commercial purposes: you can request that the Data Holder stop sending commercial communications at any time.

• Right to object to decisions based on exclusively automated processes: you can request not to be the recipient of decisions made based on exclusively automated processes, including profiling activity.

• Right to revoke a consent given: you have the right to revoke the consent given for a given treatment at any time.

• Right to contact the Guarantor for the protection of personal data: you have the right to contact the Authority Guarantor for the protection of personal data if you have doubts about the processing of personal data by the Data Holder.

The Interested Party may also exercise the following rights under certain circumstances:

• Right to erasure: may request that the Data Holder erase the personal data of the interested party if the purposes of the processing have ceased and there are no legitimate interests or legal provisions that require their continuation.

• Right to object to processing: may request that the Data Holder cease to carry out a specific processing on personal data.

• Right to limit the processing: has the right to request that the Data Holder limit the processing operations on the personal data of the interested party.

• Right to data portability: has the right to obtain a copy of the data in a structured format of common use and readable by an automatic device by another Data Holder.

For each of the aforementioned rights, send an e-mail address or the following address specifying the request and send the Data Holder the information necessary for the correct identification of the holder, also attaching a copy of the identity document to the following addresses:

• By mail: Woolf S.r.l., via Foro Buonaparte n. 76 – 20121 – Milano

• By e-mail: privacy@woolfid.com

Woolf will respond within a month. If for some reason the Holder fails to respond, you will provide a detailed explanation as to why you cannot fulfill the request.

This information may undergo changes or additions over time; therefore, we invite you to periodically consult the website of the Data Holder – https://woolfid.com – to stay constantly updated.

Latest version November 2021

INFORMATION ON THE PROCESSING OF PERSONAL DATA

PRIVACY POLICY

Woolf S.r.l. (hereinafter Woolf or Data Holder) issues the following information to the interested party, i.e., the person to whom the personal data refer, pursuant to art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereinafter GDPR), relating to the protection of individuals with regard to the processing of personal data. This information is intended to describe the characteristics of the treatments carried out in relation to the personal data provided by the interested party and the measures taken to protect their rights.

This information is released on the Woolf site (https://woolfid.com, hereinafter the Site), in the “Privacy Policy” section.

Holder of the treatment

The Data holder is Woolf S.r.l. with registered office in Milan in Foro Buonaparte n. 76 – 20121 – Milan – (VAT number 10270870966) – e-mail of the Owner: privacy@woolfid.com

Data subject to processing

The Data Holder essentially collects the following personal data:

• User identification data, such as, for example, IP addresses and computer domain names

• Data relating to the use of the Site by the User

• Data provided voluntarily by the User (identification information) for access to certain services offered through the Site, for which reference is made to the specific information in the relevant sections of reference

• Cookies. The latter consist of text files that are automatically generated in the User’s computer after visiting some pages of the Site. Some of these files (session cookies) are automatically removed when the browser is closed. Another type of cookies, on the other hand, is registered and stored on the User’s computer (for example, to make the access procedure to the reserved area automatic, the User can choose that his User-id and password identification data are stored in one of these files).

For more information on cookies, their use and how to disable them, please refer to the information cookie.

Purpose of the processing and storage time

Personal data will be processed for the following purposes:

1. manage the correct use of the Site.

2. Evaluate, in statistical form, the use of the Site by users.

3. Both direct and profiled marketing by means of third-party cookies.

4. To ascertain any offenses committed by users to the detriment of third parties or to the detriment of the Owner.

5. Comply with European and national legislation, as well as the provisions of the Guarantor Authority.

The data processed for the aforementioned purposes will be stored as better specified in the relevant information (e.g. cookie information)

Lawfulness of processing

The processing is lawful because it is based on the following legal bases:

• legitimate interest of the Data Holder (managing the correct use of the website and ascertaining any offenses committed by users to the detriment of third parties or to the detriment of the Data Holder).

• Consent of the interested party expressed during the browsing experience (use of cookies).

Processing methods

Personal data are processed for the pursuit of the Purposes indicated in this information on electronic support.

Mandatory or optional nature of providing data

If the User prefers not to receive cookies, he can prevent their transmission by the website by properly configuring his Internet browser.

In some cases, however, the use of some parts of the Site may be conditioned by the storage of cookies on the User’s computer.

Categories of subjects to whom personal data may be disclosed

The processing of personal data provided to us may be carried out, in compliance with the principle of the strict indispensability of the treatments:

• by the employees of the Data Holder, who act and process the data under the authority and instructions of the same, in accordance with art. 29 of the GDPR or the employees designated by the Data Holder, pursuant to art. 2 quaterdecies of Legislative Decree no. 101/2018.

• By natural or legal persons whose right to access the personal data of the interested party is recognized by legal provisions provided for by European Union law or by Italian law, such as, by way of example, competent authorities and / or supervisory bodies for the ” fulfillment of legal obligations, and public administrations for their institutional purposes.

• By natural or legal persons that the Data Holder uses to carry out the activities instrumental to the achievement of the Purposes (such as, for example, software suppliers, cloud partners, datacenters, IT consultants). Third parties who will access the data will do so in compliance with the current legislation on the protection of personal data and the instructions given by the Data Controller and will in any case be appointed by the Data Holder, external data processors.

A list of data processors is available at the headquarters of the owner.

Dissemination of data

The data will not be disclosed in any case.

Rights of the interested party

The interested party may exercise the following rights towards the Owner:

• Right of access: you have the right to obtain a copy of the personal data we hold and which are being processed.

• Right to rectification: has the right to rectify the personal data stored by the Data Holder if they are not updated or correct.

• Right to object to the processing of personal data for commercial purposes: you can request that the Data Holder stop sending commercial communications at any time.

• Right to object to decisions based on exclusively automated processes: you can request not to be the recipient of decisions made on the basis of exclusively automated processes, including profiling activity.

• Right to revoke a consent given: you have the right to revoke the consent given for a given treatment at any time.

• Right to contact the Guarantor for the protection of personal data: you have the right to contact the Authoritỳ Guarantor for the protection of personal data if you have doubts about the processing of personal data by the Data Holder.

The interested party can also exercise the following rights under certain circumstances:

• Right to erasure: it may request that the Data Holder erase the personal data of the interested party if the purposes of the processing have ceased and there are no legitimate interests or legal provisions requiring their continuation.

• Right to object to processing: may request that the Data Holder cease to carry out a specific processing on the personal data of the interested party.

• Right to limit the processing: you have the right to request that the Data Holder limit the processing operations on the personal data of the interested party.

• Right to data portability: has the right to obtain a copy of the data in a structured format of common use and readable by an automatic device by another Data Holder.

To exercise each of the aforementioned rights, the interested party can send an e-mail or write to the following address specifying the request and providing the Data Holder with the information necessary for the correct identification of the sender (also attaching a copy of the identity document) at the following addresses:

• by post: Woolf S.r.l., via Foro Buonaparte n. 76 – 20121 – Milano

• by mail: privacy@woolfid.com

Woolf will respond within a month. If for some reason the Controller fails to respond, you

will provide a detailed explanation as to why you cannot fulfill the request.

This information may undergo changes or additions over time; therefore, we invite you to

periodically consult the website of the Data Holder- https://woolfid.com – to stay

constantly updated.

Latest version November 2021

INFORMATION ON THE PROCESSING OF PERSONAL DATA

NEWSLETTER

Woolf S.r.l. (hereinafter Woolf or Data Holder) issues the following information to the interested party, i.e., the person to whom the personal data refer, pursuant to art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereinafter GDPR), relating to the protection of individuals with regard to the processing of personal data. This information is intended to describe the characteristics of the treatments carried out in relation to the personal data provided by the interested party and the measures taken to protect their rights.

This information is released on the Woolf site (https://woolfid.com, hereinafter the Site), in the “Newsletter” section.

Holder of the treatment

The Data holder is Woolf S.r.l. with registered office in Milan in Foro Buonaparte n. 76 – 20121 – Milan – (VAT number 10270870966) – e-mail of the Owner: privacy@woolfid.com

Data object of treatment

The Data Holder essentially collects the following personal data:

• contact details

Purpose of the processing and storage time

Personal data will be processed for the following purpose:

1. with your express consent, authorize the Data Holder to send periodic newsletters.

Retention time

The personal data collected for the purposes referred to in letter (a) will be kept, unless the consent is revoked, for a period of 24 months.

Lawfulness of processing

The processing is lawful because it is based on the following legal basis:

• Consent of the interested party.

Methods of processing and place of storage

Personal data are processed for the pursuit of the Purposes indicated in this information on electronic support.

To achieve the purposes set out in letters (b) and (c), the Data Holder makes use of the company The Rocket Science Group, LLC, with registered office in 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (Mailchimp) which could transfer data outside the European Economic Area. Mailchimp declares to adopt adequate guarantees for this transfer pursuant to Article 46 of the GDPR (Standard contractual clauses).

Mandatory or optional nature of providing data

The provision of data for the Purpose provided for in letter (a) is optional and refusal to provide them will make it impossible for the Data Holder to send newsletters.

Categories of subjects to whom personal data may be disclosed

The processing of personal data provided to us may be carried out, in compliance with the principle of the strict indispensability of the treatments:

• by the employees of the Data Holder, who act and process the data under the authority and instructions of the same, in accordance with art. 29 of the GDPR or the employees designated by the Data Holder, pursuant to art. 2 quaterdecies of Legislative Decree no. 101/2018.

• By natural or legal persons whose right to access the personal data of the interested party is recognized by legal provisions provided for by European Union law or by Italian law, such as, by way of example, competent authorities and / or supervisory bodies for the ” fulfillment of legal obligations, and public administrations for their institutional purposes.

• By natural or legal persons that the Data Holder uses to carry out the activities instrumental to the achievement of the Purposes (such as, for example, software suppliers, cloud partners, datacenters, IT consultants). The third parties who will access the data will do so in compliance with the current legislation on the protection of personal data and the instructions given by the Data Controller and will in any case be appointed by the Data Holder, external data processors.

A list of data processors is available at the headquarters of the owner.

Dissemination of data

The data will not be disclosed in any case.

Rights of the interested party

The GDPR guarantees the data subject specific rights and the latter, for each treatment, can exercise the following rights:

• Right of access: you have the right to obtain a copy of the personal data we hold and which are being processed.

• Right to rectification: has the right to rectify the personal data stored by the Data Holder if they are not updated or correct.

• Right to object to the processing of personal data for commercial purposes: you can request that the Data Holder stop sending commercial communications at any time.

• Right to object to decisions based on exclusively automated processes: you can request not to be the recipient of decisions made on the basis of exclusively automated processes, including profiling activity.

• Right to revoke a consent given: you have the right to revoke the consent given for a given treatment at any time.

• Right to contact the Guarantor for the protection of personal data: you have the right to contact the Authority Guarantor for the protection of personal data if you have doubts about the processing of personal data by the Data Holder.

The Data Holder may also exercise the following rights under certain circumstances:

– Right to erasure: it may request that the Data Holder erase the personal data of the interested party if the purposes of the processing have ceased and there are no legitimate interests or legal provisions that require their continuation.

– Right to object to processing: may request that the Data Holder cease to carry out a specific processing on personal data.

– Right to limit the processing: you have the right to request that the Data Holder limit the processing operations on the personal data of the interested party.

– Right to data portability: has the right to obtain a copy of the data in a structured format of common use and readable by an automatic device by another Data Holder.

To exercise each of the aforementioned rights, the interested party can send an e-mail or write to the following address specifying the request and providing the Data Holder with the information necessary for the correct identification of the sender (also attaching a copy of the identity document) at the following addresses:

• by post: Woolf S.r.l., via Foro Buonaparte n. 76 – 20121 – Milano

• by mail: privacy@woolfid.com

Woolf will respond within a month. If for some reason the Controller fails to respond, you

will provide a detailed explanation as to why you cannot fulfil the request.

This information may undergo changes or additions over time; therefore, we invite you to

periodically consult the website of the Data Holder- https://woolfid.com – to stay

constantly updated.

Latest version November 2021